2019 CVE Vulnerabilities
17,619 CVEs published in 2019.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2019-8148 | MEDIUM | 4.8 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated adm... |
| CVE-2019-8147 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8146 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8143 | MEDIUM | 6.5 | 0.9% | Nov 6, 2019 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti... |
| CVE-2019-8142 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8140 | MEDIUM | 4.9 | 0.8% | Nov 6, 2019 | An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1.... |
| CVE-2019-8139 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use... |
| CVE-2019-8138 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8133 | MEDIUM | 6.5 | 1.0% | Nov 6, 2019 | A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user wi... |
| CVE-2019-8131 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8129 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8128 | MEDIUM | 5.4 | 0.6% | Nov 6, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8126 | MEDIUM | 4.9 | 0.9% | Nov 5, 2019 | An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An ... |
| CVE-2019-8124 | MEDIUM | 4.9 | 1.0% | Nov 5, 2019 | An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10,... |
| CVE-2019-8123 | MEDIUM | 5.3 | 0.8% | Nov 5, 2019 | An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prio... |
| CVE-2019-8120 | MEDIUM | 5.4 | 0.6% | Nov 5, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Ma... |
| CVE-2019-8118 | MEDIUM | 5.3 | 0.7% | Nov 5, 2019 | Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to... |
| CVE-2019-8117 | MEDIUM | 5.4 | 0.6% | Nov 5, 2019 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2... |
| CVE-2019-8115 | MEDIUM | 4.8 | 0.6% | Nov 5, 2019 | A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 o... |
| CVE-2019-8113 | MEDIUM | 5.3 | 0.9% | Nov 5, 2019 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator ... |
| CVE-2019-8108 | MEDIUM | 6.5 | 1.2% | Nov 5, 2019 | Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to... |
| CVE-2019-8107 | MEDIUM | 6.5 | 0.8% | Nov 5, 2019 | An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. ... |
| CVE-2019-8092 | MEDIUM | 5.4 | 0.6% | Nov 5, 2019 | A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 o... |
| CVE-2019-8090 | MEDIUM | 6.5 | 0.8% | Nov 5, 2019 | An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3... |
| CVE-2019-5068 | MEDIUM | 4.4 | 0.5% | Nov 5, 2019 | An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.... |
Check if your code is affected by 2019 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now