2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-11189 | HIGH | 7.5 | 1.1% | Feb 20, 2020 | Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) i... |
| CVE-2019-4752 | HIGH | 8.8 | 1.3% | Feb 20, 2020 | IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vu... |
| CVE-2019-19741 | HIGH | 7.8 | 0.7% | Feb 20, 2020 | Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipul... |
| CVE-2019-1950 | HIGH | 8.4 | 0.3% | Feb 19, 2020 | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized acce... |
| CVE-2019-12437 | HIGH | 8.8 | 0.7% | Feb 19, 2020 | In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL... |
| CVE-2019-18352 | HIGH | 8.2 | 0.4% | Feb 18, 2020 | Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices befo... |
| CVE-2019-10790 | HIGH | 7.5 | 1.8% | Feb 17, 2020 | taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional pr... |
| CVE-2019-18998 | HIGH | 7.1 | 0.8% | Feb 17, 2020 | Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior... |
| CVE-2019-20456 | HIGH | 7.8 | 0.7% | Feb 16, 2020 | Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an ... |
| CVE-2019-5187 | HIGH | 8.8 | 3.6% | Feb 14, 2020 | An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of... |
| CVE-2019-13967 | HIGH | 7.5 | 1.3% | Feb 14, 2020 | iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to ... |
| CVE-2019-11215 | HIGH | 8.1 | 1.2% | Feb 14, 2020 | In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be acco... |
| CVE-2019-6193 | HIGH | 7.5 | 1.0% | Feb 14, 2020 | An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 tha... |
| CVE-2019-20045 | HIGH | 7.5 | 1.2% | Feb 14, 2020 | The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and pri... |
| CVE-2019-19879 | HIGH | 7.5 | 1.2% | Feb 14, 2020 | HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2. |
| CVE-2019-20454 | HIGH | 7.5 | 1.6% | Feb 14, 2020 | An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match speciall... |
| CVE-2019-4592 | HIGH | 7.5 | 1.3% | Feb 13, 2020 | IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operati... |
| CVE-2019-2200 | HIGH | 7.3 | 0.2% | Feb 13, 2020 | In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permiss... |
| CVE-2019-5322 | HIGH | 7.5 | 1.2% | Feb 13, 2020 | A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 381... |
| CVE-2019-18915 | HIGH | 7.8 | 1.5% | Feb 13, 2020 | A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version... |
| CVE-2019-17519 | HIGH | 8.8 | 1.2% | Feb 12, 2020 | The Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not properly restrict the Link L... |
| CVE-2019-4427 | HIGH | 7.5 | 0.5% | Feb 12, 2020 | IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to ex... |
| CVE-2019-19921 | HIGH | 7 | 0.5% | Feb 12, 2020 | runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_... |
| CVE-2019-19194 | HIGH | 8.8 | 1.0% | Feb 12, 2020 | The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before No... |
| CVE-2019-13946 | HIGH | 7.5 | 1.4% | Feb 11, 2020 | Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitima... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now