2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20637 | HIGH | 7.5 | 1.7% | Apr 8, 2020 | An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does... |
| CVE-2019-15789 | HIGH | 7.8 | 0.5% | Apr 8, 2020 | Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to th... |
| CVE-2019-17657 | HIGH | 7.5 | 2.4% | Apr 7, 2020 | An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer ... |
| CVE-2019-13559 | HIGH | 7.8 | 0.3% | Apr 7, 2020 | GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the cont... |
| CVE-2019-13554 | HIGH | 8.8 | 1.0% | Apr 7, 2020 | GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using g... |
| CVE-2019-4391 | HIGH | 8.2 | 1.2% | Apr 7, 2020 | HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data |
| CVE-2019-19699 | HIGH | 7.2 | 27.5% | Apr 6, 2020 | There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers mi... |
| CVE-2019-18904 | HIGH | 7.5 | 1.5% | Apr 3, 2020 | A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, S... |
| CVE-2019-19348 | HIGH | 7 | 0.3% | Apr 2, 2020 | An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting ... |
| CVE-2019-19346 | HIGH | 7 | 0.3% | Apr 2, 2020 | An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecti... |
| CVE-2019-19097 | HIGH | 7.5 | 0.7% | Apr 2, 2020 | ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such ... |
| CVE-2019-19094 | HIGH | 7.6 | 0.9% | Apr 2, 2020 | Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks ag... |
| CVE-2019-14868 | HIGH | 7.8 | 1.4% | Apr 2, 2020 | In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use t... |
| CVE-2019-3945 | HIGH | 7.5 | 1.1% | Apr 1, 2020 | Web server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime" being sent to control ... |
| CVE-2019-3944 | HIGH | 7.5 | 1.5% | Apr 1, 2020 | Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect... |
| CVE-2019-3942 | HIGH | 7.5 | 1.4% | Apr 1, 2020 | Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files... |
| CVE-2019-9507 | HIGH | 7.2 | 2.1% | Mar 30, 2020 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the applica... |
| CVE-2019-17561 | HIGH | 7.5 | 1.6% | Mar 30, 2020 | The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded... |
| CVE-2019-7755 | HIGH | 8.8 | 2.1% | Mar 30, 2020 | In webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported MT940 bank statement fil... |
| CVE-2019-5105 | HIGH | 7.5 | 2.2% | Mar 26, 2020 | An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solu... |
| CVE-2019-7630 | HIGH | 7.2 | 3.1% | Mar 25, 2020 | An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instr... |
| CVE-2019-7245 | HIGH | 7.2 | 2.4% | Mar 25, 2020 | An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instructi... |
| CVE-2019-7244 | HIGH | 7.2 | 2.4% | Mar 25, 2020 | An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCT... |
| CVE-2019-7240 | HIGH | 7.2 | 2.4% | Mar 25, 2020 | An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instructio... |
| CVE-2019-19127 | HIGH | 8.1 | 1.3% | Mar 25, 2020 | An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component of Tribal SITS in its de... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now