2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1010022 | CRITICAL | 9.8 | 3.2% | Jul 15, 2019 | GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The compo... |
| CVE-2019-10970 | CRITICAL | 9.8 | 4.6% | Jul 11, 2019 | In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v... |
| CVE-2019-7003 | CRITICAL | 10 | 1.5% | Jul 11, 2019 | A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacke... |
| CVE-2019-12525 | CRITICAL | 9.8 | 24.4% | Jul 11, 2019 | An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authen... |
| CVE-2019-11062 | CRITICAL | 9.8 | 5.7% | Jul 11, 2019 | The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". T... |
| CVE-2019-13560 | CRITICAL | 9.8 | 3.6% | Jul 11, 2019 | D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi se... |
| CVE-2019-12838 | CRITICAL | 9.8 | 2.7% | Jul 11, 2019 | SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection. |
| CVE-2019-12803 | CRITICAL | 9.8 | 1.9% | Jul 10, 2019 | In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file e... |
| CVE-2019-0330 | CRITICAL | 9.1 | 2.2% | Jul 10, 2019 | The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), versi... |
| CVE-2019-13132 | CRITICAL | 9.8 | 42.5% | Jul 10, 2019 | In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting t... |
| CVE-2019-13224 | CRITICAL | 9.8 | 4.0% | Jul 10, 2019 | A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information d... |
| CVE-2019-13478 | CRITICAL | 9.8 | 3.3% | Jul 9, 2019 | The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions. |
| CVE-2019-13413 | CRITICAL | 9.8 | 2.2% | Jul 8, 2019 | The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php. |
| CVE-2019-13372 | CRITICAL | 9.8 | 80.7% | Jul 6, 2019 | /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote atta... |
| CVE-2019-13144 | CRITICAL | 9.8 | 1.8% | Jul 5, 2019 | myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5. |
| CVE-2019-7257 | CRITICAL | 10 | 70.0% | Jul 2, 2019 | Linear eMerge E3-Series devices allow Unrestricted File Upload. |
| CVE-2019-7256 | CRITICAL | 9.8 | 97.1% | Jul 2, 2019 | Linear eMerge E3-Series devices allow Command Injections. |
| CVE-2019-7261 | CRITICAL | 9.8 | 5.5% | Jul 2, 2019 | Linear eMerge E3-Series devices have Hard-coded Credentials. |
| CVE-2019-7269 | CRITICAL | 9.8 | 40.0% | Jul 2, 2019 | Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. |
| CVE-2019-7268 | CRITICAL | 10 | 6.5% | Jul 2, 2019 | Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. |
| CVE-2019-7267 | CRITICAL | 9.8 | 21.5% | Jul 2, 2019 | Linear eMerge 50P/5000P devices allow Cookie Path Traversal. |
| CVE-2019-7266 | CRITICAL | 9.8 | 4.6% | Jul 2, 2019 | Linear eMerge 50P/5000P devices allow Authentication Bypass. |
| CVE-2019-7265 | CRITICAL | 9.8 | 23.1% | Jul 2, 2019 | Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). |
| CVE-2019-4087 | CRITICAL | 9.8 | 7.0% | Jul 2, 2019 | IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by i... |
| CVE-2019-7274 | CRITICAL | 9.8 | 29.0% | Jul 1, 2019 | Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now