2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18193 | HIGH | 7.5 | 0.3% | Feb 3, 2020 | In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain co... |
| CVE-2019-13000 | HIGH | 7.5 | 2.2% | Jan 31, 2020 | Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states... |
| CVE-2019-12999 | HIGH | 7.5 | 2.2% | Jan 31, 2020 | Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control. |
| CVE-2019-12998 | HIGH | 7.5 | 1.8% | Jan 31, 2020 | c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md ... |
| CVE-2019-4720 | HIGH | 7.5 | 2.2% | Jan 31, 2020 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specia... |
| CVE-2019-19550 | HIGH | 7.5 | 1.9% | Jan 31, 2020 | Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of a... |
| CVE-2019-20358 | HIGH | 7.8 | 4.6% | Jan 30, 2020 | Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to... |
| CVE-2019-18634 | HIGH | 7.8 | 19.4% | Jan 29, 2020 | In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the ... |
| CVE-2019-7656 | HIGH | 7.8 | 0.5% | Jan 29, 2020 | A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to e... |
| CVE-2019-4707 | HIGH | 7.1 | 1.4% | Jan 28, 2020 | IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when proces... |
| CVE-2019-4639 | HIGH | 7.5 | 0.8% | Jan 28, 2020 | IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decry... |
| CVE-2019-4620 | HIGH | 7.8 | 0.4% | Jan 28, 2020 | IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validat... |
| CVE-2019-5472 | HIGH | 7.5 | 1.9% | Jan 28, 2020 | An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and mai... |
| CVE-2019-5470 | HIGH | 7.5 | 1.6% | Jan 28, 2020 | An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboa... |
| CVE-2019-5468 | HIGH | 8.8 | 2.1% | Jan 28, 2020 | An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash ... |
| CVE-2019-5462 | HIGH | 8.8 | 2.5% | Jan 28, 2020 | A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once owner... |
| CVE-2019-15590 | HIGH | 7.5 | 1.1% | Jan 28, 2020 | An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edi... |
| CVE-2019-15583 | HIGH | 7.5 | 1.4% | Jan 28, 2020 | An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise E... |
| CVE-2019-13521 | HIGH | 7.8 | 5.6% | Jan 27, 2020 | A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software versi... |
| CVE-2019-13519 | HIGH | 7.8 | 5.6% | Jan 27, 2020 | A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software versi... |
| CVE-2019-11288 | HIGH | 7 | 0.3% | Jan 27, 2020 | In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versio... |
| CVE-2019-19824 | HIGH | 8.8 | 25.1% | Jan 27, 2020 | On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCm... |
| CVE-2019-19823 | HIGH | 7.5 | 6.4% | Jan 27, 2020 | A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext admin... |
| CVE-2019-19822 | HIGH | 7.5 | 8.7% | Jan 27, 2020 | A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attacker... |
| CVE-2019-17099 | HIGH | 7.8 | 0.7% | Jan 27, 2020 | An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now