Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 111 of 164.
- CVE-2019-14975 Memory corruption in artifex:mupdf
- CVE-2019-14974 Cross-site scripting in sugarcrm:sugarcrm
- CVE-2019-14973 Integer overflow in debian:debian linux
- CVE-2019-14970 Memory corruption in debian:debian linux
- CVE-2019-14969 Misconfiguration in netwrix:auditor
- CVE-2019-14968 SQL injection in txjia:imcat
- CVE-2019-14967 Cross-site scripting in frappe:frappe
- CVE-2019-14966 SQL injection in frappe:frappe
- CVE-2019-14965 Code injection in frappe:frappe
- CVE-2019-14961 Cross-site scripting in jetbrains:upsource
- CVE-2019-14960 Supply chain in jetbrains:rider
- CVE-2019-14959 Weak cryptography in jetbrains:toolbox
- CVE-2019-14958 Denial of service in jetbrains:pycharm
- CVE-2019-14957 Information disclosure in jetbrains:vim
- CVE-2019-14956 Missing authorization in jetbrains:youtrack
- CVE-2019-14955 Security feature bypass in jetbrains:hub
- CVE-2019-14954 Weak cryptography in jetbrains:intellij idea
- CVE-2019-14953 Cross-site scripting in jetbrains:youtrack
- CVE-2019-14952 Cross-site scripting in jetbrains:youtrack
- CVE-2019-14951 Auth bypass in telenav:scout gps link
- CVE-2019-14950 Cross-site scripting in 3cx:live chat
- CVE-2019-14949 Cross-site scripting in wpseeds:wp database backup
- CVE-2019-14948 Cross-site scripting in najeebmedia:ppom for woocommerce
- CVE-2019-14947 Cross-site scripting in ultimatemember:ultimate member
- CVE-2019-14946 Cross-site scripting in ultimatemember:ultimate member
- CVE-2019-14945 Cross-site scripting in ultimatemember:ultimate member
- CVE-2019-14944 Command injection in gitlab:gitlab
- CVE-2019-14943 Hardcoded credentials in gitlab:gitlab
- CVE-2019-14942 Information disclosure in gitlab:gitlab
- CVE-2019-14941 Denial of service in ushareit:shareit
- CVE-2019-14940 Denial of service in spdk:storage performance development kit
- CVE-2019-14939 MySQL for Node.js Unsafe Options
- CVE-2019-14937 SQL injection in vanderbilt:redcap
- CVE-2019-14936 Information disclosure in easyappointments:easy\!appointments
- CVE-2019-14935 Misconfiguration in 3cx:3cx
- CVE-2019-14934 Memory corruption in debian:debian linux
- CVE-2019-14933 Bagisto CSRF Vulnerability
- CVE-2019-14932 Missing authorization in humanica:humatrix 7
- CVE-2019-14931 Command injection in inea:me-rtu firmware
- CVE-2019-14930 Hardcoded credentials in inea:me-rtu firmware
- CVE-2019-14929 Information disclosure in inea:me-rtu firmware
- CVE-2019-14928 Cross-site scripting in inea:me-rtu firmware
- CVE-2019-14927 Missing authorization in inea:me-rtu firmware
- CVE-2019-14926 Hardcoded credentials in inea:me-rtu firmware
- CVE-2019-14925 Misconfiguration in inea:me-rtu firmware
- CVE-2019-14924 Path traversal in gcdwebserver project:gcdwebserver
- CVE-2019-14923 Command injection in eyesofnetwork:eyesofnetwork
- CVE-2019-14920 Command injection in billion:sg600 r2 firmware
- CVE-2019-14919 Hardcoded credentials in billion:sg600 r2 firmware
- CVE-2019-14918 Cross-site scripting in billion:sg600 r2 firmware
- CVE-2019-14916 File upload in prise:adas
- CVE-2019-14915 Cross-site scripting in prise:adas
- CVE-2019-14914 Path traversal in prise:adas
- CVE-2019-14913 Cross-site scripting in prise:adas
- CVE-2019-14912 Open redirect in prise:adas
- CVE-2019-14911 Cross-site scripting in prise:adas
- CVE-2019-14910 Keycloak Authentication Error
- CVE-2019-14909 Keycloak Authentication Error
- CVE-2019-14907 Memory corruption in samba
- CVE-2019-14906 Memory corruption in SDL
- CVE-2019-14905 Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
- CVE-2019-14904 OS Command Injection and Improper Input Validation in ansible
- CVE-2019-14902 Missing authorization in samba
- CVE-2019-14901 Memory corruption in kernel
- CVE-2019-14900 SQL Injection in Hibernate ORM
- CVE-2019-1490 Other in Skype for Business Server 2019 CU2
- CVE-2019-14899 Information disclosure in VPN
- CVE-2019-14898 Race condition in kernel
- CVE-2019-14897 Memory corruption in kernel
- CVE-2019-14896 Memory corruption in kernel
- CVE-2019-14895 Memory corruption in kernel
- CVE-2019-14894 Command injection in CloudForms
- CVE-2019-14893 Polymorphic deserialization of malicious object in jackson-databind
- CVE-2019-14892 Polymorphic deserialization of malicious object in jackson-databind
- CVE-2019-14891 Denial of service in cri-o
- CVE-2019-14890 Information disclosure in Tower
- CVE-2019-1489 Information disclosure in Microsoft Windows XP Service Pack 3
- CVE-2019-14889 Command injection in libssh
- CVE-2019-14888 Undertow vulnerable to Uncontrolled Resource Consumption
- CVE-2019-14887 Inadequate Encryption Strength and Algorithm Downgrade in Wildfly
- CVE-2019-14886 Weak cryptography in Business-central
- CVE-2019-14885 Information disclosure in JBoss EAP
- CVE-2019-14884 Moodle reflected Cross-site Scripting (XSS)
- CVE-2019-14883 Moodle Email media URL tokens were not checking for user status
- CVE-2019-14882 Moodle open redirect vulnerability
- CVE-2019-14881 Moodle XSS Vulnerability
- CVE-2019-14880 Moodle Oauth 2 Insufficiently Protects Against Compromise
- CVE-2019-1488 Security feature bypass in Windows
- CVE-2019-14879 Moodle does not revoke role capabilities correctly
- CVE-2019-14878 Null dereference in newlib
- CVE-2019-14877 Null dereference in newlib
- CVE-2019-14876 Null dereference in newlib
- CVE-2019-14875 Null dereference in newlib
- CVE-2019-14874 Null dereference in newlib
- CVE-2019-14873 Null dereference in newlib
- CVE-2019-14872 Null dereference in newlib
- CVE-2019-14871 Null dereference in newlib
- CVE-2019-14870 Security feature bypass in samba
- CVE-2019-1487 Information disclosure in Microsoft Authentication Library (MSAL) for Android
- CVE-2019-14869 Security feature bypass in ghostscript