Menu

Star on GitHub · 3.2k

2019

17,305 vulnerabilities published in 2019.

Results

71 of 17,305· Page 2/2
7.2
CVE-2019-2616KEV

Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publi

8.8
CVE-2019-3398KEV

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at

7.8
CVE-2019-0859KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2019-0841KEV

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

7.8
CVE-2019-0803KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.5
CVE-2019-0752KEV

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

7.8
CVE-2019-0808KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2019-0797KEV

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

7.8
CVE-2019-0211KEV

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

7.2
CVE-2019-11001KEV

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the

7.8
CVE-2018-4344KEV

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, mac

7.5
CVE-2019-5418KEV

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

7.5
CVE-2019-6223KEV

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T

8.8
CVE-2019-9082KEV

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public/

8.1
CVE-2019-6340KEV

Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x befo

7.8
CVE-2018-20250KEV

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

7.5
CVE-2019-1653KEV

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Route

7.2
CVE-2019-1652KEV

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Route

7.8
CVE-2018-15982KEV

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful

7.8
CVE-2019-0543KEV

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W

8.8
CVE-2019-0541KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML E

Test your stack for 2019issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.