2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-5064 | HIGH | 8.8 | 10.6% | Jan 3, 2020 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, befo... |
| CVE-2019-5063 | HIGH | 8.8 | 20.9% | Jan 3, 2020 | An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0... |
| CVE-2019-19261 | HIGH | 8.8 | 1.0% | Jan 3, 2020 | GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. |
| CVE-2019-5304 | HIGH | 7.5 | 1.0% | Jan 3, 2020 | Some Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could send specific MPLS Ech... |
| CVE-2019-20329 | HIGH | 8.1 | 0.6% | Jan 3, 2020 | OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000. |
| CVE-2019-20219 | HIGH | 8.8 | 1.3% | Jan 2, 2020 | ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. |
| CVE-2019-10775 | HIGH | 7.5 | 1.3% | Jan 2, 2020 | ecstatic have a denial of service vulnerability. Successful exploitation could lead to crash of an application. |
| CVE-2019-20218 | HIGH | 7.5 | 3.6% | Jan 2, 2020 | selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. |
| CVE-2019-20213 | HIGH | 7.5 | 1.9% | Jan 2, 2020 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a v... |
| CVE-2019-20205 | HIGH | 8.8 | 1.0% | Jan 2, 2020 | libsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c. |
| CVE-2019-18568 | HIGH | 8.8 | 0.7% | Dec 31, 2019 | Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a... |
| CVE-2019-20197 | HIGH | 8.8 | 22.4% | Dec 31, 2019 | In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id pa... |
| CVE-2019-9668 | HIGH | 7.5 | 1.7% | Dec 31, 2019 | An issue was discovered in rovinbhandari FTP through 2012-03-28. receive_file in file_transfer_functions.c allows remote... |
| CVE-2019-9197 | HIGH | 8.8 | 3.7% | Dec 31, 2019 | The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code. |
| CVE-2019-7751 | HIGH | 7.5 | 14.2% | Dec 31, 2019 | A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, for... |
| CVE-2019-20176 | HIGH | 7.5 | 4.4% | Dec 31, 2019 | In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. |
| CVE-2019-10229 | HIGH | 8.8 | 0.8% | Dec 31, 2019 | An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2. When the dire... |
| CVE-2019-20175 | HIGH | 7.5 | 3.4% | Dec 31, 2019 | An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEM... |
| CVE-2019-20172 | HIGH | 7.8 | 0.5% | Dec 31, 2019 | Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only ... |
| CVE-2019-7479 | HIGH | 7.2 | 0.9% | Dec 31, 2019 | A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulne... |
| CVE-2019-19032 | HIGH | 8.1 | 4.5% | Dec 30, 2019 | XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an ... |
| CVE-2019-19031 | HIGH | 8.1 | 5.2% | Dec 30, 2019 | Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS... |
| CVE-2019-16790 | HIGH | 8.8 | 1.2% | Dec 30, 2019 | In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only auth... |
| CVE-2019-20149 | HIGH | 7.5 | 2.3% | Dec 30, 2019 | ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflic... |
| CVE-2019-19470 | HIGH | 7.8 | 0.9% | Dec 30, 2019 | Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now