Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 140 of 164.
- CVE-2019-11485 apport created lock file in wrong directory
- CVE-2019-11484 Integer overflow in bson_ensure_space
- CVE-2019-11483 Information disclosure in apport
- CVE-2019-11482 Race condition between reading current working directory and writing a core dump
- CVE-2019-11481 Apport reads arbitrary files if ~/.config/apport/settings is a symlink
- CVE-2019-11480 Ubuntu kernel snap build process could use unauthenticated sources
- CVE-2019-1148 Microsoft Graphics Component Information Disclosure Vulnerability
- CVE-2019-11479 Denial of service in Linux kernel
- CVE-2019-11478 SACK can cause extensive memory use via fragmented resend queue
- CVE-2019-11477 Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
- CVE-2019-11476 Integer overflow in whoopsie results in out-of-bounds heap write
- CVE-2019-11474 Denial of service in canonical:ubuntu linux
- CVE-2019-11473 Memory corruption in graphicsmagick:graphicsmagick
- CVE-2019-11472 Denial of service in imagemagick:imagemagick
- CVE-2019-11471 Use after free in struktur:libheif
- CVE-2019-11470 Denial of service in imagemagick:imagemagick
- CVE-2019-1147 Jet Database Engine Remote Code Execution Vulnerability
- CVE-2019-11469 SQL injection in zohocorp:manageengine applications manager
- CVE-2019-11467 Memory corruption in couchbase:couchbase server
- CVE-2019-11466 Missing authorization in couchbase:couchbase server
- CVE-2019-11465 Information disclosure in couchbase:couchbase server
- CVE-2019-11464 Misconfiguration in couchbase:couchbase server
- CVE-2019-11463 Denial of service in libarchive:libarchive
- CVE-2019-11461 Security feature bypass in gnome:nautilus
- CVE-2019-11460 Security feature bypass in gnome:gnome-desktop
- CVE-2019-1146 Jet Database Engine Remote Code Execution Vulnerability
- CVE-2019-11459 Memory corruption in canonical:ubuntu linux
- CVE-2019-11458 Unsafe deserialization in SmtpTransport in CakePHP
- CVE-2019-11457 Cross-Site Request Forgery in MicroPyramid Django CRM
- CVE-2019-11456 Cross-site request forgery in gilacms:gila cms
- CVE-2019-11455 Buffer overflow
- CVE-2019-11454 Cross-site scripting
- CVE-2019-11452 SQL injection in whatsns:whatsns
- CVE-2019-11451 SQL injection in whatsns:whatsns
- CVE-2019-11450 SQL injection in whatsns:whatsns
- CVE-2019-1145 Microsoft Graphics Remote Code Execution Vulnerability
- CVE-2019-11449 Cross-site scripting in scilico:i\, librarian
- CVE-2019-11448 SQL injection in zohocorp:manageengine applications manager
- CVE-2019-11447 File upload in cutephp:cutenews
- CVE-2019-11446 File upload in atutor:atutor
- CVE-2019-11445 File upload in openkm:openkm
- CVE-2019-11444 Command injection in liferay:liferay portal
- CVE-2019-1144 Microsoft Graphics Remote Code Execution Vulnerability
- CVE-2019-1143 Windows Graphics Component Information Disclosure Vulnerability
- CVE-2019-11429 Cross-site scripting in control-webpanel:webpanel
- CVE-2019-11428 Cross-site scripting in scilico:i\, librarian
- CVE-2019-11427 Cross-site scripting in idreamsoft:icms
- CVE-2019-11426 Cross-site scripting in idreamsoft:icms
- CVE-2019-1142 Path traversal in Microsoft .NET Framework 3.5
- CVE-2019-11419 Null dereference in tencent:wechat
- CVE-2019-11418 Memory corruption in trendnet:tew-632brp firmware
- CVE-2019-11417 Memory corruption in trendnet:tv-ip110wn firmware
- CVE-2019-11416 Cross-site request forgery in intelbras:iwr 3000n firmware
- CVE-2019-11415 Denial of service in intelbras:iwr 3000n firmware
- CVE-2019-11414 Auth bypass in intelbras:iwr 3000n firmware
- CVE-2019-11413 Denial of service in artifex:mujs
- CVE-2019-11412 Denial of service in artifex:mujs
- CVE-2019-11411 Memory corruption in artifex:mujs
- CVE-2019-11410 Command injection in fusionpbx:fusionpbx
- CVE-2019-1141 Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-11409 Command injection in fusionpbx:fusionpbx
- CVE-2019-11408 Cross-site scripting in fusionpbx:fusionpbx
- CVE-2019-11407 Information disclosure in fusionpbx:fusionpbx
- CVE-2019-11406 Cross-site scripting in intelliants:subrion cms
- CVE-2019-11405 OpenAPI Tools OpenAPI Generator uses HTTP in various files
- CVE-2019-11404 Missing Encryption of Sensitive Data in arrow-kt Arrow
- CVE-2019-11403 Information disclosure in gradle:build cache node
- CVE-2019-11402 Information disclosure in gradle:enterprise
- CVE-2019-11401 SiteServer CMS RCE via unsafe file upload
- CVE-2019-11400 Memory corruption in trendnet:tew-651br firmware
- CVE-2019-1140 Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-11399 Command injection in trendnet:tew-651br firmware
- CVE-2019-11398 Cross-site scripting in ulicms:ulicms
- CVE-2019-11397 Path traversal in microsoft:.net framework
- CVE-2019-11396 Privilege escalation in avira:free security suite
- CVE-2019-11395 Memory corruption in tabslab:mailcarrier
- CVE-2019-11393 Privilege escalation in tildeslash:monit
- CVE-2019-11392 XML external entity in dotnetblogengine:blogengine.net
- CVE-2019-11391 Denial of service in modsecurity:owasp modsecurity core rule set
- CVE-2019-11390 Denial of service in modsecurity:owasp modsecurity core rule set
- CVE-2019-1139 Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-11389 Denial of service in modsecurity:owasp modsecurity core rule set
- CVE-2019-11388 Denial of service in modsecurity:owasp modsecurity core rule set
- CVE-2019-11387 Denial of service in modsecurity:owasp modsecurity core rule set
- CVE-2019-11384 Information disclosure in zalora:zalora
- CVE-2019-11383 Information disclosure in wifi ftp server project:wifi ftp server
- CVE-2019-11380 Auth bypass in estrongs:es file explorer file manager
- CVE-2019-1138 Out-of-bounds write
- CVE-2019-11378 Path traversal in projectsend:projectsend
- CVE-2019-11377 File upload in wcms:wcms
- CVE-2019-11376 Code injection in brassica:soy cms
- CVE-2019-11375 Cross-site request forgery in meisivod:msvod
- CVE-2019-11374 Cross-site request forgery in 74cms:74cms
- CVE-2019-11373 Memory corruption in fedoraproject:fedora
- CVE-2019-11372 Memory corruption in fedoraproject:fedora
- CVE-2019-11371 Memory corruption in burrow-wheeler aligner project:burrow-wheeler aligner
- CVE-2019-11370 Cross-site scripting in carel:pcoweb card firmware
- CVE-2019-1137 Cross-site scripting in Microsoft Exchange Server 2013
- CVE-2019-11369 Information disclosure in carel:pcoweb card firmware
- CVE-2019-11368 Cross-site scripting in auo:solar data recorder