Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 106 of 164.
- CVE-2019-15563 OHDSI WebAPI vulnerable to SQL Injection
- CVE-2019-15562 SQL injection in gorm:gorm
- CVE-2019-15561 SQL injection in flashlingo project:flashlingo
- CVE-2019-15560 SQL injection in reviews module project:reviews module
- CVE-2019-15559 SQL injection in hawn project:hawn
- CVE-2019-15558 SQL injection in xm-online:xm\^online 2 - common utils and endpoints
- CVE-2019-15557 SQL injection in xm-online:xm\^online 2 user account and authentication server
- CVE-2019-15556 SQL injection in social network project:social network
- CVE-2019-15555 SQL injection in wellness project:wellness
- CVE-2019-15554 Memory corruption in smallvec
- CVE-2019-15553 Exposure of uninitialized memory in memoffset
- CVE-2019-15552 Use after free in libflate
- CVE-2019-15551 Double free in smallvec
- CVE-2019-15550 Out of bounds read in simd-json
- CVE-2019-15549 Memory exhaustion in asn1_der
- CVE-2019-15548 Buffer overflow and format vulnerabilities in ncurses
- CVE-2019-15547 Mishandling of format strings in ncurses
- CVE-2019-15546 Format string vulnerabilities in pancurses
- CVE-2019-15545 Failure to properly verify ed25519 signatures in libp2p-core
- CVE-2019-15544 Uncontrolled memory consumption in protobuf
- CVE-2019-15543 Out of bounds write in slice-deque
- CVE-2019-15542 Uncontrolled recursion in ammonia
- CVE-2019-15541 Denial of service in rustls project:rustls
- CVE-2019-15540 Memory corruption in cdemu:libmirage
- CVE-2019-15539 MantisBT XSS when uploading an attachment
- CVE-2019-15538 Denial of service in canonical:ubuntu linux
- CVE-2019-15537 SQL Injection in SimpleSAMLphp
- CVE-2019-15536 SQL injection in youracclaim:acclaim
- CVE-2019-15535 SQL injection in hostosm:tasking manager
- CVE-2019-15534 SQL injection in raml-module-builder project:raml-module-builder
- CVE-2019-15533 SQL injection in xayr:xenfcoresharp
- CVE-2019-15532 Cross-Site Scripting in cyberchef
- CVE-2019-15531 Memory corruption in debian:debian linux
- CVE-2019-15530 Command injection in dlink:dir-823g firmware
- CVE-2019-15529 Command injection in dlink:dir-823g firmware
- CVE-2019-15528 Command injection in dlink:dir-823g firmware
- CVE-2019-15527 Command injection in dlink:dir-823g firmware
- CVE-2019-15526 Command injection in dlink:dir-823g firmware
- CVE-2019-15525 Security feature bypass in pw3270 project:pw3270
- CVE-2019-15524 File upload in cszcms:csz cms
- CVE-2019-15523 Other in debian:debian linux
- CVE-2019-15522 Security feature bypass in linbit:csync2
- CVE-2019-15521 Spoon Library as used in Fork CMS allows PHP object injection
- CVE-2019-15520 Path traversal in comelz:quark
- CVE-2019-1552 Windows builds with insecure path defaults
- CVE-2019-15519 Path traversal in power-response project:power-response
- CVE-2019-15518 Path traversal in swoole:swoole
- CVE-2019-15517 Path traversal in jc21:nginx proxy manager
- CVE-2019-15516 Path traversal in cuberite:cuberite
- CVE-2019-15515 Cross-site request forgery in discourse:discourse
- CVE-2019-15514 Information disclosure in telegram:telegram
- CVE-2019-15513 Denial of service in motorola:c1 mwr03 firmware
- CVE-2019-15511 Privilege escalation in gog:galaxy
- CVE-2019-15510 Cross-site scripting in zohocorp:manageengine desktop central
- CVE-2019-1551 rsaz_512_sqr overflow bug on x86_64
- CVE-2019-15508 Information disclosure in octopus:server
- CVE-2019-15507 Information disclosure in octopus:server
- CVE-2019-15506 Missing authorization in kaseya:virtual system administrator
- CVE-2019-15505 Memory corruption in canonical:ubuntu linux
- CVE-2019-15504 Memory corruption in canonical:ubuntu linux
- CVE-2019-15503 Command injection in altavoz:prontuscms
- CVE-2019-15502 Denial of service in teamspeak:teamspeak
- CVE-2019-15501 Cross-site scripting in lsoft:listserv
- CVE-2019-15499 Cross-site scripting in hackmd:codimd
- CVE-2019-15498 Command injection in getvera:vera edge firmware
- CVE-2019-15497 Hardcoded credentials in blackbox:icompel firmware
- CVE-2019-15496 Cross-site request forgery in manageyourteam:myt project management
- CVE-2019-15494 Server-side request forgery in it-novum:openitcockpit
- CVE-2019-15493 Other in it-novum:openitcockpit
- CVE-2019-15492 Cross-site scripting in it-novum:openitcockpit
- CVE-2019-15491 Cross-site request forgery in it-novum:openitcockpit
- CVE-2019-15490 Command injection in it-novum:openitcockpit
- CVE-2019-1549 Fork Protection
- CVE-2019-15489 laracom Cross-site Scripting
- CVE-2019-15488 Cross-site Scripting in Ignite Realtime Openfire
- CVE-2019-15487 Cross-site scripting in schoolexperience:department for education school experience
- CVE-2019-15486 Cross-site Scripting in django-js-reverse
- CVE-2019-15485 Cross-site Scripting in Bolt
- CVE-2019-15484 Bolt Cross-site Scripting (XSS) via an image's alt or title field
- CVE-2019-15483 Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log
- CVE-2019-15482 Cross-Site Scripting in selectize-plugin-a11y
- CVE-2019-15481 Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
- CVE-2019-15480 Domoticz 4.10717 has XSS via item.Name.
- CVE-2019-15479 Status Board vulnerable to Cross-Site Scripting before v1.1.82
- CVE-2019-15478 Cross-Site Scripting in status-board
- CVE-2019-15477 Cross-site Scripting in Jooby
- CVE-2019-15476 Cross-site scripting in former project:former
- CVE-2019-15475 Missing authorization in mi:a3 firmware
- CVE-2019-15474 Missing authorization in mi:cepheus firmware
- CVE-2019-15473 Missing authorization in mi:a2 lite firmware
- CVE-2019-15472 Missing authorization in mi:a2 lite firmware
- CVE-2019-15471 Missing authorization in mi:mix 2s firmware
- CVE-2019-15470 Missing authorization in mi:redmi note 6 pro firmware
- CVE-2019-1547 ECDSA remote timing attack
- CVE-2019-15469 Missing authorization in mi:pad 4 firmware
- CVE-2019-15468 Missing authorization in mi:a2 lite firmware
- CVE-2019-15467 Missing authorization in mi:mix 2s firmware
- CVE-2019-15466 Missing authorization in mi:redmi 6 pro firmware
- CVE-2019-15465 Missing authorization in samsung:galaxy j7 pro firmware
- CVE-2019-15464 Missing authorization in samsung:galaxy j7 pro firmware