2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-13465 | HIGH | 8.6 | 1.1% | Dec 30, 2019 | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3... |
| CVE-2019-20140 | HIGH | 8.8 | 1.1% | Dec 30, 2019 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_out_code at fromgif... |
| CVE-2019-19739 | HIGH | 7.5 | 0.7% | Dec 30, 2019 | MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent ... |
| CVE-2019-19737 | HIGH | 8.8 | 0.5% | Dec 30, 2019 | MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies, allowing the cookie to be sen... |
| CVE-2019-19734 | HIGH | 8.8 | 1.1% | Dec 30, 2019 | _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter in... |
| CVE-2019-19732 | HIGH | 7.2 | 1.1% | Dec 30, 2019 | translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly inser... |
| CVE-2019-17558 | HIGH | 7.5 | 98.6% | Dec 30, 2019 | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V... |
| CVE-2019-20138 | HIGH | 7.5 | 0.8% | Dec 30, 2019 | The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for li... |
| CVE-2019-20094 | HIGH | 8.8 | 1.0% | Dec 30, 2019 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_init_frame at fromg... |
| CVE-2019-20090 | HIGH | 7.8 | 0.8% | Dec 30, 2019 | An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when c... |
| CVE-2019-20089 | HIGH | 7.8 | 0.8% | Dec 30, 2019 | GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculatio... |
| CVE-2019-20088 | HIGH | 7.8 | 0.9% | Dec 30, 2019 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c. |
| CVE-2019-20087 | HIGH | 8.8 | 1.0% | Dec 30, 2019 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" ... |
| CVE-2019-20086 | HIGH | 8.8 | 1.0% | Dec 30, 2019 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c. |
| CVE-2019-20085 | HIGH | 7.5 | 96.1% | Dec 30, 2019 | TVT NVMS-1000 devices allow GET /.. Directory Traversal |
| CVE-2019-20079 | HIGH | 7.8 | 1.9% | Dec 30, 2019 | The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. |
| CVE-2019-20074 | HIGH | 8.8 | 1.4% | Dec 30, 2019 | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via ... |
| CVE-2019-20063 | HIGH | 8.8 | 1.7% | Dec 29, 2019 | hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. |
| CVE-2019-20048 | HIGH | 7.2 | 5.8% | Dec 27, 2019 | An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with el... |
| CVE-2019-20047 | HIGH | 7.5 | 2.7% | Dec 27, 2019 | An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server... |
| CVE-2019-16896 | HIGH | 7.8 | 0.4% | Dec 27, 2019 | In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrati... |
| CVE-2019-20014 | HIGH | 8.8 | 1.5% | Dec 27, 2019 | An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c. |
| CVE-2019-20011 | HIGH | 8.8 | 1.5% | Dec 27, 2019 | An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. |
| CVE-2019-20010 | HIGH | 8.8 | 1.4% | Dec 27, 2019 | An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. |
| CVE-2019-20006 | HIGH | 7.5 | 1.6% | Dec 26, 2019 | An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal add... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now