2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15143 | MEDIUM | 5.5 | 1.7% | Aug 18, 2019 | In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustio... |
| CVE-2019-15142 | MEDIUM | 5.5 | 1.8% | Aug 18, 2019 | In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application... |
| CVE-2019-15141 | MEDIUM | 6.5 | 2.2% | Aug 18, 2019 | WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application c... |
| CVE-2019-15140 | — | — | 4.1% | Aug 18, 2019 | coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and applic... |
| CVE-2019-15139 | — | — | 3.5% | Aug 18, 2019 | The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to ca... |
| CVE-2019-15130 | — | — | 2.4% | Aug 18, 2019 | The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any f... |
| CVE-2019-15129 | — | — | 1.3% | Aug 18, 2019 | The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all c... |
| CVE-2019-15137 | — | — | 1.3% | Aug 18, 2019 | The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (in... |
| CVE-2019-15136 | — | — | 1.4% | Aug 18, 2019 | The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participa... |
| CVE-2019-15135 | — | — | 2.0% | Aug 18, 2019 | The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the ca... |
| CVE-2019-15134 | — | — | 1.5% | Aug 17, 2019 | RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all me... |
| CVE-2019-15133 | MEDIUM | 6.5 | 1.5% | Aug 17, 2019 | In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp ... |
| CVE-2019-15132 | MEDIUM | 5.3 | 2.0% | Aug 17, 2019 | Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernam... |
| CVE-2019-14937 | — | — | 1.4% | Aug 17, 2019 | REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=... |
| CVE-2019-13069 | — | — | 1.2% | Aug 17, 2019 | extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The ... |
| CVE-2019-15116 | MEDIUM | 6.1 | 1.0% | Aug 16, 2019 | The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging. |
| CVE-2019-15115 | — | — | 0.7% | Aug 16, 2019 | The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF. |
| CVE-2019-15114 | — | — | 0.7% | Aug 16, 2019 | The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF. |
| CVE-2019-15113 | — | — | 0.7% | Aug 16, 2019 | The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF. |
| CVE-2019-8063 | — | — | 3.7% | Aug 16, 2019 | Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerabil... |
| CVE-2019-7964 | — | — | 10.2% | Aug 16, 2019 | Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation coul... |
| CVE-2019-7959 | — | — | 6.5% | Aug 16, 2019 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnera... |
| CVE-2019-7958 | — | — | 4.4% | Aug 16, 2019 | Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Succ... |
| CVE-2019-7957 | — | — | 3.7% | Aug 16, 2019 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitat... |
| CVE-2019-5477 | CRITICAL | 9.8 | 5.9% | Aug 16, 2019 | A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Rub... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now