2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-25729CRITICAL9.8PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute ...
CVE-2019-25728HIGH8.2Care2x 2.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL...
CVE-2019-25727CRITICAL9.8WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated atta...
CVE-2019-25726HIGH8.8All in One Video Downloader 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute...
CVE-2019-25720HIGH7.1Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerabil...
CVE-2019-25724HIGH7.1Dräger Infinity M300 patient worn monitors with software version VG2.x and earlier contain a network-based denial of ser...
CVE-2019-25723MEDIUM6.3Dräger Perseus A500 software versions 2.00 through 2.02 contains an improper input handling vulnerability that allows ex...
CVE-2019-25722HIGH7.6Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentia...
CVE-2019-25721HIGH7.1Dräger Infinity M300 patient worn monitors with software version VG2.3.1 and earlier contain a network-based denial of s...
CVE-2019-25719HIGH8.8Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0...
CVE-2019-25717MEDIUM5.3Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information disclosure vulnerability that allows ...
CVE-2019-25718HIGH7.8Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk ...
CVE-2019-25716HIGH7.5Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote...
CVE-2019-25714CRITICAL9.3Seeyon OA A8 contains an unauthenticated arbitrary file write vulnerability in the /seeyon/htmlofficeservlet endpoint th...
CVE-2019-25713HIGH8.1MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL querie...
CVE-2019-25712MEDIUM5.5BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers t...
CVE-2019-25711MEDIUM5.5SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the appli...
CVE-2019-25710CRITICAL9.1Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint tha...
CVE-2019-25709CRITICAL9.8CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by access...
CVE-2019-25708LOW3.5Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change admini...
CVE-2019-25707HIGH7.1eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL qu...
CVE-2019-25706HIGH8.7Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom...
CVE-2019-25705HIGH7.8Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or e...
CVE-2019-25703HIGH8.8ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipul...
CVE-2019-25701HIGH7.8Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that a...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now