Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 128 of 164.
- CVE-2019-12889 Privilege escalation in sailpoint:desktop password reset
- CVE-2019-12887 LinOTP replay vulnerability with auto resynchronization enabled for TOTP token
- CVE-2019-12881 Null dereference in linux:linux kernel
- CVE-2019-12880 Other in bcnquark:quarking password manager
- CVE-2019-12876 Privilege escalation in zohocorp:manageengine admanager plus
- CVE-2019-12875 Security feature bypass in alpinelinux:abuild
- CVE-2019-12874 Memory corruption in videolan:vlc media player
- CVE-2019-12872 SQL injection in dotcms:dotcms
- CVE-2019-12871 Use after free in phoenixcontact:automationworx software suite
- CVE-2019-12870 Memory corruption in phoenixcontact:automationworx software suite
- CVE-2019-1287 Privilege escalation in Windows
- CVE-2019-12869 Memory corruption in phoenixcontact:automationworx software suite
- CVE-2019-12868 Deserialization in misp-project:misp
- CVE-2019-12867 Privilege escalation in jetbrains:youtrack
- CVE-2019-12866 Missing authorization in jetbrains:youtrack
- CVE-2019-12865 Memory corruption in radare:radare2
- CVE-2019-12864 Information disclosure in solarwinds:netpath
- CVE-2019-12863 Cross-site scripting in solarwinds:netpath
- CVE-2019-1286 Information disclosure in Windows
- CVE-2019-12855 Improper Certificate Validation in Twisted
- CVE-2019-12854 Memory corruption in canonical:ubuntu linux
- CVE-2019-12852 Server-side request forgery in jetbrains:youtrack
- CVE-2019-12851 Cross-site request forgery in jetbrains:youtrack
- CVE-2019-12850 SQL injection in jetbrains:youtrack
- CVE-2019-1285 Privilege escalation in Windows
- CVE-2019-12847 Information disclosure in jetbrains:hub
- CVE-2019-12846 Missing authorization in jetbrains:teamcity
- CVE-2019-12845 Weak cryptography in jetbrains:teamcity
- CVE-2019-12844 Cross-site scripting in jetbrains:teamcity
- CVE-2019-12843 Cross-site scripting in jetbrains:teamcity
- CVE-2019-12842 Cross-site scripting in jetbrains:teamcity
- CVE-2019-12841 Other in jetbrains:teamcity
- CVE-2019-12840 Command injection in webmin:webmin
- CVE-2019-1284 Privilege escalation in Windows
- CVE-2019-12839 Command injection in orangehrm:orangehrm
- CVE-2019-12838 SQL injection in debian:debian linux
- CVE-2019-12837 Missing authorization in gencat:portal d\'acces a la universitat
- CVE-2019-12836 Cross-site request forgery in bobronix:jeditor
- CVE-2019-12835 Memory corruption in leanify project:leanify
- CVE-2019-12834 Cross-site scripting in ht2labs:learning locker
- CVE-2019-12831 Code injection in mybb:mybb
- CVE-2019-12830 Cross-site scripting in mybb:mybb
- CVE-2019-1283 Information disclosure in Windows
- CVE-2019-12829 Memory corruption in radare:radare2
- CVE-2019-12828 Command injection in ea:origin
- CVE-2019-12827 Memory corruption in digium:asterisk
- CVE-2019-12826 Cross-site request forgery in wpchef:widget logic
- CVE-2019-12825 Missing authorization in gitlab:gitlab
- CVE-2019-12823 Craft CMS XSS Vulnerability
- CVE-2019-12822 Memory corruption in embedthis:goahead
- CVE-2019-12821 Weak cryptography in jisiwei:i3 firmware
- CVE-2019-12820 Weak cryptography in jisiwei:i3 firmware
- CVE-2019-1282 Information disclosure in Windows
- CVE-2019-12819 Use after free in linux:linux kernel
- CVE-2019-12818 Null dereference in linux:linux kernel
- CVE-2019-12817 Memory corruption in canonical:ubuntu linux
- CVE-2019-12816 Privilege escalation in znc:znc
- CVE-2019-12815 Path traversal in debian:debian linux
- CVE-2019-12814 Deserialization of untrusted data in FasterXML jackson-databind
- CVE-2019-12813 Weak cryptography in crossmatch:digital persona u.are.u 4500 firmware
- CVE-2019-12812 Command injection in MyBuilder
- CVE-2019-12811 Command injection in MyBuilder
- CVE-2019-12810 Memory corruption in ALSee
- CVE-2019-12809 Code injection in YES24 PC VIEWER
- CVE-2019-12808 Privilege escalation in ALTOOLS Update Service
- CVE-2019-12807 Memory corruption in ALZIP
- CVE-2019-12806 Memory corruption in UniSign
- CVE-2019-12805 NC Launcher 2 Arbitrary Command Injection Vulnerability
- CVE-2019-12804 Hunesion i-oneNet Missing Support for Integrity Check vulnerability
- CVE-2019-12803 Hunesion i-oneNet unrestricted file upload vulnerability
- CVE-2019-12802 Use after free in fedoraproject:fedora
- CVE-2019-12801 Cross-site scripting in seeddms:seeddms
- CVE-2019-1280 Code injection in Windows
- CVE-2019-12799 Shopware Insecure Deserialization Vulnerability
- CVE-2019-12798 Memory corruption in artifex:mujs
- CVE-2019-12797 Hardcoded credentials in elmelectronics:elm27 firmware
- CVE-2019-12795 Misconfiguration in gnome:gvfs
- CVE-2019-12794 Privilege escalation in misp-project:misp
- CVE-2019-12792 Command injection in vestacp:control panel
- CVE-2019-12791 Path traversal in vestacp:control panel
- CVE-2019-12790 Memory corruption in radare:radare2
- CVE-2019-12789 Auth bypass in actiontec:t2200h firmware
- CVE-2019-12788 Memory corruption in photodex:proshow producer
- CVE-2019-12787 Command injection in dlink:dir-818lw firmware
- CVE-2019-12786 Command injection in dlink:dir-818lw firmware
- CVE-2019-12784 Cross-site request forgery in verint:impact 360
- CVE-2019-12783 Open redirect in verint:impact 360
- CVE-2019-12782 Missing authorization in thoughtspot:thoughtspot
- CVE-2019-12781 Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
- CVE-2019-12780 Command injection in belkin:crock-pot smart slow cooker with wemo firmware
- CVE-2019-1278 Privilege escalation in Windows
- CVE-2019-12779 Race condition in clusterlabs:libqb
- CVE-2019-12777 Misconfiguration in enttec:datagate mk2 firmware
- CVE-2019-12776 Hardcoded credentials in enttec:datagate mk2 firmware
- CVE-2019-12775 Privilege escalation in enttec:datagate mk2 firmware
- CVE-2019-12774 Cross-site scripting in enttec:datagate mk2 firmware
- CVE-2019-12773 Cross-site scripting in verint:impact 360
- CVE-2019-12771 Command injection in thinstation project:thinstation
- CVE-2019-1277 Privilege escalation in Windows
- CVE-2019-12769 Cross-site request forgery in solarwinds:serv-u managed file transfer