2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-3697 | HIGH | 7.8 | 0.5% | Jan 24, 2020 | UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local atta... |
| CVE-2019-3694 | HIGH | 7.8 | 0.4% | Jan 24, 2020 | A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local ... |
| CVE-2019-3693 | HIGH | 7.8 | 0.4% | Jan 24, 2020 | A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise ... |
| CVE-2019-3692 | HIGH | 7.8 | 0.5% | Jan 24, 2020 | The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate ... |
| CVE-2019-19898 | HIGH | 7.5 | 0.7% | Jan 23, 2020 | In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the ... |
| CVE-2019-19895 | HIGH | 7.8 | 0.4% | Jan 23, 2020 | In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system... |
| CVE-2019-19893 | HIGH | 7.5 | 2.5% | Jan 23, 2020 | In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated... |
| CVE-2019-16514 | HIGH | 7.2 | 4.2% | Jan 23, 2020 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remo... |
| CVE-2019-16513 | HIGH | 8.8 | 1.0% | Jan 23, 2020 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to se... |
| CVE-2019-15712 | HIGH | 7.2 | 1.0% | Jan 23, 2020 | An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow admi... |
| CVE-2019-14888 | HIGH | 7.5 | 2.1% | Jan 23, 2020 | A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker... |
| CVE-2019-3691 | HIGH | 7.8 | 0.5% | Jan 23, 2020 | A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE... |
| CVE-2019-17202 | HIGH | 7.8 | 0.3% | Jan 23, 2020 | FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to el... |
| CVE-2019-17201 | HIGH | 7.8 | 0.3% | Jan 23, 2020 | FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to el... |
| CVE-2019-18898 | HIGH | 7.8 | 0.5% | Jan 23, 2020 | UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; ope... |
| CVE-2019-19835 | HIGH | 7.5 | 1.8% | Jan 23, 2020 | SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of serv... |
| CVE-2019-20397 | HIGH | 8.8 | 2.5% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminate... |
| CVE-2019-20394 | HIGH | 8.8 | 2.8% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notifica... |
| CVE-2019-20393 | HIGH | 8.8 | 2.8% | Jan 22, 2020 | A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applicat... |
| CVE-2019-19834 | HIGH | 7.2 | 2.2% | Jan 22, 2020 | Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jail... |
| CVE-2019-16792 | HIGH | 7.5 | 2.1% | Jan 22, 2020 | Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would heade... |
| CVE-2019-5647 | HIGH | 7.1 | 0.3% | Jan 22, 2020 | The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after ... |
| CVE-2019-6858 | HIGH | 7.8 | 0.4% | Jan 22, 2020 | A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1)... |
| CVE-2019-20388 | HIGH | 7.5 | 4.4% | Jan 21, 2020 | xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. |
| CVE-2019-20387 | HIGH | 7.5 | 2.3% | Jan 21, 2020 | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose lengt... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now