2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14719 | HIGH | 7.8 | 0.9% | Oct 23, 2020 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstr... |
| CVE-2019-14718 | MEDIUM | 6.7 | 1.2% | Oct 23, 2020 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol... |
| CVE-2019-14717 | HIGH | 7.8 | 0.3% | Oct 23, 2020 | Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call. |
| CVE-2019-14716 | MEDIUM | 6.6 | 0.3% | Oct 23, 2020 | Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out). |
| CVE-2019-14715 | MEDIUM | 6.8 | 0.3% | Oct 23, 2020 | Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write op... |
| CVE-2019-14713 | MEDIUM | 5.5 | 0.3% | Oct 23, 2020 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages. |
| CVE-2019-14712 | HIGH | 7.8 | 0.3% | Oct 23, 2020 | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generat... |
| CVE-2019-14711 | HIGH | 7 | 0.2% | Oct 23, 2020 | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass. |
| CVE-2019-17007 | HIGH | 7.5 | 1.4% | Oct 22, 2020 | In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in... |
| CVE-2019-17006 | CRITICAL | 9.8 | 3.6% | Oct 22, 2020 | In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases whe... |
| CVE-2019-16128 | MEDIUM | 6.8 | 0.6% | Oct 22, 2020 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2). |
| CVE-2019-16129 | MEDIUM | 6.8 | 0.6% | Oct 22, 2020 | Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 2 of 2). |
| CVE-2019-16127 | CRITICAL | 9.1 | 2.0% | Oct 22, 2020 | Atmel Advanced Software Framework (ASF) 4 has an Integer Overflow. |
| CVE-2019-9080 | HIGH | 7.5 | 0.7% | Oct 20, 2020 | DomainMOD before 4.14.0 uses MD5 without a salt for password storage. |
| CVE-2019-4680 | HIGH | 8.8 | 1.0% | Oct 20, 2020 | IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection. A remote attacker c... |
| CVE-2019-13633 | MEDIUM | 6.1 | 1.0% | Oct 19, 2020 | Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. An attacker can send arbitrary JavaScript code via a built-... |
| CVE-2019-12305 | MEDIUM | 6.5 | 0.5% | Oct 16, 2020 | In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access... |
| CVE-2019-19885 | CRITICAL | 9.1 | 1.0% | Oct 16, 2020 | In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge a... |
| CVE-2019-19513 | CRITICAL | 9.8 | 2.9% | Oct 16, 2020 | The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability.... |
| CVE-2019-18796 | MEDIUM | 6.5 | 0.9% | Oct 16, 2020 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinit... |
| CVE-2019-18795 | MEDIUM | 6.5 | 1.3% | Oct 16, 2020 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a c... |
| CVE-2019-18794 | MEDIUM | 6.5 | 1.1% | Oct 16, 2020 | The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a craft... |
| CVE-2019-17640 | CRITICAL | 9.8 | 2.0% | Oct 15, 2020 | In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.miles... |
| CVE-2019-12411 | — | — | — | Oct 15, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-4552 | MEDIUM | 6.1 | 0.9% | Oct 15, 2020 | IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attack... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now