Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 48 of 164.
- CVE-2019-3819 Denial of service in kernel:
- CVE-2019-3818 Weak cryptography in kube-rbac-proxy
- CVE-2019-3817 Use after free in libcomps
- CVE-2019-3816 Path traversal in openwsman
- CVE-2019-3815 Denial of service in systemd
- CVE-2019-3814 Auth bypass in dovecot
- CVE-2019-3813 Memory corruption in Spice
- CVE-2019-3812 Memory corruption in qemu
- CVE-2019-3811 Security feature bypass in sssd
- CVE-2019-3810 Moodle XSS Vulnerability
- CVE-2019-3809 Moodle Blind SSRF Risk in /badges/mybackpack.php
- CVE-2019-3808 Moodle XSS Vulnerability
- CVE-2019-3807 Security feature bypass in pdns-recursor
- CVE-2019-3806 Security feature bypass in pdns-recursor
- CVE-2019-3805 Privilege escalation in wildfly
- CVE-2019-3804 Denial of service in cockpit
- CVE-2019-3803 Concourse includes token in CLI authentication callback
- CVE-2019-3802 Additional information exposure with Spring Data JPA example matcher
- CVE-2019-3801 Java Projects using HTTP to fetch dependencies
- CVE-2019-3800 CF CLI writes the client id and secret to config file
- CVE-2019-3799 Directory Traversal with spring-cloud-config-server
- CVE-2019-3798 Escalation of Privileges in Cloud Controller
- CVE-2019-3797 Additional information exposure with Spring Data JPA derived queries
- CVE-2019-3795 Insecure Randomness When Using a SecureRandom Instance Constructed by Spring Security
- CVE-2019-3794 UAA - Login app subject to clickjacking attack
- CVE-2019-3793 Invitations Service supports HTTP connections
- CVE-2019-3792 Concourse 5.0.0 SQL Injection vulnerability
- CVE-2019-3790 Ops Manager uaa client issues tokens after refresh token expiration
- CVE-2019-3789 Gorouter allows space developer to hijack route services hosted outside the platform
- CVE-2019-3788 UAA redirect-uri allows wildcard in the subdomain
- CVE-2019-3787 UAA defaults email address to an insecure domain
- CVE-2019-3786 BBR could run arbitrary scripts on deployment VMs
- CVE-2019-3785 Cloud Controller provides signed URL with write authorization to read only user
- CVE-2019-3784 Cloud Foundry Stratos contains a Session Collision Vulnerability
- CVE-2019-3783 Cloud Foundry Stratos Deploys With Public Default Session Store Secret
- CVE-2019-3782 CredHub CLI writes environment variable credentials to disk
- CVE-2019-3781 CF CLI does not sanitize user's password in verbose/trace/debug
- CVE-2019-3780 Cloud Foundry Container Runtime Leaks IAAS Credentials
- CVE-2019-3779 Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD
- CVE-2019-3778 Open Redirect in spring-security-oauth2
- CVE-2019-3777 Apps Manager unverified SSL certs in Cloud Controller proxy
- CVE-2019-3776 Reflected XSS in Pivotal Operations Manager
- CVE-2019-3775 UAA allows users to modify their own email address
- CVE-2019-3774 Spring Batch XML External Entity Injection (XXE)
- CVE-2019-3773 Spring Web Services XML External Entity Injection (XXE)
- CVE-2019-3772 Spring Integration XML External Entity Injection (XXE)
- CVE-2019-3770 Cross-site scripting in Wyse Management Suite
- CVE-2019-3769 Cross-site scripting in Wyse Management Suite
- CVE-2019-3768 XML external entity in RSA Authentication Manager
- CVE-2019-3767 Information disclosure in ImageAssist
- CVE-2019-3766 Auth bypass in Elastic Cloud Storage
- CVE-2019-3765 Misconfiguration in Avamar
- CVE-2019-3764 Missing authorization in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2019-3763 Information disclosure in RSA Identity Governance and Lifecycle
- CVE-2019-3762 Security feature bypass in Data Protection Central
- CVE-2019-3761 Cross-site scripting in RSA Identity Governance and Lifecycle
- CVE-2019-3760 SQL injection in RSA Identity Governance and Lifecycle
- CVE-2019-3759 Code injection in RSA Identity Governance and Lifecycle
- CVE-2019-3758 Auth bypass in RSA Archer
- CVE-2019-3756 Information disclosure in RSA Archer
- CVE-2019-3754 Cross-site scripting in Unity Operating Environment
- CVE-2019-3753 Information disclosure in PowerConnect M8024-K
- CVE-2019-3752 XML external entity in Avamar
- CVE-2019-3751 Weak cryptography in Dell EMC Enterprise Copy Data Management (eCDM)
- CVE-2019-3750 Other in Dell Command Update (DCU)
- CVE-2019-3749 Path traversal in Dell Command Update (DCU)
- CVE-2019-3747 Cross-site scripting in Integrated Data Protection Appliance
- CVE-2019-3746 Auth bypass in Integrated Data Protection Appliance
- CVE-2019-3745 Privilege escalation in Dell Encryption Enterprise
- CVE-2019-3744 Race condition in Alienware Digital Delivery
- CVE-2019-3742 Deserialization in Alienware Digital Delivery
- CVE-2019-3741 Information disclosure in Unity
- CVE-2019-3740 Weak cryptography in RSA BSAFE Crypto-J
- CVE-2019-3739 Weak cryptography in RSA BSAFE Crypto-J
- CVE-2019-3738 Weak cryptography in RSA BSAFE Crypto-J
- CVE-2019-3737 Dell EMC Avamar Security Update for ADMe Web UI Vulnerability
- CVE-2019-3736 Weak cryptography in Integrated Data Protection Appliance
- CVE-2019-3735 Privilege escalation in Dell SupportAssist for Business PCs
- CVE-2019-3734 Missing authorization in Unity
- CVE-2019-3733 Information disclosure in RSA BSAFE Crypto-C Micro Edition
- CVE-2019-3732 Weak cryptography in RSA BSAFE Crypto-C Micro Edition
- CVE-2019-3731 Weak cryptography in RSA BSAFE Crypto-C Micro Edition
- CVE-2019-3730 Weak cryptography in RSA BSAFE MES
- CVE-2019-3729 Memory corruption in RSA BSAFE MES
- CVE-2019-3728 Memory corruption in RSA BSAFE Crypto-C Micro Edition
- CVE-2019-3727 OS command injection vulnerability
- CVE-2019-3726 Other in Dell Client Platforms: Dell Update Packages (DUP) Framework file
- CVE-2019-3725 Command Injection vulnerability
- CVE-2019-3724 Authorization Bypass VulnerabilityRSA Netwitness Platform
- CVE-2019-3723 Web Parameter Tampering Vulnerability
- CVE-2019-3722 XML External Entity (XXE) Injection Vulnerability
- CVE-2019-3721 Improper Range Header Processing Vulnerability
- CVE-2019-3720 Directory Traversal Vulnerability
- CVE-2019-3719 Code injection in SupportAssist Client
- CVE-2019-3718 Cross-site request forgery in SupportAssist Client
- CVE-2019-3717 Security feature bypass in Dell Client Commercial and Consumer platforms
- CVE-2019-3716 Information Exposure Vulnerability
- CVE-2019-3715 Information Exposure Vulnerability
- CVE-2019-3712 DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability
- CVE-2019-3711 DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability