Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 144 of 164.
- CVE-2019-11004 Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
- CVE-2019-11003 Materialize-css vulnerable to Cross-site Scripting in autocomplete component
- CVE-2019-11002 Materialize-css vulnerable to Cross-site Scripting in tooltip component
- CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection
- CVE-2019-11000 Information disclosure in gitlab:gitlab
- CVE-2019-1100 Information disclosure in Windows
- CVE-2019-10999 Memory corruption in dlink:dcs-5009l firmware
- CVE-2019-10998 Auth bypass in phoenixcontact:axc f 2152 firmware
- CVE-2019-10997 Denial of service in phoenixcontact:axc f 2152 firmware
- CVE-2019-10996 Use after free in Red Lion Controls Crimson (Windows configuration software)
- CVE-2019-10995 Hardcoded credentials in ABB CP651 HMI products
- CVE-2019-10994 Memory corruption in LCDS LAquis SCADA
- CVE-2019-10993 Memory corruption in WebAccess/SCADA
- CVE-2019-10992 Memory corruption in CNCSoft ScreenEditor
- CVE-2019-10991 Memory corruption in WebAccess/SCADA
- CVE-2019-10990 Hardcoded credentials in Red Lion Controls Crimson (Windows configuration software)
- CVE-2019-1099 Information disclosure in Windows
- CVE-2019-10989 Memory corruption in WebAccess/SCADA
- CVE-2019-10988 Other in Philips HDI 4000 Ultrasound Systems
- CVE-2019-10987 Memory corruption in WebAccess/SCADA
- CVE-2019-10985 Path traversal in WebAccess/SCADA
- CVE-2019-10984 Memory corruption in Red Lion Controls Crimson (Windows configuration software)
- CVE-2019-10983 Memory corruption in WebAccess/SCADA
- CVE-2019-10982 Memory corruption in CNCSoft ScreenEditor
- CVE-2019-10981 Information disclosure in AVEVA Vijeo Citect and CitectSCADA
- CVE-2019-10980 Memory corruption in LCDS LAquis SCADA
- CVE-2019-1098 Information disclosure in Windows
- CVE-2019-10979 Hardcoded credentials in MSC800
- CVE-2019-10978 Memory corruption in Red Lion Controls Crimson (Windows configuration software)
- CVE-2019-10977 Denial of service in MELSEC-Q series Ethernet module
- CVE-2019-10976 XML external entity in Mitsubishi Electric FR Configurator2
- CVE-2019-10975 Memory corruption in Alpha7 PC Loader
- CVE-2019-10974 Memory corruption in EnergyPlus
- CVE-2019-10973 Missing authorization in Quest KACE
- CVE-2019-10972 Denial of service in Mitsubishi Electric FR Configurator2
- CVE-2019-10971 Other in Network Configurator for DeviceNet Safety
- CVE-2019-10970 Missing authorization in Rockwell Automation PanelView 5510
- CVE-2019-1097 Information disclosure in Windows
- CVE-2019-10969 Command injection in Moxa EDR 810
- CVE-2019-10968 Security feature bypass in Philips Holter 2010 Plus
- CVE-2019-10967 Memory corruption in Emerson Ovation OCR400 Controller
- CVE-2019-10966 Auth bypass in Aestiva and Aespire
- CVE-2019-10965 Memory corruption in Emerson Ovation OCR400 Controller
- CVE-2019-10964 Medtronic MiniMed 508 and Paradigm Series Insulin Pumps Improper Access Control
- CVE-2019-10963 Information disclosure in Moxa EDR 810
- CVE-2019-10962 Missing authorization in BD Alaris Gateway Workstation
- CVE-2019-10961 Memory corruption in Advantech WebAccess HMI Designer
- CVE-2019-10960 Information disclosure in Zebra Industrial Printers All Versions
- CVE-2019-1096 Information disclosure in Windows
- CVE-2019-10959 File upload in BD Alaris Gateway Workstation
- CVE-2019-10958 Command injection in Geutebruck IP Cameras
- CVE-2019-10957 Cross-site scripting in Geutebruck IP Cameras
- CVE-2019-10956 Command injection in Geutebruck IP Cameras
- CVE-2019-10955 Open redirect in CompactLogix 5370 L1 controllers
- CVE-2019-10954 Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow
- CVE-2019-10953 Denial of service in 1SAP120600R0071 PM554-TP-ETH
- CVE-2019-10952 Rockwell Automation CompactLogix 5370 Uncontrolled Resource Consumption
- CVE-2019-10951 Memory corruption in Delta Industrial Automation CNCSoft
- CVE-2019-10950 Auth bypass in Fujifilm FCR Capsula X/ Carbon X
- CVE-2019-1095 Information disclosure in Windows
- CVE-2019-10949 Memory corruption in Delta Industrial Automation CNCSoft
- CVE-2019-10948 Denial of service in Fujifilm FCR Capsula X/ Carbon X
- CVE-2019-10947 Memory corruption in Delta Industrial Automation CNCSoft
- CVE-2019-10946 Missing authorization in joomla:joomla\!
- CVE-2019-10945 Path traversal in joomla:joomla\!
- CVE-2019-10943 Security feature bypass in SIMATIC Drive Controller family
- CVE-2019-10942 Denial of service in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- CVE-2019-10941 Missing authorization in SINEMA Server
- CVE-2019-10940 Privilege escalation in SINEMA Server
- CVE-2019-1094 Information disclosure in Windows
- CVE-2019-10939 Misconfiguration in TIM 3V-IE (incl. SIPLUS NET variants)
- CVE-2019-10938 Security feature bypass in SIPROTEC 5 devices with CPU variants CP200
- CVE-2019-10937 Denial of service in SIMATIC TDC CP51M1
- CVE-2019-10936 Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- CVE-2019-10935 File upload in SIMATIC PCS 7 V8.0 and earlier
- CVE-2019-10934 Path traversal in TIA Portal V14
- CVE-2019-10933 Cross-site scripting in Spectrum Power 3 (Corporate User Interface)
- CVE-2019-10931 Denial of service in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules
- CVE-2019-10930 File upload in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules
- CVE-2019-1093 Information disclosure in Windows
- CVE-2019-10929 Weak cryptography in SIMATIC CP 1626
- CVE-2019-10928 Command injection in SCALANCE SC-600
- CVE-2019-10927 Denial of service in SCALANCE SC-600
- CVE-2019-10926 Information disclosure in SIMATIC MV400 family
- CVE-2019-10925 Privilege escalation in SIMATIC MV400 family
- CVE-2019-10924 Deserialization in LOGO! Soft Comfort
- CVE-2019-10923 Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller
- CVE-2019-10922 Auth bypass in SIMATIC PCS 7 V8.0 and earlier
- CVE-2019-10921 Information disclosure in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2019-10920 Hardcoded credentials in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2019-1092 Out-of-bounds write
- CVE-2019-10919 Missing authorization in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2019-10918 Command injection in SIMATIC PCS 7 V8.0 and earlier
- CVE-2019-10917 Denial of service in SIMATIC PCS 7 V8.0 and earlier
- CVE-2019-10916 Command injection in SIMATIC PCS 7 V8.0 and earlier
- CVE-2019-10915 Missing authorization in TIA Administrator
- CVE-2019-10914 Memory corruption in matrixssl:matrixssl
- CVE-2019-10913 Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
- CVE-2019-10912 Deserialization of untrusted data in Symfony
- CVE-2019-10911 Improper authentication in Symfony