2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20484 | HIGH | 8.1 | 0.9% | Jan 5, 2021 | An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project fi... |
| CVE-2019-20483 | MEDIUM | 5.4 | 0.5% | Jan 5, 2021 | An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read a... |
| CVE-2019-4728 | HIGH | 8.8 | 5.0% | Jan 5, 2021 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow... |
| CVE-2019-25013 | MEDIUM | 5.9 | 3.6% | Jan 4, 2021 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input seque... |
| CVE-2019-16960 | MEDIUM | 5.4 | 1.3% | Jan 4, 2021 | SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. |
| CVE-2019-16956 | MEDIUM | 5.4 | 1.7% | Jan 4, 2021 | SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. |
| CVE-2019-25012 | HIGH | 7.5 | 1.4% | Jan 1, 2021 | The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml p... |
| CVE-2019-25011 | MEDIUM | 5.4 | 0.6% | Dec 31, 2020 | NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as... |
| CVE-2019-25010 | CRITICAL | 9.8 | 1.5% | Dec 31, 2020 | An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_ty... |
| CVE-2019-25009 | CRITICAL | 9.8 | 1.8% | Dec 31, 2020 | An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeat... |
| CVE-2019-25008 | — | — | — | Dec 31, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-25574. Reason: This candidate is a duplicate of ... |
| CVE-2019-25007 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic. |
| CVE-2019-25006 | HIGH | 7.5 | 0.8% | Dec 31, 2020 | An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong an... |
| CVE-2019-25005 | HIGH | 7.5 | 1.3% | Dec 31, 2020 | An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for att... |
| CVE-2019-25004 | CRITICAL | 9.8 | 0.6% | Dec 31, 2020 | An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, ... |
| CVE-2019-25003 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-cha... |
| CVE-2019-25002 | CRITICAL | 9.8 | 1.5% | Dec 31, 2020 | An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itsel... |
| CVE-2019-25001 | HIGH | 7.5 | 1.4% | Dec 31, 2020 | An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumptio... |
| CVE-2019-7726 | CRITICAL | 9.8 | 2.3% | Dec 31, 2020 | modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP r... |
| CVE-2019-7725 | CRITICAL | 9.8 | 2.5% | Dec 31, 2020 | includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies... |
| CVE-2019-20808 | MEDIUM | 6.5 | 0.3% | Dec 31, 2020 | In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() ... |
| CVE-2019-16747 | HIGH | 7.5 | 1.8% | Dec 30, 2020 | In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and ... |
| CVE-2019-16281 | HIGH | 7.5 | 1.3% | Dec 30, 2020 | Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code ... |
| CVE-2019-15523 | MEDIUM | 5.3 | 1.3% | Dec 30, 2020 | An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_... |
| CVE-2019-15080 | HIGH | 7.5 | 1.6% | Dec 30, 2020 | An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now