Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 163 of 164.
- CVE-2019-0104 Information disclosure in intel:data center manager
- CVE-2019-0103 Information disclosure in intel:data center manager
- CVE-2019-0102 Auth bypass in intel:data center manager
- CVE-2019-0101 Auth bypass in intel:unite
- CVE-2019-0099 Missing authorization in Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE)
- CVE-2019-0098 Privilege escalation in Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE)
- CVE-2019-0097 Denial of service in Intel(R) Active Management Technology (AMT)
- CVE-2019-0096 Memory corruption in Intel(R) Active Management Technology (AMT)
- CVE-2019-0094 Denial of service in Intel(R) Active Management Technology (AMT)
- CVE-2019-0093 Information disclosure in Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS)
- CVE-2019-0092 Privilege escalation in Intel(R) Active Management Technology (AMT)
- CVE-2019-0091 Code injection in Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE)
- CVE-2019-0090 Missing authorization in Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS)
- CVE-2019-0089 Privilege escalation in Intel(R) Server Platform Services (SPS)
- CVE-2019-0088 Privilege escalation in Intel(R) System Support Utility for Windows
- CVE-2019-0086 Privilege escalation in Intel(R) Converged Security & Management Engine (CSME) Dynamic Application Loader, Intel (R) Trusted Execution Engine Interface (TXE)
- CVE-2019-0075 Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
- CVE-2019-0074 Path traversal in Junos OS
- CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions
- CVE-2019-0072 Information disclosure in SBR Carrier
- CVE-2019-0071 Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS
- CVE-2019-0070 Privilege escalation in Junos OS
- CVE-2019-0069 Information disclosure in Junos OS
- CVE-2019-0068 Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets
- CVE-2019-0067 Denial of service in Junos OS
- CVE-2019-0066 Denial of service in Junos OS
- CVE-2019-0065 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC
- CVE-2019-0064 Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet
- CVE-2019-0063 Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message
- CVE-2019-0062 Junos OS: Session fixation vulnerability in J-Web
- CVE-2019-0061 Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation
- CVE-2019-0060 Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets
- CVE-2019-0059 Denial of service in Junos OS
- CVE-2019-0058 Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.
- CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.
- CVE-2019-0056 Denial of service in Junos OS
- CVE-2019-0055 Denial of service in Junos OS
- CVE-2019-0054 Weak cryptography in Junos OS
- CVE-2019-0053 Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow
- CVE-2019-0052 SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets
- CVE-2019-0051 SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.
- CVE-2019-0050 Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.
- CVE-2019-0049 Junos OS: RPD process crashes when BGP peer restarts
- CVE-2019-0048 Security feature bypass in Junos OS
- CVE-2019-0047 Junos OS: Persistent XSS vulnerability in J-Web
- CVE-2019-0046 Denial of service in Junos OS
- CVE-2019-0044 Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface
- CVE-2019-0043 Junos OS: RPD process crashes upon receipt of a specific SNMP packet
- CVE-2019-0042 Security feature bypass in Juniper Identity Management Service
- CVE-2019-0041 Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.
- CVE-2019-0040 Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface
- CVE-2019-0039 Junos OS: Login credentials are vulnerable to brute force attacks through the REST API
- CVE-2019-0038 SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS
- CVE-2019-0037 Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message
- CVE-2019-0036 Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored
- CVE-2019-0035 Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes
- CVE-2019-0033 SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.
- CVE-2019-0032 Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
- CVE-2019-0031 Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.
- CVE-2019-0030 Juniper ATP: Password hashing uses DES and a hardcoded salt
- CVE-2019-0029 Juniper ATP: Splunk credentials are in logged in clear text
- CVE-2019-0028 Junos OS: RPD process crashes due to specific BGP peer restarts condition.
- CVE-2019-0027 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Snort Rules configuration
- CVE-2019-0026 Juniper ATP: Persistent Cross-Site Scripting vulnerability in Zone configuration
- CVE-2019-0025 Juniper ATP: Persistent Cross-Site Scripting vulnerability in RADIUS configuration menu
- CVE-2019-0024 Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Email Collectors menu
- CVE-2019-0023 Juniper ATP: Persistent Cross-Site Scripting vulnerability in the Golden VM menu
- CVE-2019-0022 Hardcoded credentials in Juniper ATP
- CVE-2019-0021 Juniper ATP: secret CLI inputs are logged to /var/log/syslog in clear text
- CVE-2019-0020 Juniper ATP: Hard coded credentials used in Web Collector
- CVE-2019-0019 BGP packets can trigger rpd crash when BGP tracing is enabled.
- CVE-2019-0018 Juniper ATP: Persistent Cross-Site Scripting (XSS) vulnerability in file upload menu
- CVE-2019-0017 Junos Space: Unrestricted file upload vulnerability
- CVE-2019-0016 Junos Space: Authenticated user able to delete devices without delete device privileges
- CVE-2019-0015 Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot
- CVE-2019-0014 Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet
- CVE-2019-0013 Junos OS: RPD crash upon receipt of malformed PIM packet
- CVE-2019-0012 Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message
- CVE-2019-0011 Denial of service in Junos OS
- CVE-2019-0010 Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service
- CVE-2019-0009 Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE
- CVE-2019-0008 Memory corruption in Junos OS
- CVE-2019-0007 Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability
- CVE-2019-0006 Memory corruption in Junos OS
- CVE-2019-0005 Security feature bypass in juniper:junos
- CVE-2019-0004 Juniper ATP: API and device keys are logged in a world-readable permissions file
- CVE-2019-0003 Denial of service in Junos OS
- CVE-2019-0002 Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect
- CVE-2019-0001 Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).
- ALEA-2019:3677 isns-utils bug fix and enhancement update
- ALEA-2019:3608 libaio bug fix and enhancement update
- ALEA-2019:3585 rdma bug fix and enhancement update
- ALEA-2019:3557 libtalloc bug fix and enhancement update
- ALEA-2019:3511 libvarlink bug fix and enhancement update
- ALEA-2019:3472 libpmemobj-cpp bug fix and enhancement update
- ALEA-2019:3461 new module: nodejs:12
- ALEA-2019:3454 new packages: gcc-toolset-9-systemtap
- ALEA-2019:3447 new module: ruby:2.6
- ALEA-2019:3444 new packages: gcc-toolset-9-valgrind
- ALEA-2019:3443 new packages: gcc-toolset-9-elfutils