Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 134 of 164.
- CVE-2019-12205 Silverstripe Flash Clipboard Reflected XSS
- CVE-2019-12204 Missing warning can lead to unauthenticated admin access in SilverStripe
- CVE-2019-12203 Session fixation in change password form
- CVE-2019-1220 Security feature bypass in Internet Explorer 10
- CVE-2019-12198 Memory corruption in gohttp project:gohttp
- CVE-2019-12196 SQL injection in zohocorp:manageengine netflow analyzer
- CVE-2019-12195 Cross-site scripting in tp-link:tl-wr840n firmware
- CVE-2019-12193 SQL injection in h3c:h3cloud os
- CVE-2019-12190 Cross-site scripting in control-webpanel:webpanel
- CVE-2019-1219 Information disclosure in Windows
- CVE-2019-12189 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2019-12186 XSS injection in the Grid component of Sylius
- CVE-2019-12185 File upload in elabftw:elabftw
- CVE-2019-12184 Cross-site scripting in boostio:boostnote
- CVE-2019-12183 Missing authorization in safescan:ta-8010 firmware
- CVE-2019-12182 Path traversal in safescan:ta-8010 firmware
- CVE-2019-12181 Command injection in solarwinds:serv-u ftp server
- CVE-2019-12180 Code injection in smartbear:readyapi
- CVE-2019-1218 Outlook iOS Spoofing Vulnerability
- CVE-2019-12177 Privilege escalation in htc:viveport
- CVE-2019-12176 Privilege escalation in htc:viveport
- CVE-2019-12175 Null dereference in zeek:zeek
- CVE-2019-12174 Privilege escalation in hide:hide.me
- CVE-2019-12173 Path traversal in macdown project:macdown
- CVE-2019-12172 Path traversal in typora:typora
- CVE-2019-12171 Information disclosure in dropbox:dropbox
- CVE-2019-12170 File upload in atutor:atutor
- CVE-2019-1217 Out-of-bounds write
- CVE-2019-12169 Path traversal in atutor:atutor
- CVE-2019-12168 Missing authorization in four-faith:f3x24 firmware
- CVE-2019-12167 Cross-site scripting in emerson:liebert challenger firmware
- CVE-2019-12165 Command injection in mitel:micollab
- CVE-2019-12164 Code injection in status:react native desktop
- CVE-2019-12163 Information disclosure in gatship:web module
- CVE-2019-12162 Security feature bypass in upwork:time tracker
- CVE-2019-12161 Server-side request forgery in webpagetest:webpagetest
- CVE-2019-12160 Use after free in gohttp project:gohttp
- CVE-2019-1216 Information disclosure in Windows
- CVE-2019-12159 Memory corruption in gohttp project:gohttp
- CVE-2019-12158 Memory corruption in gohttp project:gohttp
- CVE-2019-12157 Information disclosure in jetbrains:teamcity
- CVE-2019-12156 Information disclosure in jetbrains:upsource
- CVE-2019-12155 Null dereference in qemu:qemu
- CVE-2019-12154 XML external entity in realobjects:pdfreactor
- CVE-2019-12153 Server-side request forgery in realobjects:pdfreactor
- CVE-2019-12150 File upload in karamasoft:ultimateeditor
- CVE-2019-1215 Microsoft Windows Privilege Escalation
- CVE-2019-12149 silverstripe restfulserver and registry modules SQL injection vulnerability
- CVE-2019-12148 Auth bypass in sangoma:session border controller firmware
- CVE-2019-12147 Command injection in sangoma:session border controller firmware
- CVE-2019-12146 Path traversal in ipswitch:ws ftp server
- CVE-2019-12145 Path traversal in ipswitch:ws ftp server
- CVE-2019-12144 Path traversal in ipswitch:ws ftp server
- CVE-2019-12143 Path traversal in progress:ws ftp server
- CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation
- CVE-2019-12139 ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability
- CVE-2019-12138 Path traversal in macdown project:macdown
- CVE-2019-12137 Path traversal in typora:typora
- CVE-2019-12136 Cross-site scripting in boostio:boostnote
- CVE-2019-12135 Other in papercut:papercut mf
- CVE-2019-12134 Code injection in workday:workday
- CVE-2019-12133 Privilege escalation in zohocorp:manageengine analytics plus
- CVE-2019-12132 Command injection in onap:open network automation platform
- CVE-2019-12131 Auth bypass in onap:open network automation platform
- CVE-2019-12130 Missing authorization in onap:open network automation platform
- CVE-2019-1213 Windows DHCP Server Remote Code Execution Vulnerability
- CVE-2019-12129 Missing authorization in onap:open network automation platform
- CVE-2019-12128 Missing authorization in onap:open network automation platform
- CVE-2019-12127 Missing authorization in onap:open network automation platform
- CVE-2019-12126 Missing authorization in onap:open network automation platform
- CVE-2019-12125 Missing authorization in onap:open network automation platform
- CVE-2019-12124 Missing authorization in onap:open network automation platform
- CVE-2019-12123 Command injection in onap:open network automation platform
- CVE-2019-12122 Information disclosure in onap:open network automation platform
- CVE-2019-12121 Weak cryptography in onap:open network automation platform
- CVE-2019-12120 Missing authorization in onap:open network automation platform
- CVE-2019-1212 Windows DHCP Server Denial of Service Vulnerability
- CVE-2019-12119 Missing authorization in onap:open network automation platform
- CVE-2019-12118 Missing authorization in onap:open network automation platform
- CVE-2019-12117 Missing authorization in onap:open network automation platform
- CVE-2019-12116 Missing authorization in onap:open network automation platform
- CVE-2019-12115 Missing authorization in onap:open network automation platform
- CVE-2019-12114 Missing authorization in onap:open network automation platform
- CVE-2019-12113 Command injection in onap:open network automation platform
- CVE-2019-12112 Command injection in onap:open network automation platform
- CVE-2019-12111 Null dereference in debian:debian linux
- CVE-2019-12110 Null dereference in miniupnp.free:miniupnpd
- CVE-2019-1211 Git for Visual Studio Elevation of Privilege Vulnerability
- CVE-2019-12109 Null dereference in miniupnp project:miniupnpd
- CVE-2019-12108 Null dereference in miniupnp project:miniupnpd
- CVE-2019-12107 Information disclosure in miniupnp.free:miniupnpd
- CVE-2019-12106 Use after free in miniupnp project:miniupnpd
- CVE-2019-12105 Missing authorization in supervisord:supervisor
- CVE-2019-12104 Command injection in tp-link:m7350 firmware
- CVE-2019-12103 Command injection in tp-link:m7350 firmware
- CVE-2019-12102 Missing authorization in kentico:xperience
- CVE-2019-12101 Null dereference in libnyoci project:libnyoci
- CVE-2019-12099 File upload in php-fusion:php-fusion
- CVE-2019-12098 Security feature bypass in debian:debian linux
- CVE-2019-12097 Code injection in progress:fiddler