2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-17563 | HIGH | 7.5 | 10.7% | Dec 23, 2019 | When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a na... |
| CVE-2019-18390 | HIGH | 7.1 | 0.3% | Dec 23, 2019 | An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows ... |
| CVE-2019-18389 | HIGH | 7.8 | 0.4% | Dec 23, 2019 | A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer thro... |
| CVE-2019-19931 | HIGH | 8.8 | 1.3% | Dec 23, 2019 | In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow. |
| CVE-2019-11044 | HIGH | 7.5 | 5.1% | Dec 23, 2019 | In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with ... |
| CVE-2019-19929 | HIGH | 7.8 | 0.8% | Dec 23, 2019 | An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with... |
| CVE-2019-19926 | HIGH | 7.5 | 7.0% | Dec 23, 2019 | multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite... |
| CVE-2019-19920 | HIGH | 8.8 | 3.2% | Dec 22, 2019 | sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Gre... |
| CVE-2019-16786 | HIGH | 7.5 | 2.5% | Dec 20, 2019 | Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that... |
| CVE-2019-16785 | HIGH | 7.5 | 2.7% | Dec 20, 2019 | Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for t... |
| CVE-2019-19231 | HIGH | 7.8 | 0.6% | Dec 20, 2019 | An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that c... |
| CVE-2019-19918 | HIGH | 7.8 | 1.6% | Dec 20, 2019 | Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. |
| CVE-2019-19917 | HIGH | 7.8 | 1.5% | Dec 20, 2019 | Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. |
| CVE-2019-15915 | HIGH | 7.5 | 1.2% | Dec 20, 2019 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover... |
| CVE-2019-15914 | HIGH | 7.5 | 1.3% | Dec 20, 2019 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the Z... |
| CVE-2019-15912 | HIGH | 7.5 | 1.3% | Dec 20, 2019 | An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers... |
| CVE-2019-15910 | HIGH | 7.5 | 1.3% | Dec 20, 2019 | An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers... |
| CVE-2019-19693 | HIGH | 7.1 | 0.6% | Dec 20, 2019 | The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to ... |
| CVE-2019-19141 | HIGH | 8.8 | 4.4% | Dec 19, 2019 | The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write file... |
| CVE-2019-19340 | HIGH | 8.2 | 1.5% | Dec 19, 2019 | A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager b... |
| CVE-2019-19234 | HIGH | 7.5 | 3.4% | Dec 19, 2019 | In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead... |
| CVE-2019-19232 | HIGH | 7.5 | 3.3% | Dec 19, 2019 | In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invo... |
| CVE-2019-8254 | HIGH | 7.8 | 3.5% | Dec 19, 2019 | Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful ex... |
| CVE-2019-8253 | HIGH | 7.8 | 3.5% | Dec 19, 2019 | Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful ex... |
| CVE-2019-19909 | HIGH | 8.8 | 1.4% | Dec 19, 2019 | An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now