2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-1591 | HIGH | 7.8 | 0.5% | Mar 6, 2019 | A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow... |
| CVE-2019-1588 | MEDIUM | 4.4 | 0.3% | Mar 6, 2019 | A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode ... |
| CVE-2019-1585 | MEDIUM | 6.7 | 0.4% | Mar 6, 2019 | A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could ... |
| CVE-2019-1543 | — | — | 5.7% | Mar 6, 2019 | ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifie... |
| CVE-2019-4030 | MEDIUM | 5.4 | 0.8% | Mar 6, 2019 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e... |
| CVE-2019-9603 | — | — | 0.5% | Mar 6, 2019 | MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-... |
| CVE-2019-9601 | — | — | 8.3% | Mar 6, 2019 | The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many si... |
| CVE-2019-9600 | — | — | 8.3% | Mar 6, 2019 | The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers ... |
| CVE-2019-9599 | — | — | 13.3% | Mar 6, 2019 | The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash... |
| CVE-2019-0200 | — | — | 3.8% | Mar 6, 2019 | A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which all... |
| CVE-2019-0187 | — | — | 2.7% | Mar 6, 2019 | Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can es... |
| CVE-2019-9595 | — | — | 0.8% | Mar 6, 2019 | AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. |
| CVE-2019-9594 | — | — | 1.5% | Mar 6, 2019 | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. |
| CVE-2019-9593 | MEDIUM | 6.1 | 4.4% | Mar 6, 2019 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to ... |
| CVE-2019-9592 | MEDIUM | 6.1 | 5.3% | Mar 6, 2019 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to ... |
| CVE-2019-9591 | MEDIUM | 6.1 | 5.3% | Mar 6, 2019 | A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attack... |
| CVE-2019-9590 | — | — | 1.8% | Mar 6, 2019 | An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service (... |
| CVE-2019-3824 | — | — | 2.9% | Mar 6, 2019 | A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in sam... |
| CVE-2019-9589 | — | — | 1.2% | Mar 6, 2019 | There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.0... |
| CVE-2019-9588 | — | — | 1.2% | Mar 6, 2019 | There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending... |
| CVE-2019-9587 | — | — | 1.2% | Mar 6, 2019 | There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a c... |
| CVE-2019-9581 | HIGH | 8.8 | 13.7% | Mar 6, 2019 | phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra... |
| CVE-2019-9578 | — | — | 2.3% | Mar 5, 2019 | In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back... |
| CVE-2019-9555 | — | — | 1.1% | Mar 5, 2019 | Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2... |
| CVE-2019-8336 | — | — | 1.3% | Mar 5, 2019 | HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and o... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now