2019 CVE Vulnerabilities
17,623 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-6488 | — | — | 0.4% | Jan 18, 2019 | The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incor... |
| CVE-2019-3910 | — | — | 8.6% | Jan 18, 2019 | Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi scri... |
| CVE-2019-3909 | — | — | 2.3% | Jan 18, 2019 | Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials withou... |
| CVE-2019-3908 | HIGH | 7.5 | 1.8% | Jan 18, 2019 | Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded an... |
| CVE-2019-3907 | HIGH | 7.5 | 0.7% | Jan 18, 2019 | Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption... |
| CVE-2019-3906 | HIGH | 8.8 | 2.9% | Jan 18, 2019 | Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated rem... |
| CVE-2019-6487 | — | — | 8.5% | Jan 18, 2019 | TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login)... |
| CVE-2019-0647 | — | — | 4.6% | Jan 17, 2019 | An information disclosure vulnerability exists when Team Foundation Server does not properly handle variables marked as ... |
| CVE-2019-0646 | — | — | 1.5% | Jan 17, 2019 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided i... |
| CVE-2019-0624 | — | — | 1.5% | Jan 17, 2019 | A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted req... |
| CVE-2019-2556 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2555 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2554 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2553 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2552 | — | — | 0.5% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2550 | — | — | 1.2% | Jan 16, 2019 | Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: L... |
| CVE-2019-2549 | — | — | 1.1% | Jan 16, 2019 | Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: L... |
| CVE-2019-2548 | — | — | 0.8% | Jan 16, 2019 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th... |
| CVE-2019-2547 | — | — | 1.0% | Jan 16, 2019 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.... |
| CVE-2019-2546 | — | — | 1.2% | Jan 16, 2019 | Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). Su... |
| CVE-2019-2545 | — | — | 0.4% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported v... |
| CVE-2019-2544 | — | — | 0.4% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported ver... |
| CVE-2019-2543 | — | — | 1.7% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported ver... |
| CVE-2019-2541 | — | — | 0.9% | Jan 16, 2019 | Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). The supp... |
| CVE-2019-2540 | — | — | 1.5% | Jan 16, 2019 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now