2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-3396 | CRITICAL | 9.8 | 99.9% | Mar 25, 2019 | The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers... |
| CVE-2019-9948 | CRITICAL | 9.1 | 11.8% | Mar 23, 2019 | urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypas... |
| CVE-2019-3858 | CRITICAL | 9.1 | 6.4% | Mar 21, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from ... |
| CVE-2019-7238 | CRITICAL | 9.8 | 76.5% | Mar 21, 2019 | Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. |
| CVE-2019-5413 | CRITICAL | 9.8 | 3.4% | Mar 21, 2019 | An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1. |
| CVE-2019-3862 | CRITICAL | 9.1 | 7.9% | Mar 21, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exi... |
| CVE-2019-3859 | CRITICAL | 9.1 | 6.3% | Mar 21, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_req... |
| CVE-2019-9775 | CRITICAL | 9.1 | 3.0% | Mar 14, 2019 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_C... |
| CVE-2019-9774 | CRITICAL | 9.1 | 3.0% | Mar 14, 2019 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at b... |
| CVE-2019-1723 | CRITICAL | 9.8 | 5.8% | Mar 13, 2019 | A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker t... |
| CVE-2019-9641 | CRITICAL | 9.8 | 9.4% | Mar 9, 2019 | An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There i... |
| CVE-2019-8275 | CRITICAL | 9.8 | 4.0% | Mar 8, 2019 | UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of... |
| CVE-2019-8274 | CRITICAL | 9.8 | 8.3% | Mar 8, 2019 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, w... |
| CVE-2019-8273 | CRITICAL | 9.8 | 8.3% | Mar 8, 2019 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler,... |
| CVE-2019-8272 | CRITICAL | 9.8 | 3.9% | Mar 8, 2019 | UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code ... |
| CVE-2019-8271 | CRITICAL | 9.8 | 8.3% | Mar 8, 2019 | UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which c... |
| CVE-2019-8268 | CRITICAL | 9.8 | 3.9% | Mar 8, 2019 | UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of Clien... |
| CVE-2019-9636 | CRITICAL | 9.8 | 7.7% | Mar 8, 2019 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorre... |
| CVE-2019-1003034 | CRITICAL | 9.9 | 3.0% | Mar 8, 2019 | A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javapos... |
| CVE-2019-1003032 | CRITICAL | 9.9 | 2.5% | Mar 8, 2019 | A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudso... |
| CVE-2019-1003031 | CRITICAL | 9.9 | 3.4% | Mar 8, 2019 | A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson... |
| CVE-2019-1003030 | CRITICAL | 9.9 | 76.0% | Mar 8, 2019 | A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/... |
| CVE-2019-1003029 | CRITICAL | 9.9 | 74.3% | Mar 8, 2019 | A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/... |
| CVE-2019-5019 | CRITICAL | 9.8 | 2.3% | Mar 7, 2019 | A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server D... |
| CVE-2019-0604 | CRITICAL | 9.8 | 99.9% | Mar 5, 2019 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now