2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-20409 | CRITICAL | 9.8 | 2.5% | Jun 23, 2020 | The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed re... |
| CVE-2019-3865 | MEDIUM | 6.1 | 0.7% | Jun 22, 2020 | A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay.... |
| CVE-2019-14894 | HIGH | 7.2 | 4.1% | Jun 22, 2020 | A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggere... |
| CVE-2019-14094 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet ... |
| CVE-2019-14092 | MEDIUM | 5.5 | 0.2% | Jun 22, 2020 | System Services exports services without permission protect and can lead to information exposure in Snapdragon Industria... |
| CVE-2019-14091 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdrago... |
| CVE-2019-14080 | CRITICAL | 9.8 | 0.7% | Jun 22, 2020 | Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdrago... |
| CVE-2019-14076 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Sn... |
| CVE-2019-14073 | CRITICAL | 9.8 | 0.7% | Jun 22, 2020 | Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote s... |
| CVE-2019-14062 | CRITICAL | 9.8 | 0.9% | Jun 22, 2020 | Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from netwo... |
| CVE-2019-14047 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to... |
| CVE-2019-10626 | MEDIUM | 5.5 | 0.2% | Jun 22, 2020 | Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage da... |
| CVE-2019-10597 | HIGH | 7.8 | 0.2% | Jun 22, 2020 | kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdrago... |
| CVE-2019-20891 | HIGH | 8.8 | 0.5% | Jun 19, 2020 | WooCommerce before 3.6.5, when it handles CSV imports of products, has a cross-site request forgery (CSRF) issue with re... |
| CVE-2019-20890 | MEDIUM | 4.3 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions. |
| CVE-2019-20889 | MEDIUM | 5.3 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles permissions for user-ac... |
| CVE-2019-20888 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows attackers to cause a denial... |
| CVE-2019-20887 | MEDIUM | 4.3 | 0.7% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permiss... |
| CVE-2019-20886 | HIGH | 7.5 | 0.9% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes inadvertently a system admin. |
| CVE-2019-20885 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0. It does not always generate a robots.txt file. |
| CVE-2019-20884 | MEDIUM | 5.3 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0. It allows attackers to partially attach a file to more than o... |
| CVE-2019-20883 | MEDIUM | 4.3 | 0.6% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0, when Town Square is set to Read-Only. Users can pin or unpin ... |
| CVE-2019-20882 | MEDIUM | 5.3 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0. It does not honor the domain requirement when processing a jo... |
| CVE-2019-20881 | HIGH | 7.3 | 0.8% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0. It mishandles brute-force attacks against MFA. |
| CVE-2019-20880 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a deni... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now