Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 112 of 164.
- CVE-2019-14868 Command injection in ksh
- CVE-2019-14867 Code injection in FreeIPA
- CVE-2019-14866 Path traversal in cpio
- CVE-2019-14865 Denial of service in grub2
- CVE-2019-14864 Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
- CVE-2019-14863 AngularJS Cross-site Scripting due to failure to sanitize `xlink.href` attributes
- CVE-2019-14862 XSS in knockout
- CVE-2019-14861 Memory corruption in samba
- CVE-2019-14860 Misconfiguration in syndesis
- CVE-2019-1486 Open redirect in Microsoft Visual Studio 2019
- CVE-2019-14859 Improper Verification of Cryptographic Signature in Pure-Python ECDSA
- CVE-2019-14858 Ansible leaks sensitive information to logs when told not to
- CVE-2019-14857 Open redirect in mod auth openidc
- CVE-2019-14856 Ansible password prompts could expose passwords
- CVE-2019-14855 Weak cryptography in gnupg2
- CVE-2019-14854 Information disclosure in library-go
- CVE-2019-14853 Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA
- CVE-2019-14852 Weak cryptography in apicast
- CVE-2019-14851 Denial of service in nbdkit
- CVE-2019-14850 Denial of service in nbdkit
- CVE-2019-1485 Memory corruption in Internet Explorer 10
- CVE-2019-14849 Misconfiguration in 3scale
- CVE-2019-14847 Null dereference in samba
- CVE-2019-14846 Ansible Uses Plugins That Disclose Credentials
- CVE-2019-14845 Security feature bypass in openshift
- CVE-2019-14844 Denial of service in krb5
- CVE-2019-14843 Missing authorization in wildfly-security-manager
- CVE-2019-14842 Memory corruption in libnbd
- CVE-2019-14841 Privilege escalation in Business-central
- CVE-2019-14840 Information disclosure in Business-central
- CVE-2019-1484 Code injection in Windows
- CVE-2019-14839 Information disclosure in Business-central
- CVE-2019-14838 Wildfly Authorization Misconfiguration
- CVE-2019-14837 keycloak vulnerable to unauthorized login via mail server setup
- CVE-2019-14836 Cross-site request forgery in Red Hat 3scale API Management
- CVE-2019-14835 Memory corruption in Linux kernel
- CVE-2019-14834 Denial of service in dnsmasq
- CVE-2019-14833 Security feature bypass in samba
- CVE-2019-14832 Keycloak Unauthenticated Access
- CVE-2019-14831 Open redirect in Moodle
- CVE-2019-14830 Open redirect in Moodle
- CVE-2019-1483 Privilege escalation in Windows
- CVE-2019-14829 Missing authorization in Moodle
- CVE-2019-14828 Privilege escalation in Moodle
- CVE-2019-14827 Code injection in Moodle
- CVE-2019-14826 Auth bypass in ipa
- CVE-2019-14825 Katello cleartext password storage issue
- CVE-2019-14824 Missing authorization in 389-ds-base
- CVE-2019-14823 Security feature bypass in JSS
- CVE-2019-14822 Missing authorization in ibus
- CVE-2019-14821 Memory corruption in Kernel
- CVE-2019-14820 Exposure of Sensitive Information to an Unauthorized Actor in Keycloak
- CVE-2019-14819 Privilege escalation in openshift-ansible
- CVE-2019-14818 Denial of service in dpdk
- CVE-2019-14817 Security feature bypass in ghostscript
- CVE-2019-14816 Memory corruption in kernel
- CVE-2019-14815 Memory corruption in kernel
- CVE-2019-14814 Memory corruption in kernel
- CVE-2019-14813 Security feature bypass in ghostscript
- CVE-2019-14812 Security feature bypass in ghostscript
- CVE-2019-14811 Security feature bypass in ghostscript
- CVE-2019-14810 Race condition in arista:extensible operating system
- CVE-2019-1481 Information disclosure in Windows
- CVE-2019-14809 Auth bypass in debian:debian linux
- CVE-2019-14808 Information disclosure in renpho:renpho
- CVE-2019-14807 Cross-site scripting in mediawiki:mobilefrontend
- CVE-2019-14806 Pallets Werkzeug Insufficient Entropy
- CVE-2019-14805 Cross-site scripting in una:una
- CVE-2019-14804 Cross-site scripting in una:una
- CVE-2019-14802 Hashicorp Nomad Information Exposure Through Environmental Variables
- CVE-2019-14801 SQL injection in foliovision:fv flowplayer video player
- CVE-2019-14800 Information disclosure in foliovision:fv flowplayer video player
- CVE-2019-1480 Information disclosure in Windows
- CVE-2019-14799 Cross-site scripting in foliovision:fv flowplayer video player
- CVE-2019-14798 Path traversal in 10web:photo gallery
- CVE-2019-14797 Cross-site scripting in 10web:photo gallery
- CVE-2019-14796 Cross-site scripting in mq-woocommerce-products-price-bulk-edit project:mq-woocommerce-products-price-bulk-edit
- CVE-2019-14795 Cross-site scripting in toggle-the-title project:toggle-the-title
- CVE-2019-14794 File upload in metabox:meta box
- CVE-2019-14793 Missing authorization in metabox:meta box
- CVE-2019-14792 Cross-site scripting in codecabin:wp go maps
- CVE-2019-14791 Cross-site scripting in codepeople:appointment booking calendar
- CVE-2019-14790 Cross-site scripting in limbcode:limb-gallery
- CVE-2019-14789 Cross-site scripting in kunalnagar:custom 404 pro
- CVE-2019-14788 Path traversal in tribulant:newsletters
- CVE-2019-14787 Cross-site scripting in tribulant:newsletters
- CVE-2019-14786 Missing authorization in rankmath:seo
- CVE-2019-14785 Cross-site scripting in codepeople:cp contact form with paypal
- CVE-2019-14784 Cross-site scripting in codepeople:cp contact form with paypal
- CVE-2019-14783 Privilege escalation in google:android
- CVE-2019-14782 Information disclosure in control-webpanel:webpanel
- CVE-2019-1478 Privilege escalation in Windows
- CVE-2019-14778 Use after free in debian:debian linux
- CVE-2019-14777 Use after free in debian:debian linux
- CVE-2019-14776 Memory corruption in debian:debian linux
- CVE-2019-14774 Cross-site scripting in getwooplugins:woo-variation-swatches
- CVE-2019-14773 Missing authorization in webcraftic:woody ad snippets
- CVE-2019-14772 Cross-Site Scripting (XSS) in Verdaccio
- CVE-2019-14771 File upload in backdropcms:backdrop cms
- CVE-2019-14770 Cross-site scripting in backdropcms:backdrop core