2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14339 | — | — | 5.4% | Sep 5, 2019 | The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly res... |
| CVE-2019-10753 | — | — | 0.7% | Sep 5, 2019 | In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all ver... |
| CVE-2019-15955 | — | — | 0.9% | Sep 5, 2019 | An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to ... |
| CVE-2019-15953 | — | — | 1.5% | Sep 5, 2019 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resour... |
| CVE-2019-15952 | — | — | 5.1% | Sep 5, 2019 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traver... |
| CVE-2019-14278 | — | — | 1.2% | Sep 5, 2019 | In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. |
| CVE-2019-13349 | — | — | 1.3% | Sep 5, 2019 | In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. |
| CVE-2019-13191 | — | — | 1.4% | Sep 5, 2019 | A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /Appl... |
| CVE-2019-13188 | — | — | 2.5% | Sep 5, 2019 | In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. |
| CVE-2019-13187 | — | — | 1.8% | Sep 5, 2019 | The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file uploa... |
| CVE-2019-13190 | — | — | 1.4% | Sep 5, 2019 | In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in ... |
| CVE-2019-15938 | — | — | 2.1% | Sep 5, 2019 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length fiel... |
| CVE-2019-15937 | — | — | 2.1% | Sep 5, 2019 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length f... |
| CVE-2019-12223 | — | — | 2.4% | Sep 5, 2019 | An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before ... |
| CVE-2019-10677 | — | — | 7.3% | Sep 5, 2019 | Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devic... |
| CVE-2019-14470 | — | — | 83.0% | Sep 4, 2019 | cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X... |
| CVE-2019-14319 | — | — | 1.1% | Sep 4, 2019 | The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, vid... |
| CVE-2019-12586 | — | — | 1.4% | Sep 4, 2019 | The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes... |
| CVE-2019-15924 | — | — | 0.5% | Sep 4, 2019 | An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_m... |
| CVE-2019-15923 | — | — | 0.6% | Sep 4, 2019 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if... |
| CVE-2019-15922 | — | — | 0.5% | Sep 4, 2019 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if... |
| CVE-2019-6646 | — | — | 1.5% | Sep 4, 2019 | On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their pri... |
| CVE-2019-13976 | — | — | 1.7% | Sep 4, 2019 | eGain Chat 15.0.3 allows unrestricted file upload. |
| CVE-2019-13975 | — | — | 0.9% | Sep 4, 2019 | eGain Chat 15.0.3 allows HTML Injection. |
| CVE-2019-13518 | — | — | 1.4% | Sep 4, 2019 | An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of t... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now