VIR Vulnerability Intelligence Relay

CVEs from 2019

3,306 normalized CVEs published or assigned in this year.

Total
3,306
critical
critical 173
high
high 509
medium
medium 472
low
low 94
% Critical
5.2%
% with KEV
3.6%
% with exploit
4.4%

Top vendors

Top products

  • u-boot 20
  • active_iq_unified_manager 7
  • jdk 5
  • weblogic_server 5
  • oncommand_workflow_automation 5
  • oncommand_insight 4
  • codeready_linux_builder_eus 4
  • libxslt 4

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2019-5857 high — 8.0 — multiple issues in chromium
CVE-2019-5852 high — 8.0 — multiple issues in chromium
CVE-2019-1354 high — 8.0 — A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-201…
CVE-2019-5868 high — 8.0 — arbitrary code execution in chromium
CVE-2019-5859 high — 8.0 — multiple issues in chromium
CVE-2019-5793 high — 8.0 — multiple issues in chromium
CVE-2019-5791 high — 8.0 — multiple issues in chromium
CVE-2019-5792 high — 8.0 — multiple issues in chromium
CVE-2019-13704 high — 8.0 — multiple issues in chromium
CVE-2019-11737 high — 8.0 — If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly …
CVE-2019-5796 high — 8.0 — multiple issues in chromium
CVE-2019-5799 high — 8.0 — multiple issues in chromium
CVE-2019-13716 high — 8.0 — multiple issues in chromium
CVE-2019-8907 high — 8.0 — do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.
CVE-2019-18222 high — 8.0 — The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to reco…
CVE-2019-13719 high — 8.0 — multiple issues in chromium
CVE-2019-19450 high — 8.0 3y ago RHSA-2023:5790: python-reportlab security update (Important)
CVE-2019-17626 high — 8.0 4y ago RHSA-2020:0201: python-reportlab security update (Important)
CVE-2019-10195 high — 8.0 4y ago RHBA-2019:4268: idm:DL1 bug fix update (Important)
CVE-2019-18466 high — 8.0 4y ago RHSA-2019:4269: container-tools:rhel8 security and bug fix update (Important)
CVE-2019-9514 high — 8.0 4y ago RHSA-2019:4273: container-tools:1.0 security update (Important)
CVE-2019-9512 high — 8.0 4y ago RHSA-2019:4273: container-tools:1.0 security update (Important)
CVE-2019-10354 high — 8.0 4y ago Missing Authorization in Jenkins
CVE-2019-10353 high — 8.0 4y ago Cross-Site Request Forgery in Jenkins
CVE-2019-10352 high — 8.0 4y ago Improper Limitation of a Pathname to a Restricted Directory in Jenkins
CVE-2019-0981 high — 8.0 4y ago RHSA-2019:1259: dotnet security, bug fix, and enhancement update (Important)
CVE-2019-0980 high — 8.0 4y ago RHSA-2019:1259: dotnet security, bug fix, and enhancement update (Important)
CVE-2019-2435 high — 8.0 4y ago Improper Access Control in MySQL Connector Python
CVE-2019-5885 high — 8.0 4y ago Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers …
CVE-2019-16884 high — 8.0 4y ago RHSA-2019:4269: container-tools:rhel8 security and bug fix update (Important)
CVE-2019-10214 high — 8.0 4y ago RHSA-2019:3494: container-tools:1.0 security and bug fix update (Important)
CVE-2019-14867 high — 8.0 5y ago RHBA-2019:4268: idm:DL1 bug fix update (Important)
CVE-2019-0820 high — 8.0 5y ago RHSA-2019:1259: dotnet security, bug fix, and enhancement update (Important)
CVE-2019-19528 high — 8.0 5y ago RHSA-2021:1739: kernel-rt security and bug fix update (Important)
CVE-2019-18811 high — 8.0 5y ago RHSA-2021:1578: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19523 high — 8.0 5y ago RHSA-2021:1739: kernel-rt security and bug fix update (Important)
CVE-2019-2938 high — 8.0 6y ago RHSA-2020:5500: mariadb:10.3 security, bug fix, and enhancement update (Important)
CVE-2019-2974 high — 8.0 6y ago RHSA-2020:5500: mariadb:10.3 security, bug fix, and enhancement update (Important)
CVE-2019-2993 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2982 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-3011 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2998 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-3009 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2991 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-3004 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2967 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2997 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2963 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2946 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2966 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2957 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2968 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-3018 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2911 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2914 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-2960 high — 8.0 6y ago RHSA-2020:3732: mysql:8.0 security update (Important)
CVE-2019-10208 high — 8.0 6y ago RHSA-2020:5619: postgresql:9.6 security update (Important)
CVE-2019-10130 high — 8.0 6y ago RHSA-2020:5619: postgresql:9.6 security update (Important)
CVE-2019-17639 high — 8.0 6y ago RHSA-2020:3386: java-1.8.0-ibm security update (Important)
CVE-2019-19807 high — 8.0 6y ago RHSA-2020:3016: kernel-rt security and bug fix update (Important)
CVE-2019-3016 high — 8.0 6y ago RHSA-2020:3016: kernel-rt security and bug fix update (Important)
CVE-2019-20382 high — 8.0 6y ago RHSA-2020:2774: virt:rhel security update (Important)
CVE-2019-10086 high — 8.0 6y ago RHSA-2025:9318: javapackages-tools:201801 security update (Important)
CVE-2019-0199 high — 8.0 6y ago Apache Tomcat Denial of Service vulnerability
CVE-2019-12525 high — 8.0 6y ago RHSA-2020:2041: squid:4 security update (Important)
CVE-2019-12519 high — 8.0 6y ago RHSA-2020:2041: squid:4 security update (Important)
CVE-2019-16234 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-16746 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19922 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19534 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-15221 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-17053 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-18282 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-17055 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19768 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-15223 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19077 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-18805 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19532 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-12819 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-10639 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19073 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-5108 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-8980 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19074 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-15090 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19065 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19059 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-15099 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19067 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19057 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19058 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19045 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19047 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-19055 high — 8.0 6y ago RHSA-2020:1769: kernel security, bug fix, and enhancement update (Important)
CVE-2019-15690 high — 8.0 6y ago LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially cr…
CVE-2019-20788 high — 8.0 6y ago libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.
CVE-2019-20044 high — 8.0 6y ago RHSA-2020:0903: zsh security update (Important)
CVE-2019-20503 high — 8.0 6y ago RHSA-2020:0919: thunderbird security update (Important)
CVE-2019-15604 high — 8.0 6y ago RHSA-2020:0598: nodejs:12 security update (Important)