2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-11586 | — | — | 0.6% | Aug 23, 2019 | The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version... |
| CVE-2019-11585 | — | — | 1.2% | Aug 23, 2019 | The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 ... |
| CVE-2019-11584 | — | — | 1.0% | Aug 23, 2019 | The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or Java... |
| CVE-2019-15514 | — | — | 2.3% | Aug 23, 2019 | The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that th... |
| CVE-2019-15494 | — | — | 1.5% | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. |
| CVE-2019-15493 | — | — | 1.2% | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. |
| CVE-2019-15492 | — | — | 0.8% | Aug 23, 2019 | openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. |
| CVE-2019-15491 | — | — | 0.6% | Aug 23, 2019 | openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. |
| CVE-2019-15490 | — | — | 1.7% | Aug 23, 2019 | openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. |
| CVE-2019-15488 | — | — | 0.9% | Aug 23, 2019 | Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. |
| CVE-2019-15487 | — | — | 0.9% | Aug 23, 2019 | DfE School Experience before v16333-GA has XSS via a teacher training URL. |
| CVE-2019-15486 | — | — | 1.0% | Aug 23, 2019 | django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js_reverse_inline. |
| CVE-2019-15485 | — | — | 0.9% | Aug 23, 2019 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. |
| CVE-2019-15484 | — | — | 0.9% | Aug 23, 2019 | Bolt before 3.6.10 has XSS via an image's alt or title field. |
| CVE-2019-15483 | — | — | 0.9% | Aug 23, 2019 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. |
| CVE-2019-15482 | — | — | 0.9% | Aug 23, 2019 | selectize-plugin-a11y before 1.1.0 has XSS via the msg field. |
| CVE-2019-15481 | — | — | 0.9% | Aug 23, 2019 | Kimai v2 before 1.1 has XSS via a timesheet description. |
| CVE-2019-15480 | — | — | 0.7% | Aug 23, 2019 | Domoticz 4.10717 has XSS via item.Name. |
| CVE-2019-15477 | — | — | 1.0% | Aug 23, 2019 | Jooby before 1.6.4 has XSS via the default error handler. |
| CVE-2019-15476 | — | — | 0.9% | Aug 23, 2019 | Former before 4.2.1 has XSS via a checkbox value. |
| CVE-2019-15513 | — | — | 1.7% | Aug 23, 2019 | An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used o... |
| CVE-2019-15508 | — | — | 0.7% | Aug 23, 2019 | In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain l... |
| CVE-2019-15507 | — | — | 0.6% | Aug 23, 2019 | In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certa... |
| CVE-2019-15498 | — | — | 3.4% | Aug 23, 2019 | cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS ... |
| CVE-2019-15329 | — | — | 0.7% | Aug 22, 2019 | The import-users-from-csv-with-meta plugin before 1.14.0.3 for WordPress has CSRF. |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now