Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 123 of 164.
- CVE-2019-13447 SQL injection in sertek:xpare
- CVE-2019-13445 Integer overflow in ros:ros-comm
- CVE-2019-1344 Information disclosure in Windows
- CVE-2019-1343 Denial of service in Windows
- CVE-2019-13423 Auth bypass in Search Guard Kibana Plugin
- CVE-2019-13422 Open redirect in Search Guard Kibana Plugin
- CVE-2019-13421 Information disclosure in Search Guard
- CVE-2019-13420 Information disclosure in Search Guard
- CVE-2019-1342 Privilege escalation in Windows
- CVE-2019-13419 Information disclosure in Search Guard
- CVE-2019-13418 Information disclosure in Search Guard
- CVE-2019-13417 Information disclosure in Search Guard
- CVE-2019-13416 Missing authorization in Search Guard
- CVE-2019-13415 Missing authorization in Search Guard
- CVE-2019-13414 Cross-site scripting in boiteasite:rencontre
- CVE-2019-13413 SQL injection in boiteasite:rencontre
- CVE-2019-13412 A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
- CVE-2019-13411 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097
- CVE-2019-13410 TOPMeeting version before version 8.8 (2019/08/19) allows an attacker to obtain sensitive information
- CVE-2019-1341 Privilege escalation in Windows
- CVE-2019-13409 A SQL injection vulnerability was discovered in TOPMeeting before version 8.8 (2019/08/19)
- CVE-2019-13408 Advan VD-1 allows users to download arbitrary files
- CVE-2019-13407 Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi
- CVE-2019-13406 Advan VD-1 has a vulnerability that allows remote arbitrary APK installation
- CVE-2019-13405 Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication
- CVE-2019-13404 Misconfiguration in python:python
- CVE-2019-13403 Missing authorization in temenos:cwx
- CVE-2019-13402 Security feature bypass in fortinet:fcm-mb40 firmware
- CVE-2019-13401 Cross-site request forgery in fortinet:fcm-mb40 firmware
- CVE-2019-13400 Information disclosure in fortinet:fcm-mb40 firmware
- CVE-2019-1340 Privilege escalation in Windows
- CVE-2019-13399 Hardcoded credentials in fortinet:fcm-mb40 firmware
- CVE-2019-13398 Command injection in fortinet:fcm-mb40 firmware
- CVE-2019-13397 Cross-site scripting in enhancesoft:osticket
- CVE-2019-13396 Path traversal in getflightpath:flightpath
- CVE-2019-13395 Cross-site request forgery in netgear:cg3700b firmware
- CVE-2019-13394 Weak cryptography in netgear:cg3700b firmware
- CVE-2019-13393 Hardcoded credentials in netgear:cg3700b firmware
- CVE-2019-13392 Cross-site scripting in mindpalette:natemail
- CVE-2019-13391 Memory corruption in imagemagick:imagemagick
- CVE-2019-13390 Denial of service in ffmpeg:ffmpeg
- CVE-2019-1339 Privilege escalation in Windows
- CVE-2019-13389 Cross-site scripting in rainloop:webmail
- CVE-2019-13387 Cross-site scripting in control-webpanel:webpanel
- CVE-2019-13386 Command injection in centos-webpanel:centos web panel
- CVE-2019-13385 Information disclosure in control-webpanel:webpanel
- CVE-2019-13383 Information disclosure in control-webpanel:webpanel
- CVE-2019-13382 Privilege escalation in techsmith:snagit
- CVE-2019-13380 Cross-site scripting in keynto:team password manager
- CVE-2019-1338 Security feature bypass in Windows
- CVE-2019-13379 Privilege escalation in avtech:room alert 3e firmware
- CVE-2019-13377 Information disclosure in canonical:ubuntu linux
- CVE-2019-13376 phpBB Cross-Site Request Forgery (CSRF)
- CVE-2019-13375 SQL injection in dlink:central wifimanager
- CVE-2019-13374 Cross-site scripting in dlink:central wifimanager
- CVE-2019-13373 SQL injection in dlink:central wifimanager
- CVE-2019-13372 Code injection in dlink:central wifimanager
- CVE-2019-13370 Cross-site request forgery in ignitedcms:ignitedcms
- CVE-2019-1337 Information disclosure in Windows
- CVE-2019-13364 Cross-site scripting in piwigo:piwigo
- CVE-2019-13363 Cross-site scripting in piwigo:piwigo
- CVE-2019-13362 Memory corruption in codedoc project:codedoc
- CVE-2019-13361 Auth bypass in smanos:w100 firmware
- CVE-2019-13360 Auth bypass in control-webpanel:webpanel
- CVE-2019-1336 Privilege escalation in Windows
- CVE-2019-13359 Privilege escalation in control-webpanel:webpanel
- CVE-2019-13358 XML external entity in opencats:opencats
- CVE-2019-13357 Privilege escalation in totaldefense:anti-virus
- CVE-2019-13356 Privilege escalation in totaldefense:anti-virus
- CVE-2019-13355 Privilege escalation in totaldefense:anti-virus
- CVE-2019-13354 strong_password Ruby gem malicious version causing Remote Code Execution vulnerability
- CVE-2019-13352 Hardcoded credentials in wolfvision:cynap
- CVE-2019-13351 Race condition in alsa-project:alsa
- CVE-2019-1335 Out-of-bounds write
- CVE-2019-13349 Information disclosure in knowage-suite:knowage
- CVE-2019-13348 Information disclosure in eng:knowage
- CVE-2019-13347 Security feature bypass in atlassian:saml single sign on
- CVE-2019-13346 Cross-site scripting in myt project:myt
- CVE-2019-13345 Cross-site scripting in debian:debian linux
- CVE-2019-13344 Auth bypass in crudlab:wp like button
- CVE-2019-13343 Path traversal in butor:portal
- CVE-2019-13341 Cross-site scripting in 1234n:minicms
- CVE-2019-13340 Cross-site scripting in 1234n:minicms
- CVE-2019-1334 Information disclosure in Windows
- CVE-2019-13339 Cross-site scripting in 1234n:minicms
- CVE-2019-13338 Missing authorization in weseek:growi
- CVE-2019-13337 Auth bypass in weseek:growi
- CVE-2019-13336 Auth bypass in dbell:db01-s firmware
- CVE-2019-13335 Server-side request forgery in salesagility:suitecrm
- CVE-2019-13334 Memory corruption in PhantomPDF
- CVE-2019-13333 Memory corruption in PhantomPDF
- CVE-2019-13332 Use after free in Reader
- CVE-2019-13331 Memory corruption in Reader
- CVE-2019-13330 Memory corruption in Reader
- CVE-2019-1333 Other in Windows
- CVE-2019-13329 Memory corruption in Reader
- CVE-2019-13328 Use after free in Reader
- CVE-2019-13327 Use after free in Reader
- CVE-2019-13326 Use after free in Reader
- CVE-2019-13325 Memory corruption in Studio Photo