Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 2 of 164.
- GHSA-cff4-rrq6-h78w Command Injection in command-exists
- GHSA-c35v-qwqg-87jc express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison
- GHSA-9xr8-8hmc-389f Cross-Site Scripting in vant
- GHSA-984p-xq9m-4rjw Rate Limiting Bypass in express-brute
- GHSA-8xqr-4cpm-wx7g Cross-Site Scripting in react-svg
- GHSA-8w57-jfpm-945m Denial of Service in http-proxy-agent
- GHSA-8v5f-hp78-jgxq Signature Verification Bypass in jwt-simple
- GHSA-8j8c-7jfh-h6hx Code Injection in js-yaml
- GHSA-8f93-rv4p-x4jw SQL Injection in sql
- GHSA-8948-ffc6-jg52 Insecure Default Configuration in redbird
- GHSA-886v-mm6p-4m66 High severity vulnerability that affects gun
- GHSA-87mg-h5r3-hw88 Cross-Site Scripting in bootbox
- GHSA-86p3-4gfq-38f2 Denial of Service in url-relative
- GHSA-83rx-c8cr-6j8q Insecure Default Configuration in tesseract.js
- GHSA-7jfh-2xc9-ccv7 Cross-Site Scripting in public
- GHSA-7cg8-pq9v-x98q Sandbox Breakout in realms-shim
- GHSA-74cr-77xc-8g6r Prototype Pollution in @apollo/gateway
- GHSA-74cp-qw7f-7hpw Path Traversal in statics-server
- GHSA-73cw-jxmm-qpgh Path Traversal in localhost-now
- GHSA-6qqf-vvcr-7qrv Cryptographically Weak PRNG in generate-password
- GHSA-6qh5-wx38-q92g Directory Traversal in ltt.js
- GHSA-6jg8-7333-554w Sandbox Breakout in realms-shim
- GHSA-68gr-cmcp-g3mj Directory Traversal in lactate
- GHSA-67cx-rhhq-mfhq High severity vulnerability that affects indico
- GHSA-65p8-3hm4-h9h8 Denial of Service in rgb2hex
- GHSA-6394-6h9h-cfjg Regular Expression Denial of Service
- GHSA-5w65-6875-rhq8 Undefined Behavior in sailsjs-cacheman
- GHSA-5v72-xg48-5rpm Denial of Service in ws
- GHSA-5f7m-mmpc-qhh4 mysql Node.JS Module Vulnerable to Remote Memory Exposure
- GHSA-57cf-349j-352g Out-of-bounds Read in npmconf
- GHSA-4xcv-9jjx-gfj3 Denial of Service in mem
- GHSA-4vr3-9v7h-5f8v Low severity vulnerability that affects Gw2Sharp
- GHSA-4vmm-mhcq-4x9j Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
- GHSA-4qhx-g9wp-g9m6 Failure to sanitize quotes which can lead to sql injection in squel
- GHSA-4j6x-w426-6rc6 Default Express middleware security check is ignored in production
- GHSA-49r3-3h96-rwj6 Cross-Site Scripting in ids-enterprise
- GHSA-4859-gpc7-4j66 Command Injection in dot
- GHSA-3xc7-xg67-pw99 Sensitive Data Exposure in sequelize-cli
- GHSA-3p92-886g-qxpq Remote Memory Exposure in floody
- GHSA-2xv3-h762-ccxv Out-of-bounds Read in concat-with-sourcemaps
- GHSA-2pr6-76vf-7546 Denial of Service in js-yaml
- GHSA-2hwp-g4g7-mwwj Reflected Cross-Site Scripting in jquery.terminal
- GHSA-28xh-wpgr-7fm8 Command Injection in open
- GHSA-28hp-fgcr-2r4h Cross-Site Scripting via JSONP
- GHSA-27v7-qhfv-rqq8 Insecure Credential Storage in web3
- DRUPAL-CORE-2019-012 The Drupal project uses the third-party library [Archive\_Tar](https://pear.php.net/package/Archive_Tar/), which has released a security imp
- DRUPAL-CORE-2019-011 The Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.
- DRUPAL-CORE-2019-010 Drupal 8 core's `file_save_upload()` function does not strip the leading and trailing dot ('.') from filenames, like Drupal 7 did.
- DRUPAL-CORE-2019-009 A visit to `install.php` can cause cached data to become corrupted.
- DRUPAL-CORE-2019-005 This security release fixes third-party dependencies included in or required by Drupal core.
- DRUPAL-CONTRIB-2019-095 The Permissions by Term module extends Drupal by functionality for restricting access to single nodes via taxonomy terms.
- DRUPAL-CONTRIB-2019-094 This project enables administrators to create modal dialogs.
- DRUPAL-CONTRIB-2019-093 This module extends access handling of Drupal Core's Taxonomy module.
- DRUPAL-CONTRIB-2019-092 The Smart Trim module allows site builders additional control with text summary fields.
- DRUPAL-CONTRIB-2019-089 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2019-088 **Update:** This module had an access bypass vulnerability which has now been addressed by the module’s current maintainers.
- DRUPAL-CONTRIB-2019-081 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2019-078 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2019-074 The Bat module provides a foundation through which a wide range of availability management, reservation and booking use cases can be addressed.
- DRUPAL-CONTRIB-2019-071 This module allows display of a site's content in AMP format.
- DRUPAL-CONTRIB-2019-069 This module provides a new UI experience for node editing - Gutenberg editor.
- DRUPAL-CONTRIB-2019-068 This module enables you to control access to content based on taxonomy terms.
- DRUPAL-CONTRIB-2019-067 This module allows you to attach tabular data to an entity.
- DRUPAL-CONTRIB-2019-066 This module enables you to have a separate permission only for creating users.
- DRUPAL-CONTRIB-2019-065 This module that allows you to store external images on your server and apply your own Image Styles.
- DRUPAL-CONTRIB-2019-064 Forms Steps provides an UI to create form workflows using form modes.
- DRUPAL-CONTRIB-2019-063 The External Link Filter module provides an input filter that replaces external links by a local link that redirects to the target URL.
- DRUPAL-CONTRIB-2019-062 This module improves the Drupal login page with the new features and layout.
- DRUPAL-CONTRIB-2019-060 This module provides an autocomplete widget for text fields that suggests all existing (previously entered) values for that field.
- DRUPAL-CONTRIB-2019-058 This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when sh
- DRUPAL-CONTRIB-2019-055 This module enables you to add and manage additional custom permissions through the administration UI.
- DRUPAL-CONTRIB-2019-050 This module enables you to handle fields for Custom Menu Links.
- DRUPAL-CONTRIB-2019-048 This module enables you to use special routes for user registration with special roles and custom field sets defined for the role.
- DRUPAL-CONTRIB-2019-047 In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not.
- DRUPAL-CONTRIB-2019-046 In certain circumstances it is possible that certain forum information is available to unprivileged users because the access check is done w
- DRUPAL-CONTRIB-2019-039 This module enables you to add social media share buttons on your website to its content and pages.
- DRUPAL-CONTRIB-2019-033 This module addresses the General Data Protection Regulation (GDPR) that came into effect 25th May 2018, and the EU Directive on Privacy and
- DRUPAL-CONTRIB-2019-030 This module enables you to create facet-filters for results of a search query and exposes them as blocks The module doesn't sufficiently esc
- DRUPAL-CONTRIB-2019-025 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-024 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-023 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-022 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-021 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-019 This resolves issues described in [SA-CORE-2019-003](https://www.drupal.org/sa-core-2019-003) for this module.
- DRUPAL-CONTRIB-2019-014 Acquia Connector facilitates sending certain telemetry data to Acquia for the purposes of analysis.
- DRUPAL-CONTRIB-2019-013 This module provides a field on user profiles which allows users to get a notification when their account logs in to the site.
- DRUPAL-CONTRIB-2019-010 Anti-spam module by CleanTalk to protect your Drupal sites from spambot registration and spam comments publications thru comment and contact forms.
- DRUPAL-CONTRIB-2019-004 The Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content.
- CVE-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS)
- CVE-2019-9977 Code injection in n/a
- CVE-2019-9976 Information disclosure in n/a
- CVE-2019-9975 Hardcoded credentials in n/a
- CVE-2019-9974 Missing authorization in n/a
- CVE-2019-9972 Command injection in n/a
- CVE-2019-9971 Privilege escalation in n/a
- CVE-2019-9970 Other in n/a
- CVE-2019-9969 Memory corruption in n/a
- CVE-2019-9968 Memory corruption in n/a
- CVE-2019-9967 Denial of service in n/a
- CVE-2019-9966 Memory corruption in n/a