2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-8066 | HIGH | 7.8 | 5.3% | Jul 6, 2020 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 20... |
| CVE-2019-20419 | HIGH | 7.8 | 0.8% | Jul 3, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hi... |
| CVE-2019-20418 | MEDIUM | 6.5 | 1.0% | Jul 3, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the in... |
| CVE-2019-20894 | HIGH | 7.5 | 1.6% | Jul 2, 2020 | Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation ... |
| CVE-2019-20417 | — | — | — | Jul 2, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-15011. Reason: This candidate is a reservation d... |
| CVE-2019-15312 | HIGH | 8.8 | 2.9% | Jul 1, 2020 | An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The d... |
| CVE-2019-15311 | CRITICAL | 9.8 | 7.6% | Jul 1, 2020 | An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. Th... |
| CVE-2019-15310 | CRITICAL | 9.8 | 8.3% | Jul 1, 2020 | An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user in... |
| CVE-2019-4706 | LOW | 2.7 | 0.8% | Jul 1, 2020 | IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature... |
| CVE-2019-4705 | LOW | 2.7 | 0.8% | Jul 1, 2020 | IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users. The informa... |
| CVE-2019-4704 | MEDIUM | 4.3 | 0.6% | Jul 1, 2020 | IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or sessi... |
| CVE-2019-4676 | HIGH | 7.8 | 0.5% | Jul 1, 2020 | IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read b... |
| CVE-2019-20408 | MEDIUM | 5.3 | 1.0% | Jul 1, 2020 | The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the con... |
| CVE-2019-19163 | HIGH | 8.8 | 0.6% | Jun 30, 2020 | A Vulnerability in the firmware of COMMAX WallPad(CDP-1020MB) allow an unauthenticated adjacent attacker to execute arbi... |
| CVE-2019-19161 | HIGH | 7.2 | 1.1% | Jun 30, 2020 | CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in download... |
| CVE-2019-20893 | CRITICAL | 9.8 | 2.2% | Jun 30, 2020 | An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJo... |
| CVE-2019-20416 | MEDIUM | 4.8 | 0.6% | Jun 30, 2020 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript... |
| CVE-2019-20415 | MEDIUM | 4.3 | 0.6% | Jun 30, 2020 | Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling setti... |
| CVE-2019-19160 | HIGH | 8.8 | 0.6% | Jun 29, 2020 | Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into th... |
| CVE-2019-18256 | MEDIUM | 4.6 | 0.4% | Jun 29, 2020 | BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverab... |
| CVE-2019-18254 | MEDIUM | 4.6 | 0.2% | Jun 29, 2020 | BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with... |
| CVE-2019-18252 | MEDIUM | 4.3 | 0.5% | Jun 29, 2020 | BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An atta... |
| CVE-2019-18248 | MEDIUM | 4.3 | 0.4% | Jun 29, 2020 | BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypte... |
| CVE-2019-18246 | MEDIUM | 4.3 | 0.5% | Jun 29, 2020 | BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Rem... |
| CVE-2019-3681 | CRITICAL | 9.8 | 1.4% | Jun 29, 2020 | A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, S... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now