2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6784 | MEDIUM | 6.1 | 1.1% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor... |
| CVE-2019-6783 | HIGH | 8.8 | 5.5% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor... |
| CVE-2019-6782 | HIGH | 7.5 | 1.8% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor... |
| CVE-2019-16190 | CRITICAL | 9.8 | 2.7% | Sep 9, 2019 | SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 de... |
| CVE-2019-16173 | MEDIUM | 5.4 | 3.7% | Sep 9, 2019 | LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example,... |
| CVE-2019-16172 | MEDIUM | 5.4 | 4.6% | Sep 9, 2019 | LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, Su... |
| CVE-2019-11605 | HIGH | 7.5 | 1.2% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.... |
| CVE-2019-11549 | MEDIUM | 6.5 | 1.3% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9... |
| CVE-2019-11548 | MEDIUM | 5.4 | 0.7% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unpri... |
| CVE-2019-11547 | MEDIUM | 6.1 | 1.1% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x bef... |
| CVE-2019-11546 | MEDIUM | 5.3 | 0.6% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x bef... |
| CVE-2019-11545 | MEDIUM | 4.3 | 1.0% | Sep 9, 2019 | An issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11.10.2. It allows Informat... |
| CVE-2019-11544 | MEDIUM | 4.3 | 1.0% | Sep 9, 2019 | An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before... |
| CVE-2019-5473 | HIGH | 7.2 | 1.7% | Sep 9, 2019 | An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitL... |
| CVE-2019-5471 | MEDIUM | 5.4 | 0.8% | Sep 9, 2019 | An input validation and output encoding issue was discovered in the GitLab email notification feature which could result... |
| CVE-2019-5467 | MEDIUM | 5.4 | 0.7% | Sep 9, 2019 | An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result i... |
| CVE-2019-5463 | MEDIUM | 5.3 | 1.9% | Sep 9, 2019 | An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of t... |
| CVE-2019-5483 | MEDIUM | 5.3 | 1.2% | Sep 9, 2019 | Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users. |
| CVE-2019-5461 | LOW | 3.5 | 1.0% | Sep 9, 2019 | An input validation problem was discovered in the GitHub service integration which could result in an attacker being abl... |
| CVE-2019-16168 | MEDIUM | 6.5 | 4.4% | Sep 9, 2019 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missin... |
| CVE-2019-16167 | MEDIUM | 5.5 | 1.5% | Sep 9, 2019 | sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c. |
| CVE-2019-16166 | MEDIUM | 6.5 | 1.1% | Sep 9, 2019 | GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c. |
| CVE-2019-16165 | MEDIUM | 6.5 | 1.1% | Sep 9, 2019 | GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. |
| CVE-2019-16164 | MEDIUM | 6.5 | 1.1% | Sep 9, 2019 | MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c. |
| CVE-2019-16163 | HIGH | 7.5 | 2.8% | Sep 9, 2019 | Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now