Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 151 of 164.
- CVE-2019-10281 Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials in plain text
- CVE-2019-10280 Jenkins Assembla Auth Plugin stores credentials in plain text
- CVE-2019-1028 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2019-10279 Missing permission check in Jenkins jenkins-reviewbot Plugin
- CVE-2019-10278 CSRF vulnerability in jenkins-reviewbot Plugin
- CVE-2019-10277 Jenkins StarTeam Plugin stores credentials in plain text
- CVE-2019-10276 File upload in cobub:razor
- CVE-2019-10273 Auth bypass in zohocorp:manageengine servicedesk plus
- CVE-2019-10272 Other in weaver:e-cology
- CVE-2019-10271 Missing authorization in ultimatemember:ultimate member
- CVE-2019-10270 Auth bypass in ultimatemember:ultimate member
- CVE-2019-1027 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2019-10269 Memory corruption in burrow-wheeler aligner project:burrow-wheeler aligner
- CVE-2019-10267 File upload in ahsay:cloud backup suite
- CVE-2019-10266 XML external entity in ahsay:cloud backup suite
- CVE-2019-10265 Path traversal in ahsay:cloud backup suite
- CVE-2019-10264 XML external entity in ahsay:cloud backup suite
- CVE-2019-10263 Cross-site scripting in ahsay:cloud backup suite
- CVE-2019-10262 SQL injection in bluecms project:bluecms
- CVE-2019-10261 Cross-site scripting in centos-webpanel:centos web panel
- CVE-2019-10260 Moderate severity vulnerability that affects total.js
- CVE-2019-1026 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2019-10257 Path traversal in zucchetti:hr portal
- CVE-2019-10256 Auth bypass in vivotek:camera
- CVE-2019-10255 Open Redirect vulnerability in jupyterhub and notebook
- CVE-2019-10254 Cross-site scripting in misp-project:misp
- CVE-2019-10253 Cross-site request forgery in teammatesolutions:teammate\+
- CVE-2019-10251 Weak cryptography in ucweb:uc browser
- CVE-2019-10250 Weak cryptography in ucweb:uc browser
- CVE-2019-1025 Windows Denial of Service Vulnerability
- CVE-2019-10249 Potentially compromised builds
- CVE-2019-10248 Eclipse Vorto resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS
- CVE-2019-10247 Installation information leak in Eclipse Jetty
- CVE-2019-10246 Information Exposure vulnerability in Eclipse Jetty
- CVE-2019-10245 Memory corruption in Eclipse OpenJ9
- CVE-2019-10244 XML external entity in Eclipse Kura
- CVE-2019-10243 Information disclosure in Eclipse Kura
- CVE-2019-10242 Path traversal in Eclipse Kura
- CVE-2019-10241 Cross-site Scripting in Eclipse Jetty
- CVE-2019-10240 Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
- CVE-2019-1024 Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2019-10239 Information disclosure in robotronic:runasspc
- CVE-2019-10238 Cross-site scripting in sitemagic:sitemagic
- CVE-2019-10237 Cross-site request forgery in s-cms:s-cms
- CVE-2019-10233 Information disclosure in glpi-project:glpi
- CVE-2019-10232 SQL injection in teclib-edition:gestionnaire libre de parc informatique
- CVE-2019-10231 Auth bypass in teclib-edition:gestionnaire libre de parc informatique
- CVE-2019-1023 Scripting Engine Information Disclosure Vulnerability
- CVE-2019-10229 Auth bypass in mailstore:mailstore
- CVE-2019-10227 Cross-site scripting in it-novum:openitcockpit
- CVE-2019-10226 Cross-site scripting in fatfreecrm:fat free crm
- CVE-2019-10225 Information disclosure in atomic-openshift
- CVE-2019-10224 Information disclosure in 389-ds-base
- CVE-2019-10223 Duplicate Advisory: k8s.io/kube-state-metrics Exposure of Sensitive Information
- CVE-2019-10222 Denial of service in ceph
- CVE-2019-10221 Cross-site scripting in pki-core
- CVE-2019-10220 Path traversal in kernel:
- CVE-2019-1022 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2019-10219 The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
- CVE-2019-10218 Path traversal in samba
- CVE-2019-10217 Exposure of Sensitive Information to an Unauthorized Actor in ansible
- CVE-2019-10216 Security feature bypass in ghostscript
- CVE-2019-10215 Cross-site scripting in bootstrap3-typeahead.js
- CVE-2019-10214 containers/image library Insufficiently Protects Credentials
- CVE-2019-10213 Sensitive Data Exposure in Openshift Container Platform
- CVE-2019-10212 Potential to access user credentials from the log files when debug logging enabled
- CVE-2019-10211 Code injection in postgresql
- CVE-2019-10210 Information disclosure in postgresql
- CVE-2019-1021 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2019-10209 Information disclosure in postgresql
- CVE-2019-10208 SQL injection in postgresql
- CVE-2019-10207 Null dereference in kernel
- CVE-2019-10206 Ansible password prompts could expose passwords
- CVE-2019-10205 Information disclosure in quay
- CVE-2019-10203 Denial of service in pdns
- CVE-2019-10202 Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl
- CVE-2019-10201 Improper Verification of Cryptographic Signature in keycloak
- CVE-2019-1020019 Cross-site Scripting in invenio-previewer
- CVE-2019-1020018 Auth bypass in Discourse
- CVE-2019-1020017 Security feature bypass in Discourse
- CVE-2019-1020016 Open redirect in ASH-AIO
- CVE-2019-1020015 Auth bypass in graphql-engine
- CVE-2019-1020014 Memory corruption in docker-credential-helpers
- CVE-2019-1020013 Sensitive Data Exposure in parse-server
- CVE-2019-1020012 Parse Server before v3.4.1 vulnerable to Denial of Service
- CVE-2019-1020011 Missing authorization in SmokeDetector
- CVE-2019-1020010 Cross-site scripting in Misskey
- CVE-2019-1020009 Information disclosure in Fleet
- CVE-2019-1020008 stacktable.js before 1.0.4 allows XSS.
- CVE-2019-1020007 Cross-site scripting in Dependency-Track
- CVE-2019-1020006 Invenio-App vulnerable to host header injection attack
- CVE-2019-1020005 Cross-site Scripting in invenio-communities
- CVE-2019-1020004 Other in Tridactyl
- CVE-2019-1020003 Cross-site scripting invenio-records
- CVE-2019-1020002 Pterodactyl vulnerable to 2FA Sniffing
- CVE-2019-1020001 Path Traversal vulnerability that affects yard
- CVE-2019-10200 Privilege escalation in OpenShift Container Platform
- CVE-2019-10199 Improper Input Validation and Cross-Site Request Forgery in Keycloak
- CVE-2019-10198 Missing authorization in foreman-tasks
- CVE-2019-10197 Path traversal in samba