2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18194 | HIGH | 7.8 | 2.2% | Jan 10, 2020 | TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junctio... |
| CVE-2019-14306 | HIGH | 7.5 | 1.4% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). |
| CVE-2019-14304 | HIGH | 8.8 | 0.7% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices allow CSRF. |
| CVE-2019-14301 | HIGH | 7.5 | 1.4% | Jan 10, 2020 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). |
| CVE-2019-19820 | HIGH | 7.8 | 0.7% | Jan 10, 2020 | An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an ... |
| CVE-2019-4508 | HIGH | 7.8 | 0.3% | Jan 10, 2020 | IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local a... |
| CVE-2019-20373 | HIGH | 7.8 | 0.4% | Jan 9, 2020 | LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the ... |
| CVE-2019-20184 | HIGH | 7.8 | 1.6% | Jan 9, 2020 | KeePass 2.4.1 allows CSV injection in the title field of a CSV export. |
| CVE-2019-20183 | HIGH | 7.2 | 6.7% | Jan 9, 2020 | uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension ... |
| CVE-2019-20179 | HIGH | 8.8 | 1.0% | Jan 9, 2020 | SOPlanning 1.45 has SQL injection via the user_list.php "by" parameter. |
| CVE-2019-6319 | HIGH | 8.1 | 0.6% | Jan 9, 2020 | HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmw... |
| CVE-2019-6320 | HIGH | 8.1 | 0.6% | Jan 9, 2020 | Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22... |
| CVE-2019-14920 | HIGH | 8.8 | 2.2% | Jan 9, 2020 | Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privilege... |
| CVE-2019-14919 | HIGH | 7.8 | 1.5% | Jan 9, 2020 | An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network atta... |
| CVE-2019-20224 | HIGH | 8.8 | 50.6% | Jan 9, 2020 | netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary O... |
| CVE-2019-19494 | HIGH | 8.8 | 22.9% | Jan 9, 2020 | Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker ... |
| CVE-2019-17025 | HIGH | 8.8 | 1.3% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corru... |
| CVE-2019-17024 | HIGH | 8.8 | 2.5% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evi... |
| CVE-2019-17019 | HIGH | 8.8 | 1.0% | Jan 8, 2020 | When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by P... |
| CVE-2019-17017 | HIGH | 8.8 | 2.5% | Jan 8, 2020 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presum... |
| CVE-2019-17015 | HIGH | 8.8 | 1.8% | Jan 8, 2020 | During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and... |
| CVE-2019-17014 | HIGH | 7.4 | 1.1% | Jan 8, 2020 | If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-d... |
| CVE-2019-17013 | HIGH | 8.8 | 0.8% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corru... |
| CVE-2019-17012 | HIGH | 8.8 | 2.0% | Jan 8, 2020 | Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evi... |
| CVE-2019-17011 | HIGH | 7.5 | 1.5% | Jan 8, 2020 | Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could ca... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now