2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-15817 | — | — | 1.0% | Aug 30, 2019 | The easy-property-listings plugin before 3.4 for WordPress has XSS. |
| CVE-2019-15816 | — | — | 2.0% | Aug 30, 2019 | The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via save_settings_p... |
| CVE-2019-9697 | — | — | 1.0% | Aug 30, 2019 | An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows... |
| CVE-2019-6113 | — | — | 3.0% | Aug 30, 2019 | Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to ... |
| CVE-2019-13526 | — | — | 2.4% | Aug 30, 2019 | Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may ... |
| CVE-2019-12754 | — | — | 0.6% | Aug 30, 2019 | Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting ... |
| CVE-2019-12753 | — | — | 1.0% | Aug 30, 2019 | An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authentica... |
| CVE-2019-11658 | — | — | 0.7% | Aug 30, 2019 | Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to us... |
| CVE-2019-8461 | — | — | 1.1% | Aug 29, 2019 | Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH lo... |
| CVE-2019-11364 | — | — | 2.2% | Aug 29, 2019 | An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbi... |
| CVE-2019-11363 | — | — | 1.1% | Aug 29, 2019 | A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary S... |
| CVE-2019-11396 | — | — | 0.6% | Aug 29, 2019 | An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (fil... |
| CVE-2019-15811 | — | — | 6.4% | Aug 29, 2019 | In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. |
| CVE-2019-14979 | — | — | 1.1% | Aug 29, 2019 | cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter... |
| CVE-2019-14978 | — | — | 1.2% | Aug 29, 2019 | /payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering i... |
| CVE-2019-14977 | — | — | — | Aug 29, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-15806 | — | — | 1.2% | Aug 29, 2019 | CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the ... |
| CVE-2019-15805 | — | — | 1.2% | Aug 29, 2019 | CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the ... |
| CVE-2019-15717 | — | — | 2.5% | Aug 29, 2019 | Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP. |
| CVE-2019-15502 | — | — | 1.7% | Aug 29, 2019 | The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte se... |
| CVE-2019-3394 | — | — | 11.4% | Aug 29, 2019 | There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An a... |
| CVE-2019-11500 | — | — | 62.3% | Aug 29, 2019 | In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for qu... |
| CVE-2019-15788 | — | — | 1.8% | Aug 29, 2019 | Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp. |
| CVE-2019-15786 | — | — | 1.6% | Aug 29, 2019 | ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket. |
| CVE-2019-15785 | — | — | 2.7% | Aug 29, 2019 | FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now