Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 110 of 164.
- CVE-2019-15090 Memory corruption in canonical:ubuntu linux
- CVE-2019-15089 Cross-site request forgery in prise:adas
- CVE-2019-15088 Auth bypass in prise:adas
- CVE-2019-15087 Code injection in prise:adas
- CVE-2019-15086 Cross-site scripting in prise:adas
- CVE-2019-15085 Information disclosure in prise:adas
- CVE-2019-15084 Misconfiguration in maxx:waves maxx audio
- CVE-2019-15083 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2019-15082 Cross-site scripting in yofla:360 product rotation
- CVE-2019-15081 Cross-site scripting in opencart:opencart
- CVE-2019-15080 Business logic in morph project:morph
- CVE-2019-15079 Business logic in eai project:eai
- CVE-2019-15078 Business logic in xbornid:xbornid
- CVE-2019-15075 Hardcoded credentials in inextrix:astpp
- CVE-2019-15074 MantisBT allows cross-site scripting (XSS) via crafted filename
- CVE-2019-15073 Openfind MAIL2000 Webmail Pre-Auth Open Redirect
- CVE-2019-15072 Openfind MAIL2000 Webmail Post-Auth Cross-Site Scripting
- CVE-2019-15071 Openfind MAIL2000 Webmail Pre-Auth Cross-Site Scripting
- CVE-2019-15069 An unsafe authentication interface was discovered in Smart Battery A4
- CVE-2019-15068 A broken access control vulnerability discovered in Smart Battery A4
- CVE-2019-15067 An authentication bypass vulnerability discovered in Smart Battery A2-25DE
- CVE-2019-15066 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998
- CVE-2019-15065 A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
- CVE-2019-15064 HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication
- CVE-2019-15062 Dolibarr Cross-Site Request Forgery (CSRF)
- CVE-2019-15060 Command injection in tp-link:tl-wr840n firmware
- CVE-2019-15059 Missing authorization in lispbx project:lispbx
- CVE-2019-15058 Memory corruption in stb project:stb
- CVE-2019-15055 Path traversal in mikrotik:routeros
- CVE-2019-15054 Cross-site scripting in getmailbird:mailbird
- CVE-2019-15053 Cross-site scripting in atlassian:html include and replace macro
- CVE-2019-15052 Information disclosure in gradle:gradle
- CVE-2019-15051 Command injection in softing:uagate 840d firmware
- CVE-2019-15050 Memory corruption in axiosys:bento4
- CVE-2019-15049 Memory corruption in axiosys:bento4
- CVE-2019-15048 Memory corruption in axiosys:bento4
- CVE-2019-15047 Memory corruption in axiosys:bento4
- CVE-2019-15046 Information disclosure in zohocorp:manageengine servicedesk plus
- CVE-2019-15045 Information disclosure in zohocorp:manageengine servicedesk plus
- CVE-2019-15043 Missing authorization in grafana:grafana
- CVE-2019-15042 Weak cryptography in jetbrains:teamcity
- CVE-2019-15041 Open redirect in jetbrains:youtrack
- CVE-2019-15040 Cross-site request forgery in jetbrains:youtrack
- CVE-2019-15039 Path traversal in jetbrains:teamcity
- CVE-2019-15038 Misconfiguration in jetbrains:teamcity
- CVE-2019-15037 Cross-site scripting in jetbrains:teamcity
- CVE-2019-15036 Command injection in jetbrains:teamcity
- CVE-2019-15035 Information disclosure in jetbrains:teamcity
- CVE-2019-15034 Memory corruption in qemu:qemu
- CVE-2019-15033 Server-side request forgery in pydio:pydio
- CVE-2019-15032 Information disclosure in pydio:pydio
- CVE-2019-15031 Information disclosure in canonical:ubuntu linux
- CVE-2019-15030 Information disclosure in canonical:ubuntu linux
- CVE-2019-15029 Command injection in fusionpbx:fusionpbx
- CVE-2019-15028 Security feature bypass in joomla:joomla\!
- CVE-2019-15027 Command injection in mediatek:mt6577 firmware
- CVE-2019-15026 Memory corruption in memcached:memcached
- CVE-2019-15025 SQL injection in ninjaforms:ninjaforms
- CVE-2019-15024 Path traversal in ClickHouse
- CVE-2019-15023 Information disclosure in Palo Alto Networks Zingbox Inspector
- CVE-2019-15022 Security feature bypass in Palo Alto Networks Zingbox Inspector
- CVE-2019-15021 Server-side request forgery in Palo Alto Networks Zingbox Inspector
- CVE-2019-15020 Command injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-15019 Other in Palo Alto Networks Zingbox Inspector
- CVE-2019-15018 Auth bypass in Palo Alto Networks Zingbox Inspector
- CVE-2019-15017 Hardcoded credentials in Palo Alto Networks Zingbox Inspector
- CVE-2019-15016 SQL injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-15015 Hardcoded credentials in Palo Alto Networks Zingbox Inspector
- CVE-2019-15014 Command injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-15013 Missing authorization in Jira
- CVE-2019-15012 Path traversal in Bitbucket Data Center
- CVE-2019-15011 Missing authorization in Application Links
- CVE-2019-15010 Command injection in Bitbucket Data Center
- CVE-2019-15009 Missing authorization in Crucible
- CVE-2019-15008 Cross-site scripting in Crucible
- CVE-2019-15007 Cross-site scripting in Crucible
- CVE-2019-15006 Weak cryptography in Confluence Server
- CVE-2019-15005 Missing authorization in Bamboo
- CVE-2019-15004 Path traversal in Jira Service Desk Data Center
- CVE-2019-15003 Auth bypass in Jira Service Desk Data Center
- CVE-2019-15002 Cross-site request forgery in Jira Data Center
- CVE-2019-15001 Code injection in Jira Data Center
- CVE-2019-15000 Command injection in Bitbucket Data Center
- CVE-2019-14999 Cross-site request forgery in Universal Plugin Manager
- CVE-2019-14998 Cross-site request forgery in Jira
- CVE-2019-14997 Information disclosure in Jira
- CVE-2019-14996 Cross-site scripting in Jira
- CVE-2019-14995 Missing authorization in Jira
- CVE-2019-14994 Path traversal in Jira Service Desk Data Center
- CVE-2019-14993 Istio ReDoS Vulnerability
- CVE-2019-14987 Cross-site scripting in schben:framework
- CVE-2019-14986 Missing authorization in eq-3:homematic ccu2 firmware
- CVE-2019-14985 Auth bypass in eq-3:homematic ccu2 firmware
- CVE-2019-14984 Missing authorization in eq-3:homematic ccu2 firmware
- CVE-2019-14982 Integer overflow in exiv2:exiv2
- CVE-2019-14981 Denial of service in canonical:ubuntu linux
- CVE-2019-14980 Use after free in imagemagick:imagemagick
- CVE-2019-14979 Business logic in woocommerce:paypal checkout payment gateway
- CVE-2019-14978 Business logic in woocommerce:payu india payment gateway
- CVE-2019-14976 Cross-site scripting in icmsdev:icms