2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-25051 | HIGH | 7.8 | 0.5% | Jul 20, 2021 | objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::Strin... |
| CVE-2019-25050 | HIGH | 7.8 | 0.4% | Jul 20, 2021 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_g... |
| CVE-2019-3752 | HIGH | 8.2 | 1.0% | Jul 16, 2021 | Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance (ID... |
| CVE-2019-11098 | MEDIUM | 6.8 | 0.3% | Jul 14, 2021 | Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalatio... |
| CVE-2019-25049 | HIGH | 7.1 | 0.9% | Jul 1, 2021 | LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx). |
| CVE-2019-25048 | HIGH | 7.1 | 0.9% | Jul 1, 2021 | LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_... |
| CVE-2019-18906 | CRITICAL | 9.8 | 1.1% | Jun 30, 2021 | A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server ... |
| CVE-2019-25047 | MEDIUM | 6.1 | 1.1% | Jun 21, 2021 | Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling i... |
| CVE-2019-7002 | — | — | — | Jun 21, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2019-9475 | MEDIUM | 5.5 | 0.1% | Jun 11, 2021 | In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead... |
| CVE-2019-25046 | MEDIUM | 6.1 | 1.8% | Jun 10, 2021 | The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document. |
| CVE-2019-17567 | MEDIUM | 5.3 | 60.3% | Jun 10, 2021 | Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by ... |
| CVE-2019-25045 | HIGH | 7.8 | 0.5% | Jun 7, 2021 | An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_s... |
| CVE-2019-14584 | HIGH | 7.8 | 0.3% | Jun 3, 2021 | Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege... |
| CVE-2019-12067 | MEDIUM | 6.5 | 0.3% | Jun 2, 2021 | The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when... |
| CVE-2019-4730 | HIGH | 7.1 | 2.0% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML da... |
| CVE-2019-4724 | HIGH | 7.5 | 2.4% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorre... |
| CVE-2019-4723 | HIGH | 7.5 | 2.4% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorre... |
| CVE-2019-4722 | MEDIUM | 4.3 | 1.4% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due t... |
| CVE-2019-4653 | MEDIUM | 5.4 | 0.8% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2019-4471 | MEDIUM | 6.5 | 1.0% | Jun 1, 2021 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure ... |
| CVE-2019-25030 | MEDIUM | 5.5 | 0.2% | May 26, 2021 | In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or ke... |
| CVE-2019-25029 | CRITICAL | 9.8 | 2.7% | May 26, 2021 | In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host o... |
| CVE-2019-4588 | HIGH | 7.8 | 0.3% | May 26, 2021 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local us... |
| CVE-2019-14836 | HIGH | 8.8 | 0.6% | May 26, 2021 | A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An at... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now