Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 145 of 164.
- CVE-2019-10910 Symfony Service IDs Allow Injection
- CVE-2019-1091 Information disclosure in Windows
- CVE-2019-10909 Symfony Cross-site Scripting (XSS) vulnerability
- CVE-2019-10908 Weak cryptography in airsonic project:airsonic
- CVE-2019-10907 Weak cryptography in airsonic project:airsonic
- CVE-2019-10906 Jinja2 sandbox escape via string formatting
- CVE-2019-10905 Parsedown Class-Name Injection
- CVE-2019-10904 Moderate severity vulnerability that affects roundup
- CVE-2019-10903 Memory corruption in canonical:ubuntu linux
- CVE-2019-10902 Denial of service in fedoraproject:fedora
- CVE-2019-10901 Null dereference in canonical:ubuntu linux
- CVE-2019-10900 Denial of service in fedoraproject:fedora
- CVE-2019-1090 Privilege escalation in Windows
- CVE-2019-10899 Memory corruption in canonical:ubuntu linux
- CVE-2019-10898 Denial of service in fedoraproject:fedora
- CVE-2019-10897 Denial of service in fedoraproject:fedora
- CVE-2019-10896 Memory corruption in canonical:ubuntu linux
- CVE-2019-10895 Memory corruption in canonical:ubuntu linux
- CVE-2019-10894 Denial of service in canonical:ubuntu linux
- CVE-2019-10893 Cross-site scripting in centos-webpanel:centos web panel
- CVE-2019-10892 Memory corruption in dlink:dir-806 firmware
- CVE-2019-10891 Command injection in dlink:dir-806 firmware
- CVE-2019-1089 Privilege escalation in Multiple
- CVE-2019-10888 Cross-site request forgery in ukcms:ukcms
- CVE-2019-10887 Cross-site scripting in salicru:slc-20-cube3\(5\)
- CVE-2019-10886 Missing authorization in sony:photo sharing plus
- CVE-2019-10885 Security feature bypass in ivanti:workspace control
- CVE-2019-10884 Security feature bypass in uniqkey:password manager
- CVE-2019-10883 Command injection in citrix:citrix sd-wan center
- CVE-2019-10882 Netskope client buffer overflow vulnerability
- CVE-2019-10881 Default hidden Privileged Account Vulnerability in multiple XEROX devices
- CVE-2019-10880 Command injection in AltaLink B8045/B8055/B8065/B8075/B8090
- CVE-2019-1088 Privilege escalation in Windows
- CVE-2019-10879 Integer overflow in teeworlds:teeworlds
- CVE-2019-10878 Memory corruption in teeworlds:teeworlds
- CVE-2019-10877 Integer overflow in teeworlds:teeworlds
- CVE-2019-10876 OpenStack Neutron overlapping security group rules prevents compute node network configuration
- CVE-2019-10875 Other in mi:mi browser
- CVE-2019-10874 Bolt Cross Site Request Forgery (CSRF)
- CVE-2019-10873 Null dereference in freedesktop:poppler
- CVE-2019-10872 Memory corruption in freedesktop:poppler
- CVE-2019-10871 Memory corruption in freedesktop:poppler
- CVE-2019-1087 Privilege escalation in Windows
- CVE-2019-10869 File upload in ninjaforms:ninja forms file uploads
- CVE-2019-10868 Tryton Improper Access Control
- CVE-2019-10867 Pimcore Unserialize Remote Code Execution
- CVE-2019-10866 SQL injection in 10web:form maker
- CVE-2019-10864 Cross-site scripting in veronalabs:wp statistics
- CVE-2019-10863 Code injection in combodo:teemip
- CVE-2019-1086 Privilege escalation in Windows
- CVE-2019-10856 Jupyter Notebook open redirect vulnerability
- CVE-2019-10855 Weak cryptography in computrols:computrols building automation software
- CVE-2019-10854 Command injection in computrols:computrols building automation software
- CVE-2019-10853 Auth bypass in computrols:computrols building automation software
- CVE-2019-10852 SQL injection in computrols:computrols building automation software
- CVE-2019-10851 Hardcoded credentials in computrols:computrols building automation software
- CVE-2019-10850 Hardcoded credentials in computrols:computrols building automation software
- CVE-2019-1085 Privilege escalation in Windows
- CVE-2019-10849 Information disclosure in computrols:computrols building automation software
- CVE-2019-10848 Information disclosure in computrols:computrols building automation software
- CVE-2019-10847 Cross-site request forgery in computrols:computrols building automation software
- CVE-2019-10846 Cross-site scripting in computrols:computrols building automation system
- CVE-2019-10845 Security feature bypass in uniqkey:password manager
- CVE-2019-10844 Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10
- CVE-2019-10842 Bootstrap-sass contains code execution backdoor
- CVE-2019-1084 Information disclosure in Mail and Calendar
- CVE-2019-1083 Denial of service in Microsoft .NET Framework 2.0
- CVE-2019-1082 Privilege escalation in Windows
- CVE-2019-1081 Microsoft Browser Information Disclosure Vulnerability
- CVE-2019-10808 Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify
- CVE-2019-10807 Improper Neutralization of Special Elements used in an OS Command in Blamer
- CVE-2019-10806 Improperly Controlled Modification of Dynamically-Determined Object Attributes in vega-util
- CVE-2019-10805 Exposure of Resource to Wrong Sphere in valib
- CVE-2019-10804 OS Command Injection in serial-number
- CVE-2019-10803 push-dir Enables OS Command Injection
- CVE-2019-10802 OS Command Injection in giting
- CVE-2019-10801 OS Command Injection in enpeem
- CVE-2019-10800 Command Injection
- CVE-2019-1080 Scripting Engine Memory Corruption Vulnerability
- CVE-2019-10799 OS Command Injection in compile-sass
- CVE-2019-10798 Uncontrolled Resource Consumption in rdf-graph-array
- CVE-2019-10797 HTTP Response Splitting in WSO2 transport-http
- CVE-2019-10796 OS Command Injection in rpi
- CVE-2019-10795 Prototype Pollution in undefsafe
- CVE-2019-10794 component-flatten vulnerable to Prototype Pollution
- CVE-2019-10793 Prototype Pollution in dot-object
- CVE-2019-10792 Injection in bodymen
- CVE-2019-10791 promise-probe OS command injection vulnerability
- CVE-2019-10790 TaffyDB can allow access to any data items in the DB
- CVE-2019-1079 Information disclosure in Microsoft Visual Studio
- CVE-2019-10789 OS Command Injection in curling
- CVE-2019-10788 OS Command Injection in im-metadata
- CVE-2019-10787 OS Command Injection in im-resize
- CVE-2019-10786 Improper Input Validation in network-manager
- CVE-2019-10785 XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode
- CVE-2019-10784 Cross-site request forgery in phppgadmin
- CVE-2019-10783 OS Command Injection in lsof
- CVE-2019-10782 XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
- CVE-2019-10781 Validation Bypass in schema-inspector
- CVE-2019-10780 BibTeX-Ruby vulnerable to OS command injection