2019 CVE Vulnerabilities
17,624 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-7921 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the product catalog form of Magento 2.1 prior to 2.1.18, Magento 2... |
| CVE-2019-7915 | — | — | 1.2% | Aug 2, 2019 | A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior t... |
| CVE-2019-7913 | — | — | 1.4% | Aug 2, 2019 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Ma... |
| CVE-2019-7912 | — | — | 1.6% | Aug 2, 2019 | A file upload filter bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.... |
| CVE-2019-7911 | — | — | 1.4% | Aug 2, 2019 | A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce ... |
| CVE-2019-7909 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magen... |
| CVE-2019-7908 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior ... |
| CVE-2019-7904 | — | — | 0.8% | Aug 2, 2019 | Insufficient enforcement of user access controls in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3... |
| CVE-2019-7903 | — | — | 2.1% | Aug 2, 2019 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 pri... |
| CVE-2019-7899 | — | — | 0.9% | Aug 2, 2019 | Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open So... |
| CVE-2019-7898 | — | — | 0.9% | Aug 2, 2019 | Samples of disabled downloadable products are accessible in Magento Open Source prior to 1.9.4.2, and Magento Commerce p... |
| CVE-2019-7897 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magen... |
| CVE-2019-7896 | — | — | 1.9% | Aug 2, 2019 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 pri... |
| CVE-2019-7895 | — | — | 1.9% | Aug 2, 2019 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 pri... |
| CVE-2019-7892 | — | — | 1.8% | Aug 2, 2019 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 pri... |
| CVE-2019-7890 | — | — | 0.8% | Aug 2, 2019 | An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to... |
| CVE-2019-7889 | — | — | 0.8% | Aug 2, 2019 | An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magen... |
| CVE-2019-7888 | — | — | 0.9% | Aug 2, 2019 | An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 p... |
| CVE-2019-7887 | — | — | 0.6% | Aug 2, 2019 | A reflected cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Ma... |
| CVE-2019-7886 | — | — | 1.2% | Aug 2, 2019 | A cryptograhic flaw exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A wea... |
| CVE-2019-7885 | — | — | 2.0% | Aug 2, 2019 | Insufficient input validation in the config builder of the Elastic search module could lead to remote code execution in ... |
| CVE-2019-7882 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and Ma... |
| CVE-2019-7881 | — | — | 1.2% | Aug 2, 2019 | A cross-site scripting mitigation bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 ... |
| CVE-2019-7880 | — | — | 0.6% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior ... |
| CVE-2019-7877 | — | — | 0.8% | Aug 2, 2019 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior ... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now