2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-4008 | CRITICAL | 9.8 | 2.3% | Feb 7, 2019 | API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in... |
| CVE-2019-3822 | CRITICAL | 9.8 | 12.8% | Feb 6, 2019 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an ... |
| CVE-2019-3464 | CRITICAL | 9.8 | 4.7% | Feb 6, 2019 | Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restri... |
| CVE-2019-3463 | CRITICAL | 9.8 | 4.9% | Feb 6, 2019 | Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell t... |
| CVE-2019-1000006 | CRITICAL | 9.8 | 1.6% | Feb 4, 2019 | RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in s... |
| CVE-2019-1651 | CRITICAL | 9.9 | 4.9% | Jan 24, 2019 | A vulnerability in the vContainer of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to cause a ... |
| CVE-2019-3774 | CRITICAL | 9.8 | 3.0% | Jan 18, 2019 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injec... |
| CVE-2019-3773 | CRITICAL | 9.8 | 4.1% | Jan 18, 2019 | Spring Web Services, versions 2.4.3, 3.0.4, and older unsupported versions of all three projects, were susceptible to XM... |
| CVE-2019-0022 | CRITICAL | 10 | 1.1% | Jan 15, 2019 | Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take f... |
| CVE-2019-0020 | CRITICAL | 10 | 1.6% | Jan 15, 2019 | Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take ... |
| CVE-2019-0007 | CRITICAL | 9.3 | 1.7% | Jan 15, 2019 | The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting t... |
| CVE-2019-0006 | CRITICAL | 9.8 | 5.3% | Jan 15, 2019 | A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwar... |
| CVE-2019-0002 | CRITICAL | 9.8 | 2.4% | Jan 15, 2019 | On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with ... |
| CVE-2019-0586 | CRITICAL | 9.8 | 15.4% | Jan 8, 2019 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o... |
| CVE-2019-5312 | CRITICAL | 9.8 | 1.7% | Jan 4, 2019 | An issue was discovered in weixin-java-tools v3.3.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWx... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now