Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 132 of 164.
- CVE-2019-12444 Cross-site scripting in gitlab:gitlab
- CVE-2019-12443 Server-side request forgery in gitlab:gitlab
- CVE-2019-12442 Cross-site scripting in gitlab:gitlab
- CVE-2019-12441 Security feature bypass in gitlab:gitlab
- CVE-2019-12440 Auth bypass in sitecore:rocks
- CVE-2019-1244 Information disclosure in Windows
- CVE-2019-12439 Other in projectatomic:bubblewrap
- CVE-2019-12437 Silverstripe CSRF Protection Bypass via GraphQL
- CVE-2019-12436 Null dereference in canonical:ubuntu linux
- CVE-2019-12435 Null dereference in samba:samba
- CVE-2019-12434 Information disclosure in gitlab:gitlab
- CVE-2019-12433 Missing authorization in gitlab:gitlab
- CVE-2019-12432 Information disclosure in gitlab:gitlab
- CVE-2019-12431 Missing authorization in gitlab:gitlab
- CVE-2019-12430 Command injection in gitlab:gitlab
- CVE-2019-1243 Memory corruption in Windows
- CVE-2019-12429 Missing authorization in gitlab:gitlab
- CVE-2019-12428 Auth bypass in gitlab:gitlab
- CVE-2019-12427 Cross-site scripting in zimbra:collaboration server
- CVE-2019-12426 Auth bypass in Apache OFBiz
- CVE-2019-12425 Other in Apache OFBiz
- CVE-2019-12423 Private key leak in Apache CXF
- CVE-2019-12422 Improper input validation in Apache Shiro
- CVE-2019-12421 Apache NiFi user log out issue
- CVE-2019-12420 Denial of service in Apache SpamAssassin
- CVE-2019-1242 Memory corruption in Windows
- CVE-2019-12419 Potential session hijack in Apache CXF
- CVE-2019-12418 Insufficiently Protected Credentials in Apache Tomcat
- CVE-2019-12417 Apache Airflow vulnerable to XSS and local file disclosure
- CVE-2019-12416 Injection in DeltaSpike
- CVE-2019-12415 Improper Restriction of XML External Entity Reference in Apache POI
- CVE-2019-12414 Users can view database names in Apache Superset
- CVE-2019-12413 Users able to query database metadata in Apache Superset
- CVE-2019-12412 Null dereference in libapreq2
- CVE-2019-12410 Missing Initialization of Resource in Apache Arrow
- CVE-2019-1241 Memory corruption in Windows
- CVE-2019-12409 Unrestricted upload of file with dangerous type in Apache Solr
- CVE-2019-12408 Missing Initialization of Resource in Apache Arrow
- CVE-2019-12407 Cross-site Scripting in Apache JSPWiki
- CVE-2019-12406 Potential DOS attack due to unrestricted attachment count in messages
- CVE-2019-12405 Improper Authentication in Apache Traffic Control
- CVE-2019-12404 Cross-site scripting in Apache JSPWiki
- CVE-2019-12402 Denial of Service in Apache Commons Compress
- CVE-2019-12401 Apache Solr vulnerable to XML Bomb
- CVE-2019-12400 Improper input validation in Apache Santuario XML Security for Java
- CVE-2019-1240 Memory corruption in Windows
- CVE-2019-12399 Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka
- CVE-2019-12398 XSS in Apache Airflow
- CVE-2019-12397 Cross-site scripting in Apache Ranger
- CVE-2019-12395 Auth bypass in dynmap project:dynmap
- CVE-2019-12394 Auth bypass in anviz:management system
- CVE-2019-12393 Auth bypass in anviz:management system
- CVE-2019-12392 Auth bypass in anviz:anviz firmware
- CVE-2019-12391 Other in anviz:management system
- CVE-2019-12390 Missing authorization in anviz:anviz firmware
- CVE-2019-1239 Memory corruption in Internet Explorer 11
- CVE-2019-12389 Missing authorization in anviz:anviz firmware
- CVE-2019-12388 Information disclosure in anviz:anviz firmware
- CVE-2019-12387 Twisted CRLF Injection
- CVE-2019-12386 Cross-site scripting in ampache:ampache
- CVE-2019-12385 SQL injection in ampache:ampache
- CVE-2019-12384 Deserialization of Untrusted Data in FasterXML jackson-databind
- CVE-2019-12383 Information disclosure in torproject:tor browser
- CVE-2019-12382 Null dereference in linux:linux kernel
- CVE-2019-12381 Null dereference in linux:linux kernel
- CVE-2019-12380 Other in linux:linux kernel
- CVE-2019-1238 Memory corruption in Internet Explorer 10
- CVE-2019-12379 Denial of service in linux:linux kernel
- CVE-2019-12378 Null dereference in linux:linux kernel
- CVE-2019-12377 File upload in ivanti:landesk management suite
- CVE-2019-12376 Hardcoded credentials in ivanti:landesk management suite
- CVE-2019-12375 Information disclosure in ivanti:landesk management suite
- CVE-2019-12374 SQL injection in ivanti:landesk management suite
- CVE-2019-12373 Information disclosure in ivanti:landesk management suite
- CVE-2019-12372 SQL injection in petraware:ptransformer adc
- CVE-2019-12370 Cross-site scripting in readdle:spark
- CVE-2019-1237 Out-of-bounds write
- CVE-2019-12369 Cross-site scripting in typeapp:typeapp
- CVE-2019-12368 Cross-site scripting in edison:edison mail
- CVE-2019-12367 Cross-site scripting in blixhq:bluemail
- CVE-2019-12366 Cross-site scripting in 9folders:nine
- CVE-2019-12365 Cross-site scripting in cloudmagic:newton
- CVE-2019-12363 Cross-site request forgery in mybb-2fa project:mybb-2fa
- CVE-2019-12362 Cross-site scripting in phome:empirecms
- CVE-2019-12361 Cross-site scripting in phome:empirecms
- CVE-2019-12360 Memory corruption in glyphandcog:xpdfreader
- CVE-2019-1236 Memory corruption in Internet Explorer 10
- CVE-2019-12359 SQL injection in zzcms:zzcms
- CVE-2019-12358 SQL injection in zzcms:zzcms
- CVE-2019-12357 SQL injection in zzcms:zzcms
- CVE-2019-12356 SQL injection in zzcms:zzcms
- CVE-2019-12355 SQL injection in zzcms:zzcms
- CVE-2019-12354 SQL injection in zzcms:zzcms
- CVE-2019-12353 SQL injection in zzcms:zzcms
- CVE-2019-12352 SQL injection in zzcms:zzcms
- CVE-2019-12351 SQL injection in zzcms:zzcms
- CVE-2019-12350 SQL injection in zzcms:zzcms
- CVE-2019-1235 Privilege escalation in Windows
- CVE-2019-12349 SQL injection in zzcms:zzcms
- CVE-2019-12348 SQL injection in zzcms:zzcms