2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-12003 | — | — | — | Jun 1, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2019-20805 | MEDIUM | 5.5 | 0.7% | Jun 1, 2020 | p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment. |
| CVE-2019-6342 | CRITICAL | 9.8 | 1.6% | May 28, 2020 | An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be m... |
| CVE-2019-20807 | MEDIUM | 5.3 | 0.5% | May 28, 2020 | In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting in... |
| CVE-2019-20806 | MEDIUM | 4.4 | 0.4% | May 27, 2020 | An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in ... |
| CVE-2019-20804 | HIGH | 8.8 | 1.1% | May 21, 2020 | Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin accou... |
| CVE-2019-20803 | MEDIUM | 6.1 | 1.8% | May 21, 2020 | Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_prev... |
| CVE-2019-5997 | CRITICAL | 9.8 | 1.7% | May 20, 2020 | Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vecto... |
| CVE-2019-11048 | MEDIUM | 5.3 | 6.3% | May 20, 2020 | In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supply... |
| CVE-2019-17066 | HIGH | 7.8 | 0.5% | May 18, 2020 | In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registri... |
| CVE-2019-19456 | MEDIUM | 6.1 | 1.0% | May 18, 2020 | A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza ... |
| CVE-2019-19454 | HIGH | 7.5 | 1.6% | May 18, 2020 | An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue ... |
| CVE-2019-7247 | CRITICAL | 9.8 | 2.1% | May 18, 2020 | An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL ... |
| CVE-2019-7246 | MEDIUM | 6.7 | 0.4% | May 18, 2020 | An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. T... |
| CVE-2019-20802 | MEDIUM | 6.1 | 0.7% | May 18, 2020 | An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server im... |
| CVE-2019-20801 | MEDIUM | 5.3 | 1.0% | May 18, 2020 | An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server al... |
| CVE-2019-20800 | CRITICAL | 9.8 | 2.1% | May 18, 2020 | In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in... |
| CVE-2019-20799 | HIGH | 7.5 | 2.4% | May 18, 2020 | In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work ... |
| CVE-2019-20798 | HIGH | 8.4 | 1.7% | May 18, 2020 | An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displa... |
| CVE-2019-20797 | HIGH | 7.5 | 2.7% | May 18, 2020 | An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for... |
| CVE-2019-20390 | HIGH | 8.1 | 0.7% | May 15, 2020 | A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to r... |
| CVE-2019-20389 | MEDIUM | 6.1 | 0.9% | May 15, 2020 | An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can i... |
| CVE-2019-19721 | HIGH | 7.8 | 2.0% | May 15, 2020 | An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows re... |
| CVE-2019-18666 | CRITICAL | 9.8 | 3.2% | May 15, 2020 | An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without autho... |
| CVE-2019-17572 | MEDIUM | 5.3 | 3.0% | May 14, 2020 | In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topi... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now