Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 82 of 164.
- CVE-2019-19041 Command injection in xorur:lpar2rrd
- CVE-2019-19040 Reflected Cross site scripting (XSS) in kairosdb
- CVE-2019-1904 Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability
- CVE-2019-19039 Information disclosure in canonical:ubuntu linux
- CVE-2019-19037 Null dereference in linux:linux kernel
- CVE-2019-19036 Null dereference in linux:linux kernel
- CVE-2019-19035 Memory corruption in jhead project:jhead
- CVE-2019-19034 Command injection in zohocorp:manageengine assetexplorer
- CVE-2019-19033 Hardcoded credentials in jalios:jcms
- CVE-2019-19032 XML external entity in xmlblueprint:xmlblueprint
- CVE-2019-19031 XML external entity in edit-xml:easy xml editor
- CVE-2019-19030 Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)
- CVE-2019-1903 Cisco Security Manager XML Entity Expansion Vulnerability
- CVE-2019-19029 SQL Injection in Cloud Native Computing Foundation Harbor
- CVE-2019-19026 SQL Injection in Cloud Native Computing Foundation Harbor
- CVE-2019-19025 Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor
- CVE-2019-19023 Privilege Escalation in Cloud Native Computing Foundation Harbor
- CVE-2019-19022 Information disclosure in iterm2:iterm2
- CVE-2019-19021 Hardcoded credentials in titanhq:webtitan
- CVE-2019-19020 File upload in titanhq:webtitan
- CVE-2019-19019 Supply chain in titanhq:webtitan
- CVE-2019-19018 Information disclosure in titanhq:webtitan
- CVE-2019-19017 Hardcoded credentials in titanhq:webtitan
- CVE-2019-19016 SQL injection in titanhq:webtitan
- CVE-2019-19015 Missing authorization in titanhq:webtitan
- CVE-2019-19014 Privilege escalation in titanhq:webtitan
- CVE-2019-19013 Pagekit File Upload vulnerability
- CVE-2019-19012 Integer overflow in debian:debian linux
- CVE-2019-19011 Null dereference in miniupnp project:ngiflib
- CVE-2019-19010 Eval injection in Supybot/Limnoria
- CVE-2019-1901 Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability
- CVE-2019-19007 Information disclosure in intelbras:iwr 3000n firmware
- CVE-2019-19006 Sangoma FreePBX Improper Authentication
- CVE-2019-19005 Memory corruption in autotrace project:autotrace
- CVE-2019-19004 Integer overflow in autotrace project:autotrace
- CVE-2019-19003 ABB eSOMS: HTTPOnly flag not set
- CVE-2019-19002 ABB eSOMS X-XSS-Protection not enabled
- CVE-2019-19001 eSOMS X-FrameOption
- CVE-2019-19000 eSOMS Cachecontrol (Pragma) HTTP Header
- CVE-2019-1900 Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability
- CVE-2019-18998 Asset Suite Direct Object Reference Access
- CVE-2019-18997 PB610 HMISimulator provides interface with access to arbitrary files
- CVE-2019-18996 ABB PB610 HMIStudio accepts malicious DLL file in an application
- CVE-2019-18995 ABB PB610 HMISimulator does not check content-length of the HTTP request
- CVE-2019-18994 ABB PB610 HMIStudio crashes after launching an empty *.JPR application file
- CVE-2019-18993 Cross-site scripting in openwrt:openwrt
- CVE-2019-18992 Cross-site scripting in openwrt:openwrt
- CVE-2019-18991 Auth bypass in qualcomm:atheros ar9132 firmware
- CVE-2019-18990 Auth bypass in realtek:rtl8192er firmware
- CVE-2019-1899 Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability
- CVE-2019-18989 Auth bypass in mediatek:mt7620n firmware
- CVE-2019-18988 TeamViewer Desktop Bypass Remote Login
- CVE-2019-18987 Information disclosure in mediawiki:abusefilter
- CVE-2019-18986 Pimcore Discloses Usernames In Use
- CVE-2019-18985 Pimcore 2FA Vulnerable to Brute Forcing
- CVE-2019-18982 Pimcore Cross-site Scripting (XSS) vulnerability
- CVE-2019-18981 Pimcore Access Control Issues
- CVE-2019-18980 Missing authorization in philips:taolight smart wi-fi wiz connected led bulb 9290022656 firmware
- CVE-2019-1898 Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability
- CVE-2019-18979 Privilege escalation in claranova:adaware antivirus
- CVE-2019-18978 The rack-cors rubygem may allow directory traveral
- CVE-2019-18976 Null dereference in debian:debian linux
- CVE-2019-1897 Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability
- CVE-2019-18960 Memory corruption in amazon:firecracker
- CVE-2019-1896 Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability
- CVE-2019-18958 Information disclosure in gonitro:nitro pro
- CVE-2019-18957 Cross-site scripting in microstrategy:microstrategy library
- CVE-2019-18956 Deserialization in divisait:dv2eemvc
- CVE-2019-18955 Cross-site scripting in lansweeper:lansweeper
- CVE-2019-18954 Pomelo allows external control of critical state data
- CVE-2019-18952 File upload in sibsoft:xfilesharing
- CVE-2019-18951 Path traversal in sibsoft:xfilesharing
- CVE-2019-1895 Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability
- CVE-2019-18949 Security feature bypass in snowhaze:snowhaze
- CVE-2019-18948 Denial of service in arista:eos
- CVE-2019-18947 information disclosure
- CVE-2019-18946 Session fixation
- CVE-2019-18945 privilege escalation
- CVE-2019-18944 Cross-site scripting in Solutions Business Manager
- CVE-2019-18943 XML External Entity processing
- CVE-2019-18942 Stored cross site scripting
- CVE-2019-1894 Cisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability
- CVE-2019-18939 Code injection in eq-3:homematic ccu2 firmware
- CVE-2019-18938 Missing authorization in eq-3:homematic ccu2 firmware
- CVE-2019-18937 Code injection in eq-3:homematic ccu2 firmware
- CVE-2019-18936 Denial of service in bloq:univalue
- CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data
- CVE-2019-18934 Command injection in fedoraproject:fedora
- CVE-2019-18933 Business logic in zulip:zulip server
- CVE-2019-18932 Race condition in opensuse:backports sle
- CVE-2019-18931 Memory corruption in western digital:my cloud ex2 ultra firmware
- CVE-2019-18930 Memory corruption in western digital:my cloud ex2 ultra firmware
- CVE-2019-1893 Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
- CVE-2019-18929 Memory corruption in western digital:my cloud ex2 ultra firmware
- CVE-2019-18928 Auth bypass in cyrus:imap
- CVE-2019-18926 Cross-site scripting in systematicinc:iris standards management
- CVE-2019-18925 Missing authorization in systematic:iris webforms
- CVE-2019-18924 Path traversal in systematic:iris webforms
- CVE-2019-18923 Cross-site scripting in go-camo project:go-camo
- CVE-2019-18922 Path traversal in alliedtelesis:at-gs950\/8 firmware