2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-12348 | CRITICAL | 9.8 | 1.7% | May 24, 2021 | An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter. |
| CVE-2019-14827 | MEDIUM | 6.1 | 0.7% | May 17, 2021 | A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive ren... |
| CVE-2019-25044 | HIGH | 7.8 | 0.6% | May 14, 2021 | The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the... |
| CVE-2019-10062 | MEDIUM | 6.1 | 1.4% | May 13, 2021 | The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository is vulnera... |
| CVE-2019-19276 | MEDIUM | 5.3 | 1.0% | May 12, 2021 | A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions <... |
| CVE-2019-25043 | MEDIUM | 5.3 | 1.2% | May 6, 2021 | ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error a... |
| CVE-2019-25042 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. NOTE: The vendor disputes that t... |
| CVE-2019-25041 | HIGH | 7.5 | 2.1% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that... |
| CVE-2019-25040 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. NOTE: The vendor disputes that thi... |
| CVE-2019-25039 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. NOTE: The vendor disputes that... |
| CVE-2019-25038 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. NOTE: The vendor disputes ... |
| CVE-2019-25037 | HIGH | 7.5 | 2.1% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. NOTE: Th... |
| CVE-2019-25036 | HIGH | 7.5 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that th... |
| CVE-2019-25035 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vul... |
| CVE-2019-25034 | CRITICAL | 9.8 | 2.0% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. N... |
| CVE-2019-25033 | CRITICAL | 9.8 | 1.8% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor dispu... |
| CVE-2019-25032 | CRITICAL | 9.8 | 2.2% | Apr 27, 2021 | Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes ... |
| CVE-2019-25031 | MEDIUM | 5.9 | 1.3% | Apr 27, 2021 | Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle ... |
| CVE-2019-25028 | MEDIUM | 6.1 | 0.9% | Apr 23, 2021 | Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 ... |
| CVE-2019-25027 | MEDIUM | 6.1 | 0.7% | Apr 23, 2021 | Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (... |
| CVE-2019-10881 | CRITICAL | 9.8 | 1.0% | Apr 13, 2021 | Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.x... |
| CVE-2019-15059 | HIGH | 7.5 | 1.0% | Apr 12, 2021 | In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or... |
| CVE-2019-17656 | MEDIUM | 6.5 | 1.6% | Apr 12, 2021 | A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiPr... |
| CVE-2019-25026 | MEDIUM | 5.3 | 0.8% | Apr 6, 2021 | Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting. |
| CVE-2019-20466 | HIGH | 7.8 | 0.3% | Apr 2, 2021 | An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now