Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 49 of 164.
- CVE-2019-3710 DSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability
- CVE-2019-3709 Cross-Site Scripting Vulnerability while registering vCenter servers
- CVE-2019-3708 Cross-Site Scripting Vulnerability in OVA file upload feature
- CVE-2019-3707 WS-MAN Authentication Bypass Vulnerability
- CVE-2019-3706 Web Interface Authentication Bypass Vulnerability
- CVE-2019-3705 Buffer Overflow Vulnerability
- CVE-2019-3704 Command injection in VNX Control Station in Dell EMC VNX2 OE for File
- CVE-2019-3702 Command injection in lifesize:icon 300 firmware
- CVE-2019-3701 Memory corruption in canonical:ubuntu linux
- CVE-2019-3700 yast: Fallback to DES without configuration in /etc/login.def
- CVE-2019-3699 Local privilege escalation from user privoxy to root
- CVE-2019-3698 nagios cron job allows privilege escalation from user nagios to root
- CVE-2019-3697 Local privilege escalation from user gnump3d to root
- CVE-2019-3696 pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- CVE-2019-3695 pcp: Local privilege escalation from user pcp to root
- CVE-2019-3694 Local privilege escalation from munin to root in the packaging of munin
- CVE-2019-3693 Local privilege escalation from user wwwrun to root in the packaging of mailman
- CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn
- CVE-2019-3691 Local privilege escalation from user munge to root
- CVE-2019-3690 chkstat follows untrusted symbolic links
- CVE-2019-3689 nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
- CVE-2019-3688 squid: /usr/sbin/pinger packaged with wrong permission
- CVE-2019-3687 "easy" permission profile allows everyone execute dumpcap and read all network traffic
- CVE-2019-3686 XSS in distri and version parameter in openQA
- CVE-2019-3685 Missing TLS certificate validation for HTTPS connections in osc
- CVE-2019-3684 susemanager installer creates world-readable swap files
- CVE-2019-3683 keystone_json_assignment backend granted access to any project for users in user-project-map.json
- CVE-2019-3682 Insecure API port exposed to all Master Node guest containers
- CVE-2019-3681 osc: stores downloaded (supposed) RPM in network-controlled filesystem paths
- CVE-2019-3670 Remote Code Execution vulnerability
- CVE-2019-3667 DLL Search Order Hijacking
- CVE-2019-3666 API Abuse Vulnerability
- CVE-2019-3665 Code Injection vulnerability
- CVE-2019-3663 Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability
- CVE-2019-3662 Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability
- CVE-2019-3661 Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CVE-2019-3660 Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests
- CVE-2019-3654 Client Proxy (MCP) - Authentication Bypass vulnerability
- CVE-2019-3653 ESConfig Tool access not controlled
- CVE-2019-3652 ENS code injection in EPSetup.exe
- CVE-2019-3651 Advanced Threat Defense (ATD) - Information Disclosure vulnerability
- CVE-2019-3650 Advanced Threat Defense (ATD) - Information Disclosure vulnerability
- CVE-2019-3649 Advanced Threat Defense (ATD) - Information Disclosure vulnerability
- CVE-2019-3648 Implicit loading of DLLs
- CVE-2019-3646 McAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability
- CVE-2019-3644 MWG scanners updated to address CVE-2019-9517
- CVE-2019-3643 MWG scanners updated to address CVE-2019-9511
- CVE-2019-3641 Exploitation of Authorization in TIE Server
- CVE-2019-3640 Data Loss Prevention - Unprotected Transport of Credentials
- CVE-2019-3639 MWG UI: Cross-Frame Scripting vulnerability
- CVE-2019-3638 Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability
- CVE-2019-3637 Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209
- CVE-2019-3636 File masquerade attack vulnerability in McAfee Total Protection
- CVE-2019-3635 MWG Proxy: Cross-Frame Scripting vulnerability
- CVE-2019-3634 Buffer overflow in DLP Endpoint for Windows
- CVE-2019-3633 Buffer overflow in DLP Endpoint for Windows
- CVE-2019-3632 Directory Traversal vulnerability could lead to elevated privileges
- CVE-2019-3631 Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3630 Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3629 Application protections bypass vulnerability could allow unauthenticated user to impersonate system users
- CVE-2019-3628 Privilege escalation could allow authenticated user to gain access to a core system
- CVE-2019-3622 DLP Endpoint log file redirection to arbitrary locations
- CVE-2019-3621 DLP Endpoint Windows lock screen bypass with physical access
- CVE-2019-3619 Information disclosure in McAfee ePolicy Orchestrator (ePO)
- CVE-2019-3617 Privilege escalation in ToPS for Mac
- CVE-2019-3615 Data Leakage Vulnerability in McAfee Database Security web interface
- CVE-2019-3613 DLL search order hijacking in MA
- CVE-2019-3612 Information disclosure vulnerability in McAfee TIE Server and DXL Platform
- CVE-2019-3610 True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability
- CVE-2019-3606 Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
- CVE-2019-3604 ePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities
- CVE-2019-3602 Cross site scripting vulnerability in McAfee NSM impacting authenticated users
- CVE-2019-3599 McAfee Agent update fixes an Information Disclosure vulnerability
- CVE-2019-3598 McAfee Agent update fixes a vulnerability in handling UDP requests
- CVE-2019-3597 Authentication bypass in McAfee Network Security Manager 9.x
- CVE-2019-3595 DLP Endpoint ePO extension not sanitizing CSV exports
- CVE-2019-3593 Exploitation of Privilege/Trust vulnerability
- CVE-2019-3592 MA for Windows update addresses weak directory permissions
- CVE-2019-3591 DLP Endpoint ePO extension vulnerable to XSS
- CVE-2019-3588 Using VSE to bypass Windows Credentials on Lock screen
- CVE-2019-3587 DLL Search Order Hijacking vulnerability
- CVE-2019-3586 McAfee Endpoint Security firewall not always acting on GTI lookup results
- CVE-2019-3585 VSE Escalation of Privileges through Alert pop-up window
- CVE-2019-3584 Exploitation of Authentication vulnerability
- CVE-2019-3582 McAfee Endpoint Security updates fix a privilege escalation vulnerability
- CVE-2019-3581 McAfee Web Gateway denial of service attack due to Improper Input Validation
- CVE-2019-3580 Path traversal in openrefine:openrefine
- CVE-2019-3579 Information disclosure in mybb:mybb
- CVE-2019-3578 Cross-site scripting in mybb:mybb
- CVE-2019-3577 SQL injection in bijiadao:waimai super cms
- CVE-2019-3576 SQL injection in inxedu project:inxedu
- CVE-2019-3575 sqla-yaml-fixtures is vulnerable to Code Injection
- CVE-2019-3574 Memory corruption in saitoha:libsixel
- CVE-2019-3573 Denial of service in saitoha:libsixel
- CVE-2019-3572 Memory corruption in libming:libming
- CVE-2019-3571 Other in WhatsApp Desktop
- CVE-2019-3570 Memory corruption in HHVM
- CVE-2019-3569 Misconfiguration in HHVM
- CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow
- CVE-2019-3567 Privilege escalation in osquery