2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25064 | HIGH | 8.8 | 0.4% | Jun 9, 2022 | A vulnerability was found in CoreHR Core Portal up to 27.0.7. It has been classified as problematic. Affected is an unkn... |
| CVE-2019-25063 | HIGH | 7.8 | 0.2% | Jun 8, 2022 | A vulnerability was found in Sricam IP CCTV Camera. It has been classified as critical. Affected is an unknown function ... |
| CVE-2019-25062 | HIGH | 7.8 | 0.3% | Jun 8, 2022 | A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processin... |
| CVE-2019-9972 | HIGH | 8.8 | 1.6% | Jun 7, 2022 | PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run... |
| CVE-2019-9971 | HIGH | 8.8 | 1.6% | Jun 7, 2022 | PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privile... |
| CVE-2019-12351 | CRITICAL | 9.8 | 1.4% | Jun 2, 2022 | An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing... |
| CVE-2019-12350 | CRITICAL | 9.8 | 1.4% | Jun 2, 2022 | An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trail... |
| CVE-2019-12349 | CRITICAL | 9.8 | 1.4% | Jun 2, 2022 | An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter. |
| CVE-2019-25061 | HIGH | 7.5 | 1.7% | May 18, 2022 | The random_password_generator (aka RandomPasswordGenerator) gem through 1.0.0 for Ruby uses Kernel#rand to generate pass... |
| CVE-2019-25060 | MEDIUM | 5.3 | 1.7% | May 9, 2022 | The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on ... |
| CVE-2019-12254 | CRITICAL | 9.8 | 1.2% | May 6, 2022 | In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to a... |
| CVE-2019-25059 | HIGH | 7.8 | 1.1% | Apr 25, 2022 | Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-... |
| CVE-2019-6834 | HIGH | 7.8 | 0.9% | Apr 13, 2022 | A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary cod... |
| CVE-2019-14839 | HIGH | 7.5 | 1.0% | Apr 1, 2022 | It was observed that while login into Business-central console, HTTP request discloses sensitive information like userna... |
| CVE-2019-9564 | CRITICAL | 9.8 | 1.4% | Mar 30, 2022 | A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and co... |
| CVE-2019-12266 | CRITICAL | 9.8 | 1.2% | Mar 30, 2022 | Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on... |
| CVE-2019-25058 | HIGH | 7.8 | 0.4% | Feb 24, 2022 | An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user... |
| CVE-2019-4352 | LOW | 2.4 | 0.2% | Feb 16, 2022 | IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494. |
| CVE-2019-4351 | MEDIUM | 4.6 | 0.2% | Feb 16, 2022 | IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the devi... |
| CVE-2019-4291 | MEDIUM | 6.5 | 0.4% | Feb 16, 2022 | IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protec... |
| CVE-2019-25057 | HIGH | 7.5 | 0.8% | Feb 14, 2022 | In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer. |
| CVE-2019-16864 | HIGH | 8.8 | 7.2% | Feb 14, 2022 | CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveragin... |
| CVE-2019-25056 | MEDIUM | 5.3 | 0.9% | Jan 26, 2022 | In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blo... |
| CVE-2019-20082 | CRITICAL | 9.8 | 2.0% | Dec 28, 2021 | ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LA... |
| CVE-2019-25055 | HIGH | 7.5 | 1.2% | Dec 27, 2021 | An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreig... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now