2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25754 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to exec... |
| CVE-2019-25753 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute ar... |
| CVE-2019-25752 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attacker... |
| CVE-2019-25751 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attacker... |
| CVE-2019-25750 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated at... |
| CVE-2019-25749 | HIGH | 7.1 | 0.4% | Jun 19, 2026 | Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbit... |
| CVE-2019-25748 | HIGH | 8.2 | 0.4% | Jun 19, 2026 | Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute ... |
| CVE-2019-25747 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attack... |
| CVE-2019-25746 | HIGH | 7.1 | 0.2% | Jun 15, 2026 | WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attacker... |
| CVE-2019-25745 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | WordPress Plugin Google Review Slider 6.1 contains a time-based blind SQL injection vulnerability that allows unauthenti... |
| CVE-2019-25744 | MEDIUM | 5.4 | 0.2% | Jun 4, 2026 | WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attacker... |
| CVE-2019-25743 | MEDIUM | 5.4 | 0.2% | Jun 4, 2026 | WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attack... |
| CVE-2019-25742 | MEDIUM | 5.4 | 0.2% | Jun 4, 2026 | WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticat... |
| CVE-2019-25741 | CRITICAL | 9.8 | 0.6% | Jun 4, 2026 | Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the usernam... |
| CVE-2019-25740 | HIGH | 7.1 | 0.3% | Jun 4, 2026 | Joomla com_jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete ... |
| CVE-2019-25739 | MEDIUM | 5.4 | 0.2% | Jun 4, 2026 | GigToDo 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malic... |
| CVE-2019-25738 | CRITICAL | 9.8 | 0.3% | Jun 4, 2026 | WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated at... |
| CVE-2019-25737 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Live Chat Unlimited 2.8.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to ... |
| CVE-2019-25736 | HIGH | 8.6 | 0.1% | Jun 4, 2026 | LabF nfsAxe 3.7 Ping Client contains a buffer overflow vulnerability that allows local attackers to execute arbitrary co... |
| CVE-2019-25735 | HIGH | 8.4 | 0.1% | Jun 4, 2026 | AllPlayer 7.4 contains a local buffer overflow vulnerability in URL handling that allows attackers to overwrite structur... |
| CVE-2019-25734 | MEDIUM | 5.1 | 0.9% | Jun 4, 2026 | Contact Form by WD 1.13.1 contains a cross-site request forgery vulnerability combined with local file inclusion that al... |
| CVE-2019-25733 | HIGH | 8.6 | 0.1% | Jun 4, 2026 | NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attacker... |
| CVE-2019-25732 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary ... |
| CVE-2019-25731 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject m... |
| CVE-2019-25730 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now