Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 30 of 164.
- CVE-2019-6578 Denial of service in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...-
- CVE-2019-6577 Cross-site scripting in SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)
- CVE-2019-6576 Weak cryptography in SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)
- CVE-2019-6575 Denial of service in SIMATIC CP 443-1 OPC UA
- CVE-2019-6574 Denial of service in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...-
- CVE-2019-6572 Hardcoded credentials in SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)
- CVE-2019-6571 Denial of service in SIEMENS LOGO!8
- CVE-2019-6570 Missing authorization in SINEMA Remote Connect Server
- CVE-2019-6569 Other in SCALANCE X204-2
- CVE-2019-6568 Denial of service in SIMATIC CP 1604
- CVE-2019-6567 Information disclosure in SCALANCE X-200 switch family (incl. SIPLUS NET variants)
- CVE-2019-6566 Privilege escalation in GE Communicator
- CVE-2019-6565 Cross-site scripting in Moxa IKS, EDS
- CVE-2019-6564 Privilege escalation in GE Communicator
- CVE-2019-6563 Weak cryptography in Moxa IKS, EDS
- CVE-2019-6562 Cross-site scripting in Philips Tasy EMR
- CVE-2019-6561 Cross-site request forgery in Moxa IKS, EDS
- CVE-2019-6560 Auth bypass in Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App)
- CVE-2019-6559 Denial of service in Moxa IKS, EDS
- CVE-2019-6558 Auth bypass in Auto-Maskin RP210E Versions 3.7 and prior DCU210E Versions 3.7 and prior and Marine Observer Pro (Android App)
- CVE-2019-6557 Memory corruption in Moxa IKS, EDS
- CVE-2019-6556 Use after free in CX-Programmer within CX-One
- CVE-2019-6555 Other in Cscape
- CVE-2019-6554 Missing authorization in WebAccess/SCADA
- CVE-2019-6553 Memory corruption in RSLinx Classic
- CVE-2019-6552 Command injection in WebAccess/SCADA
- CVE-2019-6551 Auth bypass in Pangea Communications Internet FAX ATA
- CVE-2019-6550 Memory corruption in WebAccess/SCADA
- CVE-2019-6549 Information disclosure in PR100088 Modbus gateway
- CVE-2019-6548 Hardcoded credentials in GE Communicator
- CVE-2019-6547 Memory corruption in Delta Industrial Automation CNCSoft
- CVE-2019-6546 Path traversal in GE Communicator
- CVE-2019-6545 Code injection in AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
- CVE-2019-6544 Privilege escalation in GE Communicator
- CVE-2019-6543 Missing authorization in AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
- CVE-2019-6542 Missing authorization in Datagate MK2
- CVE-2019-6541 Memory corruption in WECON LeviStudioU
- CVE-2019-6540 Medtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information
- CVE-2019-6539 Memory corruption in WECON LeviStudioU
- CVE-2019-6538 Medtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control
- CVE-2019-6537 Memory corruption in WECON LeviStudioU
- CVE-2019-6536 Memory corruption in LAquis SCADA
- CVE-2019-6535 Mitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion
- CVE-2019-6534 Other in Sentinel UltraPro
- CVE-2019-6533 Missing authorization in PR100088 Modbus gateway
- CVE-2019-6532 Code injection in FPWIN Pro
- CVE-2019-6531 Information disclosure in PR100088 Modbus gateway
- CVE-2019-6530 Memory corruption in FPWIN Pro
- CVE-2019-6529 Denial of service in PR100088 Modbus gateway
- CVE-2019-6528 Cross-site scripting in PSI GridConnect GmbH (formerly known as PSI Nentec GmbH) Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy.
- CVE-2019-6527 Auth bypass in PR100088 Modbus gateway
- CVE-2019-6526 Information disclosure in IKS, EDS
- CVE-2019-6525 Information disclosure in Wonderware System Platform
- CVE-2019-6524 Auth bypass in Moxa IKS, EDS
- CVE-2019-6523 SQL injection in n/a
- CVE-2019-6522 Information disclosure in Moxa IKS, EDS
- CVE-2019-6521 Auth bypass in n/a
- CVE-2019-6520 Missing authorization in Moxa IKS, EDS
- CVE-2019-6519 Auth bypass in n/a
- CVE-2019-6518 Information disclosure in Moxa IKS, EDS
- CVE-2019-6517 Missing authorization in BD FACSLyric
- CVE-2019-6516 Server-side request forgery in n/a
- CVE-2019-6515 Missing authorization in n/a
- CVE-2019-6514 Cross-site scripting in n/a
- CVE-2019-6513 File upload in n/a
- CVE-2019-6512 Server-side request forgery in n/a
- CVE-2019-6510 Cross-site request forgery in n/a
- CVE-2019-6509 Cross-site request forgery in n/a
- CVE-2019-6508 Cross-site request forgery in n/a
- CVE-2019-6507 Cross-site request forgery in n/a
- CVE-2019-6506 SQL injection in n/a
- CVE-2019-6504 Cross-site scripting in CA Automic Workload Automation
- CVE-2019-6503 Deserialization in n/a
- CVE-2019-6502 Denial of service in n/a
- CVE-2019-6501 Memory corruption in n/a
- CVE-2019-6500 Path traversal in n/a
- CVE-2019-6499 Hardcoded credentials in n/a
- CVE-2019-6498 Memory corruption in n/a
- CVE-2019-6497 SQL injection in n/a
- CVE-2019-6496 Memory corruption in n/a
- CVE-2019-6494 Missing authorization in n/a
- CVE-2019-6493 Information disclosure in n/a
- CVE-2019-6492 Information disclosure in n/a
- CVE-2019-6491 SQL injection in n/a
- CVE-2019-6489 Missing authorization in n/a
- CVE-2019-6488 Denial of service in n/a
- CVE-2019-6487 Command injection in n/a
- CVE-2019-6486 Denial of service in n/a
- CVE-2019-6485 Information disclosure in n/a
- CVE-2019-6481 Auth bypass in n/a
- CVE-2019-6477 TCP-pipelined queries can bypass tcp-clients limit
- CVE-2019-6476 An error in QNAME minimization code can cause BIND to exit with an assertion failure
- CVE-2019-6475 A flaw in mirror zone validity checking can allow zone data to be spoofed
- CVE-2019-6474 A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6473 A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6472 A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate
- CVE-2019-6471 A race condition when discarding malformed packets can cause BIND to exit with an assertion failure
- CVE-2019-6470 dhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND libraries
- CVE-2019-6469 BIND Supported Preview Edition can exit with an assertion failure if ECS is in use
- CVE-2019-6468 BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used