2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-25677MEDIUM5.5WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a...
CVE-2019-25676CRITICAL9.8Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attac...
CVE-2019-25675HIGH7.5eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator ...
CVE-2019-25674CRITICAL9.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries...
CVE-2019-25673HIGH8.8UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenti...
CVE-2019-25672HIGH8.2PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database quer...
CVE-2019-25671HIGH8.8VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary com...
CVE-2019-25670HIGH7.8River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local a...
CVE-2019-25669HIGH8.2qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL c...
CVE-2019-25668HIGH8.2News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da...
CVE-2019-25667MEDIUM5.5TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supp...
CVE-2019-25666MEDIUM5.5SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows at...
CVE-2019-25665MEDIUM5.5River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash t...
CVE-2019-25664HIGH7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView...
CVE-2019-25663HIGH7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database querie...
CVE-2019-25662HIGH7.5ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL...
CVE-2019-25661MEDIUM6.9Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial ...
CVE-2019-25660MEDIUM5.5LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending ...
CVE-2019-25659MEDIUM6.9ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of...
CVE-2019-25658MEDIUM6.8a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the applica...
CVE-2019-25657MEDIUM6.8AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by suppl...
CVE-2019-25656HIGH8.6R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to...
CVE-2019-25655MEDIUM5.5Device Monitoring Studio 8.10.00.8925 contains a denial of service vulnerability that allows local attackers to crash th...
CVE-2019-25654HIGH8.7Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplyin...
CVE-2019-25653MEDIUM5.5Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the applicati...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now