Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 146 of 164.
- CVE-2019-1078 Microsoft Graphics Component Information Disclosure Vulnerability
- CVE-2019-10779 Cross-site scripting in stroom:stroom-app
- CVE-2019-10778 OS Command Injection in devcert-sanscache
- CVE-2019-10777 OS command injection in aws-lambda
- CVE-2019-10776 OS command injection in git-diff-apply
- CVE-2019-10775 Denial of Service in ecstatic
- CVE-2019-10774 php-shellcommand command injection vulnerability
- CVE-2019-10773 Yarn Improper link resolution before file access (Link Following)
- CVE-2019-10772 Sanitizer bypass in svg-sanitizer
- CVE-2019-10771 Cross-Site Scripting in iobroker.web
- CVE-2019-10770 Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
- CVE-2019-1077 Privilege escalation in Microsoft Visual Studio 2017
- CVE-2019-10769 Sandbox Breakout / Arbitrary Code Execution in safer-eval
- CVE-2019-10768 angular Prototype Pollution vulnerability
- CVE-2019-10767 Arbitrary File Write in iobroker.js-controller
- CVE-2019-10766 SQL Injection in usmanhalalit/pixie
- CVE-2019-10765 Arbitrary File Write in iobroker.admin
- CVE-2019-10764 Timing attacks might allow practical recovery of the long-term private key
- CVE-2019-10763 Data leakage via SQL Injection in Pimcore
- CVE-2019-10762 SQL Injection in medoo
- CVE-2019-10761 Sandbox Bypass
- CVE-2019-10760 Sandbox Breakout / Arbitrary Code Execution in safer-eval
- CVE-2019-1076 Cross-site scripting in Azure DevOps Server
- CVE-2019-10759 Sandbox Breakout / Arbitrary Code Execution in safer-eval
- CVE-2019-10758 MongoDB mongo-express Remote Code Execution
- CVE-2019-10757 SQL Injection in knex
- CVE-2019-10756 Cross-site Scripting in node-red-dashboard
- CVE-2019-10755 Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
- CVE-2019-10754 Use of Insufficiently Random Values in Apereo CAS
- CVE-2019-10753 Incorrect Resource Transfer Between Spheres in eclipse-wtp
- CVE-2019-10752 SQL Injection in sequelize
- CVE-2019-10751 Open Redirect in httpie
- CVE-2019-10750 Prototype Pollution in deeply
- CVE-2019-1075 Open redirect in ASP.NET Core
- CVE-2019-10749 SQL Injection in sequelize
- CVE-2019-10748 SQL Injection in sequelize
- CVE-2019-10747 Prototype Pollution in set-value
- CVE-2019-10746 Prototype Pollution in mixin-deep
- CVE-2019-10745 assign-deep Vulnerable to Prototype Pollution
- CVE-2019-10744 Prototype Pollution in lodash
- CVE-2019-10743 Path Traversal in MHolt Archiver
- CVE-2019-10742 Denial of Service in axios
- CVE-2019-10741 Security feature bypass in k-9 mail project:k-9 mail
- CVE-2019-10740 Information disclosure in fedoraproject:fedora
- CVE-2019-1074 Privilege escalation in Windows
- CVE-2019-10735 Information disclosure in claws-mail:mail
- CVE-2019-10734 Information disclosure in trojita project:trojita
- CVE-2019-10732 Information disclosure in debian:debian linux
- CVE-2019-1073 Information disclosure in Windows
- CVE-2019-10724 Privilege escalation in lenovo:100e 2nd gen firmware
- CVE-2019-10723 Denial of service in podofo project:podofo
- CVE-2019-10721 Open redirect in dotnetblogengine:blogengine.net
- CVE-2019-10720 Path traversal in blogengine:blogengine.net
- CVE-2019-1072 Code injection in Azure DevOps Server
- CVE-2019-10719 Path traversal in dotnetblogengine:blogengine.net
- CVE-2019-10718 XML external entity in dotnetblogengine:blogengine.net
- CVE-2019-10717 Path traversal in dotnetblogengine:blogengine.net
- CVE-2019-10716 Information disclosure in verodin:director
- CVE-2019-10715 Cross-site scripting in verodin:director
- CVE-2019-10714 Memory corruption in imagemagick:imagemagick
- CVE-2019-10712 Hardcoded credentials in wago:750-330 firmware
- CVE-2019-10711 Hardcoded credentials in hisilicon:hi3510 firmware
- CVE-2019-10710 Information disclosure in hisilicon:hi3510 firmware
- CVE-2019-1071 Information disclosure in Windows
- CVE-2019-10709 Memory corruption in asus:precision touchpad
- CVE-2019-10708 SQL injection in s-cms:s-cms
- CVE-2019-10707 SQL injection in mkcms project:mkcms
- CVE-2019-10706 Weak cryptography in westerndigital:sandisk x300 sd7sb6s-128g firmware
- CVE-2019-10705 Auth bypass in westerndigital:sandisk x600 sd9sb8w-128g firmware
- CVE-2019-1070 Cross-site scripting in Microsoft SharePoint Enterprise Server
- CVE-2019-10695 Information disclosure in Continuous Delivery for Puppet Enterprise (CD4PE)
- CVE-2019-10694 Hardcoded credentials in Puppet Enterprise
- CVE-2019-10692 SQL injection in codecabin:wp go maps
- CVE-2019-10691 Denial of service in dovecot:dovecot
- CVE-2019-1069 Microsoft Task Scheduler Privilege Escalation
- CVE-2019-10689 Auth bypass in polycom:better together over ethernet connector
- CVE-2019-10688 Hardcoded credentials in polycom:better together over ethernet connector
- CVE-2019-10687 SQL injection in kbpublisher:kbpublisher
- CVE-2019-10686 Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
- CVE-2019-10685 Cross-site scripting in heidelberg:prinect archiver
- CVE-2019-10684 Code injection in 74cms:74cms
- CVE-2019-10682 django-nopassword stores secrets in cleartext
- CVE-2019-1068 Microsoft SQL Server Remote Code Execution
- CVE-2019-10679 Misconfiguration in thomsonreuters:eikon
- CVE-2019-10678 Command injection in domoticz:domoticz
- CVE-2019-10677 Cross-site scripting in dasanzhone:znid gpon 2426a eu firmware
- CVE-2019-10676 Information disclosure in uniqkey:password manager
- CVE-2019-10673 Cross-site request forgery in ultimatemember:ultimate member
- CVE-2019-10672 Other in symonics:libmysofa
- CVE-2019-10671 SQL Injection in LibreNMS
- CVE-2019-10670 Cross-site scripting in librenms:librenms
- CVE-2019-1067 Privilege escalation in Windows
- CVE-2019-10669 Command injection in librenms:librenms
- CVE-2019-10668 Missing Authentication for Critical Function in LibreNMS
- CVE-2019-10667 Exposure of Sensitive Information to an Unauthorized Actor in LibreNMS
- CVE-2019-10666 Code injection in librenms:librenms
- CVE-2019-10665 LibreNMS Information Disclosure
- CVE-2019-10664 SQL injection in domoticz:domoticz
- CVE-2019-10663 SQL injection in grandstream:ucm6204 firmware
- CVE-2019-10662 Command injection in grandstream:ucm6204 firmware