2019 CVE Vulnerabilities

17,623 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-2727Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponen...
CVE-2019-2672Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su...
CVE-2019-2668Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su...
CVE-2019-2666Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). Su...
CVE-2019-2599Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet...
CVE-2019-2569Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, ...
CVE-2019-2561Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operati...
CVE-2019-2484Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5...
CVE-2019-12164ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution.
CVE-2019-11273MEDIUM4.3Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable...
CVE-2019-14243HIGH7.5headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin throu...
CVE-2019-1010201Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updatePr...
CVE-2019-1010200Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is a...
CVE-2019-1010199ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). The impact is: JavaScrpit is refl...
CVE-2019-13570The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.
CVE-2019-12162Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which c...
CVE-2019-1010173Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Js...
CVE-2019-9821A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results...
CVE-2019-9820A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. This results i...
CVE-2019-9819A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a poten...
CVE-2019-9818HIGH8.3A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can ...
CVE-2019-9817Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal imag...
CVE-2019-9816A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, al...
CVE-2019-9815If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has ...
CVE-2019-9814Mozilla developers and community members reported memory safety bugs present in Firefox 66. Some of these bugs showed ev...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now