2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-10568——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2019-10560——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2019-19138HIGH7.5Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity.
CVE-2019-8922HIGH8.8A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there ...
CVE-2019-8921MEDIUM6.5An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by...
CVE-2019-5640MEDIUM5.3Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ...
CVE-2019-18914MEDIUM6.1A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection pag...
CVE-2019-18912HIGH7.8A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affecte...
CVE-2019-16240CRITICAL9.1A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide...
CVE-2019-18916HIGH7.8A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printe...
CVE-2019-13776——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2019-5863——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2019-19810CRITICAL10Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A...
CVE-2019-3556HIGH8.1HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handler...
CVE-2019-6288CRITICAL9.8Edgecore ECS2020 Firmware 1.0.0.0 devices allow Unauthenticated Command Injection via the command1 HTTP header to the /E...
CVE-2019-16651MEDIUM5.3An issue was discovered on Virgin Media Super Hub 3 (based on ARRIS TG2492) devices. Because their SNMP commands have in...
CVE-2019-9060HIGH7.5An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExte...
CVE-2019-10941MEDIUM5.3A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality ...
CVE-2019-20101MEDIUM5.3Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view whitelist rules via ...
CVE-2019-5318MEDIUM6.5A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software version(s): 6...
CVE-2019-10095CRITICAL9.8bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpre...
CVE-2019-25052CRITICAL9.1In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptogr...
CVE-2019-14453HIGH8.8An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus an...
CVE-2019-9983——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-20467CRITICAL9.8An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. The device by default has a...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now