2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-4694 | CRITICAL | 9.8 | 1.2% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic... |
| CVE-2019-4693 | MEDIUM | 4.4 | 0.2% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores user credentials in plain in clear text which can be read by ... |
| CVE-2019-4692 | MEDIUM | 5.3 | 0.7% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 discloses sensitive information to unauthorized users. The informati... |
| CVE-2019-4691 | MEDIUM | 5.4 | 0.4% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows use... |
| CVE-2019-4689 | HIGH | 7.5 | 0.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, cause... |
| CVE-2019-4688 | MEDIUM | 4.3 | 0.6% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session... |
| CVE-2019-4686 | MEDIUM | 5.3 | 0.4% | Aug 26, 2020 | IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session... |
| CVE-2019-18847 | CRITICAL | 9.8 | 2.3% | Aug 26, 2020 | Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1. |
| CVE-2019-14904 | HIGH | 7.3 | 0.4% | Aug 26, 2020 | A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on th... |
| CVE-2019-11862 | HIGH | 8.4 | 0.7% | Aug 21, 2020 | The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying. |
| CVE-2019-11859 | HIGH | 8.8 | 2.0% | Aug 21, 2020 | A buffer overflow exists in the SMS handler API of ALEOS before 4.13.0, 4.9.5, 4.9.4 that may allow code execution as ro... |
| CVE-2019-11858 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9. |
| CVE-2019-11857 | MEDIUM | 4.9 | 2.1% | Aug 21, 2020 | Lack of input sanitization in AceManager of ALEOS before 4.12.0, 4.9.5 and 4.4.9 allows disclosure of sensitive system i... |
| CVE-2019-11856 | LOW | 3.8 | 1.0% | Aug 21, 2020 | A nonce reuse vulnerability exists in the ACEView service of ALEOS before 4.13.0, 4.9.5, and 4.4.9 allowing message repl... |
| CVE-2019-11855 | CRITICAL | 9.8 | 1.2% | Aug 21, 2020 | An RPC server is enabled by default on the gateway's LAN of ALEOS before 4.12.0, 4.9.5, and 4.4.9. |
| CVE-2019-11853 | HIGH | 7.2 | 1.2% | Aug 21, 2020 | Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4... |
| CVE-2019-11852 | CRITICAL | 9.1 | 0.9% | Aug 21, 2020 | An out-of-bounds reads vulnerability exists in the ACEView Service of ALEOS before 4.13.0, 4.9.5, and 4.4.9. Sensitive i... |
| CVE-2019-11850 | MEDIUM | 6.7 | 0.4% | Aug 21, 2020 | A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow co... |
| CVE-2019-11849 | MEDIUM | 6.7 | 0.4% | Aug 21, 2020 | A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code e... |
| CVE-2019-11848 | HIGH | 7.2 | 1.1% | Aug 21, 2020 | An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length check... |
| CVE-2019-11847 | HIGH | 7.8 | 0.4% | Aug 21, 2020 | An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user ca... |
| CVE-2019-19184 | — | — | — | Aug 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19183 | — | — | — | Aug 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19181 | — | — | — | Aug 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2019-19179 | — | — | — | Aug 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now