2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-14772 | — | — | 0.9% | Aug 8, 2019 | verdaccio before 3.12.0 allows XSS. |
| CVE-2019-14754 | — | — | 1.5% | Aug 8, 2019 | Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id param... |
| CVE-2019-14255 | — | — | 2.2% | Aug 8, 2019 | A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HT... |
| CVE-2019-14221 | — | — | 1.7% | Aug 8, 2019 | 1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation. |
| CVE-2019-14771 | — | — | 2.6% | Aug 8, 2019 | Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives throu... |
| CVE-2019-14770 | — | — | 0.8% | Aug 8, 2019 | In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be craf... |
| CVE-2019-14769 | — | — | 0.8% | Aug 8, 2019 | Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain bl... |
| CVE-2019-14474 | — | — | 1.9% | Aug 7, 2019 | eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, res... |
| CVE-2019-14537 | — | — | 6.1% | Aug 7, 2019 | YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass. |
| CVE-2019-11653 | — | — | 0.8% | Aug 7, 2019 | Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploite... |
| CVE-2019-14747 | — | — | 0.8% | Aug 7, 2019 | DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter. |
| CVE-2019-14746 | — | — | 1.2% | Aug 7, 2019 | A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php db_name parame... |
| CVE-2019-14743 | — | — | 0.5% | Aug 7, 2019 | In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" ... |
| CVE-2019-14432 | — | — | 2.3% | Aug 7, 2019 | Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code ex... |
| CVE-2019-10368 | — | — | 0.8% | Aug 7, 2019 | A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl... |
| CVE-2019-14731 | — | — | 0.6% | Aug 7, 2019 | An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other peop... |
| CVE-2019-14709 | — | — | 1.8% | Aug 6, 2019 | A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The... |
| CVE-2019-14708 | — | — | 4.5% | Aug 6, 2019 | An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the acti... |
| CVE-2019-14707 | — | — | 3.0% | Aug 6, 2019 | An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process i... |
| CVE-2019-14706 | — | — | 2.1% | Aug 6, 2019 | A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An ... |
| CVE-2019-14705 | — | — | 1.6% | Aug 6, 2019 | An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 becau... |
| CVE-2019-14704 | — | — | 1.9% | Aug 6, 2019 | An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands... |
| CVE-2019-14703 | — | — | 0.7% | Aug 6, 2019 | A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmwar... |
| CVE-2019-14702 | — | — | 1.7% | Aug 6, 2019 | An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilities... |
| CVE-2019-14701 | — | — | 2.3% | Aug 6, 2019 | An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now