2019 CVE Vulnerabilities

17,684 CVEs published in 2019.

CVE IDSeverityCVSSDescription
CVE-2019-17562CRITICAL9.8A buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack. This applies to all vers...
CVE-2019-13023MEDIUM6.5An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RAD...
CVE-2019-13022CRITICAL9.8Bond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding password generation algorit...
CVE-2019-13021MEDIUM6.5The administrative passwords for all versions of Bond JetSelect are stored within an unprotected file on the filesystem,...
CVE-2019-15083MEDIUM6.1Default installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to XSS injected by a workst...
CVE-2019-2388MEDIUM5.3In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access l...
CVE-2019-9682HIGH8.1Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compati...
CVE-2019-15880CRITICAL9.8In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocat...
CVE-2019-15879HIGH7.4In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a...
CVE-2019-15878HIGH7.8In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local use...
CVE-2019-16112HIGH8.8TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java objec...
CVE-2019-4478MEDIUM6.5IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information th...
CVE-2019-5500HIGH7.5Certain versions of the NetApp Service Processor and Baseboard Management Controller firmware allow a remote unauthentic...
CVE-2019-4667MEDIUM5.9IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure ...
CVE-2019-19162HIGH7.8A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system ru...
CVE-2019-20795MEDIUM4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be lim...
CVE-2019-20794MEDIUM4.7An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user ca...
CVE-2019-17291——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17290——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17289——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17288——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17287——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17286——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17285——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...
CVE-2019-17284——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No...

Check if your code is affected by 2019 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now