2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2019-19585HIGH7.8An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. A...
CVE-2019-19509HIGH8.8An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a ...
CVE-2019-16274HIGH7.5DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
CVE-2019-9469HIGH7.8In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could...
CVE-2019-9468HIGH7.8In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local ...
CVE-2019-15985HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15984HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15982HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15981HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15980HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center N...
CVE-2019-15979HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15978HIGH7.2Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an a...
CVE-2019-15977HIGH7.5Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an una...
CVE-2019-5990HIGH7.5Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to obtain a login password v...
CVE-2019-5987HIGH8.8Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated attackers to execute ar...
CVE-2019-20352HIGH7.1In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free whe...
CVE-2019-20155HIGH8.8An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A...
CVE-2019-20004HIGH8.8An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain ...
CVE-2019-20337HIGH7.2In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injectio...
CVE-2019-19911HIGH7.5There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalid...
CVE-2019-19629HIGH7.5In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private cod...
CVE-2019-19314HIGH7.5GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.
CVE-2019-19313HIGH7.5GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were making it impossible t...
CVE-2019-19959HIGH7.5ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' charact...
CVE-2019-11993HIGH7.5A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 ...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now