2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19166 | HIGH | 7.8 | 0.4% | May 6, 2020 | Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows att... |
| CVE-2019-20768 | MEDIUM | 5.4 | 0.7% | May 5, 2020 | ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow st... |
| CVE-2019-19517 | HIGH | 8.8 | 0.5% | May 5, 2020 | Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process. |
| CVE-2019-19515 | MEDIUM | 6.1 | 0.8% | May 5, 2020 | Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings. |
| CVE-2019-19514 | MEDIUM | 5.4 | 0.6% | May 5, 2020 | Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID. |
| CVE-2019-13285 | HIGH | 7.5 | 1.0% | May 4, 2020 | CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection. |
| CVE-2019-12864 | MEDIUM | 5.5 | 0.5% | May 4, 2020 | SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper... |
| CVE-2019-17557 | MEDIUM | 5.4 | 1.2% | May 4, 2020 | It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage paramete... |
| CVE-2019-11823 | HIGH | 7.5 | 2.4% | May 4, 2020 | CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attack... |
| CVE-2019-4209 | MEDIUM | 6.1 | 0.6% | May 1, 2020 | HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to ... |
| CVE-2019-12425 | HIGH | 7.5 | 4.7% | Apr 30, 2020 | Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host |
| CVE-2019-0235 | HIGH | 8.8 | 32.7% | Apr 30, 2020 | Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks. |
| CVE-2019-19220 | HIGH | 8.8 | 1.8% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). |
| CVE-2019-19219 | HIGH | 7.5 | 1.1% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. |
| CVE-2019-19218 | HIGH | 7.5 | 1.0% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. |
| CVE-2019-19217 | HIGH | 8.8 | 1.8% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. |
| CVE-2019-19216 | HIGH | 8.8 | 1.1% | Apr 30, 2020 | BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. |
| CVE-2019-19215 | HIGH | 8.8 | 1.6% | Apr 30, 2020 | A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Cont... |
| CVE-2019-5623 | CRITICAL | 9.8 | 1.6% | Apr 29, 2020 | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Spe... |
| CVE-2019-5622 | CRITICAL | 9.8 | 1.1% | Apr 29, 2020 | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials... |
| CVE-2019-5621 | HIGH | 7.8 | 2.2% | Apr 29, 2020 | ABBS Software Audio Media Player version 3.1 suffers from an instance of CWE-121: Stack-based Buffer Overflow. |
| CVE-2019-5620 | CRITICAL | 9.8 | 70.1% | Apr 29, 2020 | ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function. |
| CVE-2019-5619 | CRITICAL | 9.8 | 4.7% | Apr 29, 2020 | AASync.com AASync version 2.2.1.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow. |
| CVE-2019-5618 | HIGH | 7.8 | 2.2% | Apr 29, 2020 | A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow. |
| CVE-2019-16011 | HIGH | 7.8 | 0.4% | Apr 29, 2020 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitr... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now