2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-0094 | MEDIUM | 4.3 | 0.5% | May 17, 2019 | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 1... |
| CVE-2019-0093 | — | — | 0.4% | May 17, 2019 | Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.2... |
| CVE-2019-0092 | MEDIUM | 6.8 | 0.4% | May 17, 2019 | Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 1... |
| CVE-2019-0091 | — | — | 0.5% | May 17, 2019 | Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and Int... |
| CVE-2019-0090 | HIGH | 7.1 | 0.4% | May 17, 2019 | Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x,... |
| CVE-2019-0089 | — | — | 0.4% | May 17, 2019 | Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.0... |
| CVE-2019-0086 | — | — | 0.4% | May 17, 2019 | Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8.... |
| CVE-2019-8937 | — | — | 10.7% | May 17, 2019 | HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabel... |
| CVE-2019-8929 | — | — | 11.2% | May 17, 2019 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon... |
| CVE-2019-8928 | — | — | 6.3% | May 17, 2019 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userMan... |
| CVE-2019-8927 | — | — | 6.3% | May 17, 2019 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon... |
| CVE-2019-8926 | — | — | 6.3% | May 17, 2019 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zon... |
| CVE-2019-8925 | — | — | 11.8% | May 17, 2019 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerabi... |
| CVE-2019-8924 | — | — | 5.7% | May 17, 2019 | XAMPP through 5.6.8 allows XSS via the cds-fpdf.php interpret or titel parameter. NOTE: This product is discontinued. |
| CVE-2019-10913 | — | — | 1.9% | May 16, 2019 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Method... |
| CVE-2019-10912 | — | — | 2.3% | May 16, 2019 | In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects ... |
| CVE-2019-10911 | HIGH | 7.5 | 1.2% | May 16, 2019 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerabi... |
| CVE-2019-10910 | CRITICAL | 9.8 | 5.5% | May 16, 2019 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when servic... |
| CVE-2019-10909 | MEDIUM | 5.4 | 1.0% | May 16, 2019 | In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation ... |
| CVE-2019-3839 | HIGH | 7.8 | 1.8% | May 16, 2019 | It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-61... |
| CVE-2019-1008 | — | — | 2.8% | May 16, 2019 | A security feature bypass vulnerability exists in Dynamics On Premise, aka 'Microsoft Dynamics On-Premise Security Featu... |
| CVE-2019-1000 | — | — | 1.8% | May 16, 2019 | An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows ... |
| CVE-2019-0995 | — | — | 4.9% | May 16, 2019 | A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka '... |
| CVE-2019-0982 | — | — | 6.7% | May 16, 2019 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of ... |
| CVE-2019-0981 | — | — | 4.9% | May 16, 2019 | A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests, aka '.Net Fram... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now