2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25038 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes ... |
| CVE-2019-25037 | HIGH | 7.5 | 2.1% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: Th... |
| CVE-2019-25036 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that th... |
| CVE-2019-25035 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vul... |
| CVE-2019-25034 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. N... |
| CVE-2019-25033 | CRITICAL | 9.8 | 1.8% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor dispu... |
| CVE-2019-25032 | CRITICAL | 9.8 | 2.2% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes ... |
| CVE-2019-25031 | MEDIUM | 5.9 | 1.3% | Apr 27, 2021 | Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle ... |
| CVE-2019-25028 | MEDIUM | 6.1 | 0.9% | Apr 23, 2021 | Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 ... |
| CVE-2019-25027 | MEDIUM | 6.1 | 0.7% | Apr 23, 2021 | Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (... |
| CVE-2019-10881 | CRITICAL | 9.8 | 1.0% | Apr 13, 2021 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.x... |
| CVE-2019-15059 | HIGH | 7.5 | 1.0% | Apr 12, 2021 | In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or... |
| CVE-2019-17656 | MEDIUM | 6.5 | 1.6% | Apr 12, 2021 | A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiPr... |
| CVE-2019-25026 | MEDIUM | 5.3 | 0.8% | Apr 6, 2021 | Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting. |
| CVE-2019-20466 | HIGH | 7.8 | 0.3% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "... |
| CVE-2019-20465 | HIGH | 7.5 | 1.5% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible (using TELNE... |
| CVE-2019-20464 | HIGH | 7.5 | 1.7% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile applic... |
| CVE-2019-20463 | HIGH | 7.5 | 1.7% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A crash and reboot can be t... |
| CVE-2019-5319 | CRITICAL | 9.8 | 2.4% | Mar 30, 2021 | A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): A... |
| CVE-2019-5317 | MEDIUM | 6.8 | 0.3% | Mar 29, 2021 | A local authentication bypass vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(... |
| CVE-2019-19354 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in ... |
| CVE-2019-19353 | HIGH | 7 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Re... |
| CVE-2019-19352 | HIGH | 7 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in ... |
| CVE-2019-19350 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as ship... |
| CVE-2019-19349 | HIGH | 7.8 | 0.3% | Mar 24, 2021 | An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-me... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now