Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 141 of 164.
- CVE-2019-11367 Information disclosure in auo:solar data recorder
- CVE-2019-11366 Race condition in atftp project:atftp
- CVE-2019-11365 Memory corruption in atftp project:atftp
- CVE-2019-11364 Command injection in prophecyinternational:snare central
- CVE-2019-11363 SQL injection in prophecyinternational:snare central
- CVE-2019-11362 SQL injection in rocboss:rocboss
- CVE-2019-11361 Privilege escalation in zohocorp:manageengine remote access plus
- CVE-2019-11360 Memory corruption in netfilter:iptables
- CVE-2019-1136 Privilege escalation in Microsoft Exchange Server
- CVE-2019-11359 Cross-site scripting in scilico:i\, librarian
- CVE-2019-11358 XSS in jQuery as used in Drupal, Backdrop CMS, and other products
- CVE-2019-11356 Memory corruption in canonical:ubuntu linux
- CVE-2019-11355 Command injection in polycom:hdx system software
- CVE-2019-11354 Code injection in ea:origin
- CVE-2019-11353 Command injection in engeniustech:ews660ap firmware
- CVE-2019-11351 Code injection in teamspeak:teamspeak
- CVE-2019-11350 Information disclosure in cloudbees:jenkins operations center
- CVE-2019-11345 Cross-site scripting in citrix:citrix sd-wan center
- CVE-2019-11344 File upload in pluck-cms:pluck
- CVE-2019-11343 Vulnerability in Torpedo Query
- CVE-2019-11341 Weak cryptography in google:android
- CVE-2019-11340 Matrix Sydent mishandles emails
- CVE-2019-1134 Cross-site scripting in Microsoft SharePoint Enterprise Server
- CVE-2019-11339 Memory corruption in ffmpeg:ffmpeg
- CVE-2019-11338 Null dereference in canonical:ubuntu linux
- CVE-2019-11336 Information disclosure in sony:photo sharing plus
- CVE-2019-11334 Auth bypass in tzumi:klic lock
- CVE-2019-11332 Business logic in mkcms project:mkcms
- CVE-2019-11331 Weak cryptography in ntp:ntp
- CVE-2019-1133 Scripting Engine Memory Corruption Vulnerability
- CVE-2019-11328 Incorrect Permission Assignment for Critical Resource in Singularity
- CVE-2019-11327 Path traversal in topcon:net-g5 firmware
- CVE-2019-11326 Auth bypass in topcon:net-g5 firmware
- CVE-2019-11325 Improper Input Validation in Symfony
- CVE-2019-11324 Improper Certificate Validation in urllib3
- CVE-2019-11323 Weak cryptography in haproxy:haproxy
- CVE-2019-11322 Command injection in motorola:cx2 firmware
- CVE-2019-11321 Missing authorization in motorola:cx2 firmware
- CVE-2019-11320 Missing authorization in motorola:cx2 firmware
- CVE-2019-1132 Microsoft Win32k Privilege Escalation
- CVE-2019-11319 Command injection in motorola:cx2 firmware
- CVE-2019-11318 Cross-site scripting in synacor:zimbra collaboration server
- CVE-2019-1131 Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-1130 Microsoft Windows AppX Deployment Service Privilege Escalation
- CVE-2019-11294 CAPI leaks service broker URLs and GUIDs to space developers
- CVE-2019-11293 UAA logs all query parameters with debug logging level
- CVE-2019-11292 Pivotal Ops Manager logs query parameters in tomcat access file
- CVE-2019-11291 RabbitMQ XSS attack via federation and shovel endpoints
- CVE-2019-11290 Cloud Foundry UAA logs query parameters in tomcat access file
- CVE-2019-1129 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation
- CVE-2019-11289 A forged route service request using an invalid nonce can cause the gorouter to panic and crash
- CVE-2019-11288 tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation
- CVE-2019-11287 RabbitMQ Web Management Plugin DoS via heap overflow
- CVE-2019-11286 JMX Credential Deserialization in GemFire
- CVE-2019-11284 Reactor Netty authentication leak in redirects
- CVE-2019-11283 Password leak in smbdriver logs
- CVE-2019-11282 UAA is vulnerable to a Blind SCIM injection leading to information disclosure
- CVE-2019-11281 RabbitMQ XSS attack
- CVE-2019-11280 Privilege escalation through the invitations service
- CVE-2019-1128 Memory corruption in Windows
- CVE-2019-11279 Privilege Escalation via Scope Manipulation in UAA
- CVE-2019-11278 Privilege Escalation via Blind SCIM Injection in UAA
- CVE-2019-11277 Volume Services is vulnerable to an LDAP injection attack
- CVE-2019-11276 Apps Manager sends tokens to Spring apps via HTTP
- CVE-2019-11275 CSV Injection in usage report downloaded from Pivotal Application Manager
- CVE-2019-11274 UAA SCIM Filter XSS
- CVE-2019-11273 PKS Telemetry logs credentials
- CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null
- CVE-2019-11271 Bosh Deployment logs leak sensitive information
- CVE-2019-11270 UAA clients.write vulnerability
- CVE-2019-1127 Memory corruption in Windows
- CVE-2019-11269 Open Redirector in spring-security-oauth2
- CVE-2019-11268 UAA SQL Identity Zone Vulnerability
- CVE-2019-1126 Security feature bypass in Windows Server
- CVE-2019-11255 Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation
- CVE-2019-11254 Kubernetes API Server denial of service vulnerability from malicious YAML payloads
- CVE-2019-11253 Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack
- CVE-2019-11252 Credential leakage when failing to mount
- CVE-2019-11251 kubectl cp allows symlink directory traversal
- CVE-2019-11250 Kubernetes client-go logs authorization headers at debug verbosity levels
- CVE-2019-1125 Windows Kernel Information Disclosure Vulnerability
- CVE-2019-11249 kubectl cp allows symlink directory traversal
- CVE-2019-11248 Kubernetes kubelet exposes /debug/pprof info on healthz port
- CVE-2019-11247 Kubernetes kube-apiserver allows access to custom resources via wrong scope
- CVE-2019-11246 kubectl cp allows symlink directory traversal
- CVE-2019-11245 kubelet-started container uid changes to root after first restart or if image is already pulled to the node
- CVE-2019-11244 kubectl creates world-writeable cached schema files
- CVE-2019-11243 Kubernetes did not effectively clear service account credentials
- CVE-2019-11242 Security feature bypass in cohesity:dataplatform
- CVE-2019-1124 Memory corruption in Windows
- CVE-2019-11236 Improper Neutralization of CRLF Sequences in urllib3 library for Python
- CVE-2019-11235 Weak cryptography in canonical:ubuntu linux
- CVE-2019-11234 Auth bypass in canonical:ubuntu linux
- CVE-2019-11233 Information disclosure in eic:biyan
- CVE-2019-11232 Auth bypass in eic:biyan
- CVE-2019-11231 File upload in get-simple:getsimple cms
- CVE-2019-11230 Other in avast:antivirus
- CVE-2019-1123 Memory corruption in Windows
- CVE-2019-11229 Gitea Remote Code Execution
- CVE-2019-11228 Gitea Improper Input Validation