2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-19165 | HIGH | 7.2 | 0.6% | Apr 29, 2020 | AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and... |
| CVE-2019-4288 | MEDIUM | 4.3 | 0.3% | Apr 29, 2020 | IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authen... |
| CVE-2019-4286 | MEDIUM | 4.3 | 0.3% | Apr 29, 2020 | IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authen... |
| CVE-2019-20781 | HIGH | 7.8 | 0.3% | Apr 29, 2020 | An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur. |
| CVE-2019-16653 | HIGH | 8.8 | 2.0% | Apr 29, 2020 | An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin ... |
| CVE-2019-7634 | MEDIUM | 5.4 | 0.6% | Apr 29, 2020 | SUAP V2 allows XSS during the update of user information. |
| CVE-2019-16652 | HIGH | 7.2 | 2.4% | Apr 29, 2020 | The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitra... |
| CVE-2019-20792 | MEDIUM | 6.8 | 0.7% | Apr 29, 2020 | OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey... |
| CVE-2019-19102 | HIGH | 7.5 | 1.2% | Apr 29, 2020 | A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, ... |
| CVE-2019-19101 | MEDIUM | 5.9 | 0.5% | Apr 29, 2020 | A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Stud... |
| CVE-2019-19100 | HIGH | 7.1 | 0.3% | Apr 29, 2020 | A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3... |
| CVE-2019-5614 | CRITICAL | 9.8 | 1.3% | Apr 29, 2020 | In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE... |
| CVE-2019-15874 | CRITICAL | 9.8 | 1.3% | Apr 29, 2020 | In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE... |
| CVE-2019-15877 | MEDIUM | 5.5 | 0.2% | Apr 28, 2020 | In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in... |
| CVE-2019-15876 | MEDIUM | 5.5 | 0.3% | Apr 28, 2020 | In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE... |
| CVE-2019-20791 | CRITICAL | 9.8 | 0.9% | Apr 28, 2020 | OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc. |
| CVE-2019-15790 | LOW | 3.3 | 0.5% | Apr 28, 2020 | Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines w... |
| CVE-2019-5303 | MEDIUM | 5.3 | 0.3% | Apr 27, 2020 | There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SC... |
| CVE-2019-5302 | MEDIUM | 5.3 | 0.3% | Apr 27, 2020 | There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SC... |
| CVE-2019-15234 | HIGH | 7.5 | 1.5% | Apr 27, 2020 | SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to alloc... |
| CVE-2019-14941 | HIGH | 7.5 | 1.5% | Apr 27, 2020 | SHAREit through 4.0.6.177 does not check the body length from the received packet header (which is used to allocate memo... |
| CVE-2019-20002 | HIGH | 7.8 | 1.3% | Apr 27, 2020 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privilege... |
| CVE-2019-18823 | CRITICAL | 9.8 | 2.8% | Apr 27, 2020 | HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possib... |
| CVE-2019-4729 | MEDIUM | 4.3 | 1.6% | Apr 27, 2020 | IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technic... |
| CVE-2019-20790 | CRITICAL | 9.8 | 2.7% | Apr 27, 2020 | OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authenti... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now