Skip to content
BackEsc
Sign in

No weakness recorded · 2019

No weakness recorded: 2019

2,260 CVEs · 22 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no weakness (CWE), published in 2019. The named ones are the most at risk.

exploited in the wild
22
check available
13
likely to be exploited
152

Every one of the 2,260 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code ExecutionCVE-2019-11580Atlassian · CVSS 9.8 · 95% likely

    Atlassian

  2. Oracle Business Intelligence/XML Publisher - XML External Entity InjectionCVE-2019-2616Oracle Corporation · CVSS 7.2 · 92% likely

    Oracle

  3. Sonatype Nexus Repository Manager <3.15.0 - Remote Code ExecutionCVE-2019-7238Sonatype · CVSS 9.8 · 77% likely

    Sonatype

  4. A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, s…CVE-2019-1003029Jenkins project · CVSS 9.9 · 74% likely

    Jenkins

  5. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.CVE-2019-1458Microsoft · CVSS 7.8 · 74% likely

    Microsoft

  6. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.…CVE-2019-0808Microsoft · CVSS 7.8 · 53% likely

    Microsoft

  7. In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows…CVE-2019-13272Linux · CVSS 7.8 · 52% likelycovered by CyberSIXT

    Linux

  8. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.…CVE-2019-0803Microsoft · CVSS 7.8 · 45% likely

    MicrosoftTonto Team

  9. Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In J…CVE-2018-20753Kaseya · CVSS 9.8 · 30% likely

    Kaseya

  10. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution V…CVE-2019-1297Microsoft · CVSS 8.8 · 22% likely

    Microsoft

  11. A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerabili…CVE-2019-0903Microsoft · CVSS 8.8 · 22% likely

    Microsoft

  12. An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID i…CVE-2019-1322Microsoft · CVSS 7.8 · 19% likely

    Microsoft

  13. Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low…CVE-2019-3010Oracle Corporation · CVSS 8.8 · 14% likely

    Oracle

  14. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.CVE-2019-1132Microsoft · CVSS 7.8 · 9.9% likely

    Microsoft

  15. An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID…CVE-2019-0703Microsoft · CVSS 6.5 · 9.4% likely

    Microsoft

  16. An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for…CVE-2019-0676Microsoft · CVSS 6.5 · 8.1% likely

    Microsoft

  17. An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.CVE-2019-0863Microsoft · CVSS 7.8 · 5.2% likely

    Microsoft

  18. Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrie…CVE-2019-16256SIMalliance · CVSS 9.8 · 4.9% likely

    SIMalliance

  19. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.…CVE-2019-0859Microsoft · CVSS 7.8 · 4.2% likely

    Microsoft

  20. A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supp…CVE-2019-6223Apple · CVSS 7.5 · 2.6% likely

    Apple

  21. A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.CVE-2019-0880Microsoft · CVSS 7.8 · 2.3% likely

    Microsoft

  22. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.…CVE-2019-0797Microsoft · CVSS 7.8 · 1.9% likely

    Microsoft

  23. Jenkins Script Security Plugin <=1.49 - Sandbox BypassCVE-2019-1003000Jenkins project · 98% likely

    Jenkins

  24. Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor ConsoleCVE-2019-727693% likely
  25. Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access ControlCVE-2019-2578Oracle Corporation · 71% likely

    Oracle

  26. Jira - Local File InclusionCVE-2019-8442Atlassian · 60% likely

    Atlassian

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in