2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18785 | HIGH | 7.5 | 1.0% | Mar 20, 2020 | SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials. |
| CVE-2019-16108 | HIGH | 7.5 | 1.1% | Mar 20, 2020 | phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. |
| CVE-2019-16071 | HIGH | 8.8 | 1.0% | Mar 20, 2020 | Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability t... |
| CVE-2019-16068 | HIGH | 8.8 | 0.9% | Mar 19, 2020 | A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to tri... |
| CVE-2019-16063 | HIGH | 7.5 | 0.7% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an atta... |
| CVE-2019-16338 | HIGH | 7.8 | 1.0% | Mar 19, 2020 | The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file. |
| CVE-2019-16337 | HIGH | 7.8 | 1.1% | Mar 19, 2020 | The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file. |
| CVE-2019-16067 | HIGH | 7.5 | 0.8% | Mar 19, 2020 | NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web appli... |
| CVE-2019-16066 | HIGH | 8.8 | 2.2% | Mar 19, 2020 | An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 an... |
| CVE-2019-16065 | HIGH | 8.8 | 2.8% | Mar 19, 2020 | A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows a... |
| CVE-2019-16061 | HIGH | 8.8 | 1.0% | Mar 19, 2020 | A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable pe... |
| CVE-2019-15656 | HIGH | 7.5 | 1.3% | Mar 19, 2020 | D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted reques... |
| CVE-2019-15655 | HIGH | 7.5 | 1.4% | Mar 19, 2020 | D-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted /romfile.cfg request to ... |
| CVE-2019-15654 | HIGH | 7.5 | 1.5% | Mar 19, 2020 | Comba AC2400 devices are prone to password disclosure via a simple crafted /09/business/upgrade/upcfgAction.php?download... |
| CVE-2019-15653 | HIGH | 7.5 | 0.8% | Mar 19, 2020 | Comba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure authentication mechanism.... |
| CVE-2019-11361 | HIGH | 8.8 | 3.0% | Mar 19, 2020 | Zoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly, allowing for privilege escala... |
| CVE-2019-16012 | HIGH | 8.1 | 54.2% | Mar 19, 2020 | A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to... |
| CVE-2019-18979 | HIGH | 7.8 | 0.4% | Mar 18, 2020 | Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation u... |
| CVE-2019-3762 | HIGH | 7.5 | 0.6% | Mar 18, 2020 | Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulner... |
| CVE-2019-20529 | HIGH | 7.5 | 1.3% | Mar 18, 2020 | In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were b... |
| CVE-2019-18582 | HIGH | 7.2 | 4.6% | Mar 18, 2020 | Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to pat... |
| CVE-2019-18581 | HIGH | 7.2 | 3.9% | Mar 18, 2020 | Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to pat... |
| CVE-2019-12769 | HIGH | 8.8 | 0.8% | Mar 18, 2020 | SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forg... |
| CVE-2019-12123 | HIGH | 8.8 | 1.3% | Mar 18, 2020 | An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an auth... |
| CVE-2019-12121 | HIGH | 7.5 | 0.7% | Mar 18, 2020 | An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSi... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now