2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13776 | — | — | — | Nov 2, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-5863 | — | — | — | Nov 2, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19810 | CRITICAL | 10 | 4.9% | Oct 28, 2021 | Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A... |
| CVE-2019-3556 | HIGH | 8.1 | 1.7% | Oct 26, 2021 | HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handler... |
| CVE-2019-6288 | CRITICAL | 9.8 | 3.0% | Sep 22, 2021 | Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /E... |
| CVE-2019-16651 | MEDIUM | 5.3 | 1.1% | Sep 20, 2021 | An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have in... |
| CVE-2019-9060 | HIGH | 7.5 | 1.5% | Sep 17, 2021 | An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExte... |
| CVE-2019-10941 | MEDIUM | 5.3 | 0.8% | Sep 14, 2021 | A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality ... |
| CVE-2019-20101 | MEDIUM | 5.3 | 1.3% | Sep 14, 2021 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via ... |
| CVE-2019-5318 | MEDIUM | 6.5 | 0.4% | Sep 7, 2021 | A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6... |
| CVE-2019-10095 | CRITICAL | 9.8 | 5.5% | Sep 2, 2021 | bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpre... |
| CVE-2019-25052 | CRITICAL | 9.1 | 0.9% | Aug 11, 2021 | In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptogr... |
| CVE-2019-14453 | HIGH | 8.8 | 1.2% | Aug 3, 2021 | An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus an... |
| CVE-2019-9983 | — | — | — | Jul 23, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-20467 | CRITICAL | 9.8 | 3.7% | Jul 22, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The device by default has a... |
| CVE-2019-25051 | HIGH | 7.8 | 0.5% | Jul 20, 2021 | objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::Strin... |
| CVE-2019-25050 | HIGH | 7.8 | 0.4% | Jul 20, 2021 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_g... |
| CVE-2019-3752 | HIGH | 8.2 | 1.0% | Jul 16, 2021 | Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID... |
| CVE-2019-11098 | MEDIUM | 6.8 | 0.3% | Jul 14, 2021 | Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalatio... |
| CVE-2019-25049 | HIGH | 7.1 | 0.9% | Jul 1, 2021 | LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx). |
| CVE-2019-25048 | HIGH | 7.1 | 0.9% | Jul 1, 2021 | LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_... |
| CVE-2019-18906 | CRITICAL | 9.8 | 1.1% | Jun 30, 2021 | A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server ... |
| CVE-2019-25047 | MEDIUM | 6.1 | 1.1% | Jun 21, 2021 | Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling i... |
| CVE-2019-7002 | — | — | — | Jun 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-9475 | MEDIUM | 5.5 | 0.1% | Jun 11, 2021 | In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now