2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-16721 | MEDIUM | 6.5 | 0.5% | Sep 23, 2019 | NoneCMS v1.3 has CSRF in public/index.php/admin/admin/dele.html, as demonstrated by deleting the admin user. |
| CVE-2019-16720 | HIGH | 7.5 | 1.4% | Sep 23, 2019 | ZZZCMS zzzphp v1.7.2 does not properly restrict file upload in plugins/ueditor/php/controller.php?upfolder=news&action=c... |
| CVE-2019-16719 | MEDIUM | 6.5 | 0.5% | Sep 23, 2019 | WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS. |
| CVE-2019-16718 | HIGH | 7.8 | 2.3% | Sep 23, 2019 | In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a craft... |
| CVE-2019-16714 | HIGH | 7.5 | 2.7% | Sep 23, 2019 | In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information... |
| CVE-2019-16713 | MEDIUM | 6.5 | 2.5% | Sep 23, 2019 | ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c. |
| CVE-2019-16712 | MEDIUM | 6.5 | 2.6% | Sep 23, 2019 | ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image. |
| CVE-2019-16711 | MEDIUM | 6.5 | 2.5% | Sep 23, 2019 | ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c. |
| CVE-2019-16710 | MEDIUM | 6.5 | 2.5% | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c. |
| CVE-2019-16709 | MEDIUM | 6.5 | 2.8% | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. |
| CVE-2019-16708 | MEDIUM | 6.5 | 2.5% | Sep 23, 2019 | ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage. |
| CVE-2019-16707 | MEDIUM | 6.5 | 1.7% | Sep 23, 2019 | Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. |
| CVE-2019-16691 | — | — | — | Sep 23, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-16706 | HIGH | 8.8 | 0.6% | Sep 23, 2019 | kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php. |
| CVE-2019-16705 | CRITICAL | 9.1 | 1.7% | Sep 23, 2019 | Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in lib... |
| CVE-2019-16704 | MEDIUM | 4.8 | 0.8% | Sep 23, 2019 | admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. |
| CVE-2019-16703 | MEDIUM | 6.1 | 0.8% | Sep 23, 2019 | admin/infolist_add.php in PHPMyWind 5.6 has stored XSS. |
| CVE-2019-16702 | CRITICAL | 9.8 | 10.7% | Sep 23, 2019 | Integard Pro 2.2.0.9026 allows remote attackers to execute arbitrary code via a buffer overflow involving a long NoJs pa... |
| CVE-2019-16696 | CRITICAL | 9.8 | 1.9% | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used. |
| CVE-2019-16695 | CRITICAL | 9.8 | 1.9% | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used. |
| CVE-2019-16694 | CRITICAL | 9.8 | 1.9% | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used... |
| CVE-2019-16693 | CRITICAL | 9.8 | 4.3% | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. |
| CVE-2019-16692 | CRITICAL | 9.8 | 10.3% | Sep 22, 2019 | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is us... |
| CVE-2019-16681 | MEDIUM | 4.7 | 0.7% | Sep 21, 2019 | The Traveloka application 3.14.0 for Android exports com.traveloka.android.activity.common.WebViewActivity, leading to t... |
| CVE-2019-16680 | MEDIUM | 4.3 | 2.1% | Sep 21, 2019 | An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename cont... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now