2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-11300 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-11299 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-11298 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-11297 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-11296 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-11295 | — | — | — | Jan 26, 2021 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2019-16961 | MEDIUM | 5.4 | 1.5% | Jan 15, 2021 | SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name. |
| CVE-2019-4702 | HIGH | 8.1 | 0.4% | Jan 13, 2021 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that... |
| CVE-2019-4687 | MEDIUM | 5.3 | 0.4% | Jan 13, 2021 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters. This may lead to inf... |
| CVE-2019-4160 | HIGH | 7.5 | 0.6% | Jan 13, 2021 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow ... |
| CVE-2019-3405 | MEDIUM | 5.3 | 1.0% | Jan 11, 2021 | In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by construc... |
| CVE-2019-18643 | CRITICAL | 9.8 | 4.1% | Jan 7, 2021 | Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application.... |
| CVE-2019-18642 | CRITICAL | 9.8 | 1.7% | Jan 7, 2021 | Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile upd... |
| CVE-2019-16962 | MEDIUM | 5.4 | 2.3% | Jan 6, 2021 | Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report. |
| CVE-2019-16954 | MEDIUM | 5.4 | 1.3% | Jan 6, 2021 | SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. |
| CVE-2019-20484 | HIGH | 8.1 | 0.9% | Jan 5, 2021 | An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project fi... |
| CVE-2019-20483 | MEDIUM | 5.4 | 0.5% | Jan 5, 2021 | An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read a... |
| CVE-2019-4728 | HIGH | 8.8 | 5.0% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2019-25013 | MEDIUM | 5.9 | 3.5% | Jan 4, 2021 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input seque... |
| CVE-2019-16960 | MEDIUM | 5.4 | 1.3% | Jan 4, 2021 | SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. |
| CVE-2019-16956 | MEDIUM | 5.4 | 1.7% | Jan 4, 2021 | SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. |
| CVE-2019-25012 | HIGH | 7.5 | 1.4% | Jan 1, 2021 | The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml p... |
| CVE-2019-25011 | MEDIUM | 5.4 | 0.6% | Dec 31, 2020 | NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as... |
| CVE-2019-25010 | CRITICAL | 9.8 | 1.5% | Dec 31, 2020 | An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_ty... |
| CVE-2019-25009 | CRITICAL | 9.8 | 1.8% | Dec 31, 2020 | An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeat... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now