2019 CVE Vulnerabilities
17,684 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-18223 | MEDIUM | 5.4 | 0.6% | Apr 27, 2020 | ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumb... |
| CVE-2019-20789 | MEDIUM | 4.8 | 0.7% | Apr 26, 2020 | Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies. |
| CVE-2019-4751 | MEDIUM | 5.3 | 1.3% | Apr 24, 2020 | IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacker... |
| CVE-2019-4750 | HIGH | 8.8 | 0.5% | Apr 24, 2020 | IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker... |
| CVE-2019-15794 | MEDIUM | 6.7 | 1.2% | Apr 24, 2020 | Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 k... |
| CVE-2019-15793 | HIGH | 8.8 | 0.7% | Apr 24, 2020 | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations... |
| CVE-2019-15792 | HIGH | 7.8 | 1.1% | Apr 24, 2020 | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioc... |
| CVE-2019-15791 | HIGH | 7.8 | 1.3% | Apr 24, 2020 | In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioc... |
| CVE-2019-20788 | CRITICAL | 9.8 | 2.4% | Apr 23, 2020 | libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer over... |
| CVE-2019-17101 | MEDIUM | 6.7 | 0.8% | Apr 23, 2020 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions p... |
| CVE-2019-9183 | HIGH | 7.5 | 2.3% | Apr 23, 2020 | An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an intege... |
| CVE-2019-8359 | CRITICAL | 9.8 | 2.1% | Apr 23, 2020 | An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data... |
| CVE-2019-4735 | MEDIUM | 4.6 | 0.4% | Apr 23, 2020 | IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information f... |
| CVE-2019-4668 | MEDIUM | 5.5 | 0.3% | Apr 23, 2020 | IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM... |
| CVE-2019-6859 | HIGH | 7.5 | 1.3% | Apr 22, 2020 | A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs ... |
| CVE-2019-20787 | CRITICAL | 9.8 | 1.5% | Apr 22, 2020 | Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. |
| CVE-2019-19107 | MEDIUM | 5.5 | 0.2% | Apr 22, 2020 | The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and... |
| CVE-2019-19106 | CRITICAL | 9.1 | 1.3% | Apr 22, 2020 | Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway all... |
| CVE-2019-19105 | MEDIUM | 5.5 | 0.3% | Apr 22, 2020 | The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current setting... |
| CVE-2019-19104 | CRITICAL | 9.8 | 1.4% | Apr 22, 2020 | The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different end... |
| CVE-2019-20102 | MEDIUM | 6.1 | 1.1% | Apr 22, 2020 | The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version ... |
| CVE-2019-4327 | HIGH | 7.5 | 1.0% | Apr 21, 2020 | "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to ap... |
| CVE-2019-17525 | HIGH | 8.8 | 5.8% | Apr 21, 2020 | The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and... |
| CVE-2019-8961 | HIGH | 7.5 | 1.8% | Apr 21, 2020 | A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16... |
| CVE-2019-8960 | HIGH | 7.5 | 1.3% | Apr 21, 2020 | A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe versi... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now