Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 83 of 164.
- CVE-2019-1892 Cisco Small Business Series Switches Memory Corruption Vulnerability
- CVE-2019-18917 Security feature bypass in HP ENVY 5000 All-in-One Printer series (M2U85A - M2U85B, M2U91A - M2U94B, Z4A54A - Z4A74A); HP DeskJet Ink Advantage 5000 All-in-One Printer series (M2U86A - M2U89B)
- CVE-2019-18916 Privilege escalation in HP Color LaserJet Pro MFP M277 printers
- CVE-2019-18915 Privilege escalation in HP System Event Utility
- CVE-2019-18914 Cross-site scripting in HP Color LaserJet Managed Printers, HP Color LaserJet Enterprise Printers
- CVE-2019-18913 Security feature bypass in HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection.
- CVE-2019-18912 Other in HP LaserJet Enterprise Printers
- CVE-2019-18910 Command injection in ThinPro Linux
- CVE-2019-1891 Cisco Small Business Series Switches HTTP Denial of Service Vulnerability
- CVE-2019-18909 Command injection in ThinPro Linux
- CVE-2019-18906 cryptctl: client side password hashing is equivalent to clear text password storage
- CVE-2019-18905 Deprecated functionality in autoyast2 automatically imports gpg keys without checking them
- CVE-2019-18904 Migrations requests can cause DoS on rmt
- CVE-2019-18903 wicked: Use-after-free when receiving invalid DHCP6 IA_PD option
- CVE-2019-18902 wicked: Use-after-free when receiving invalid DHCP6 client options
- CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files
- CVE-2019-18900 libzypp stores cookies world readable
- CVE-2019-1890 Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
- CVE-2019-18899 apt-cacher-ng insecure use of /run/apt-cacher-ng
- CVE-2019-18898 trousers: Local privilege escalation from tss to root
- CVE-2019-18897 Local privilege escalation from user salt to root
- CVE-2019-18895 Misconfiguration in scanguard:scanguard antivirus
- CVE-2019-18894 Command injection in avast:premium security
- CVE-2019-18893 Cross-site scripting in avast:secure browser
- CVE-2019-18890 SQL injection in debian:debian linux
- CVE-2019-1889 Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
- CVE-2019-18889 Symfony Unsafe Cache Serialization Could Enable RCE
- CVE-2019-18888 Argument injection in a MimeTypeGuesser in Symfony
- CVE-2019-18887 Symfony Http-Kernel has non-constant time comparison in UriSigner
- CVE-2019-18886 User enumeration leak using switch user functionality in Symfony
- CVE-2019-18885 Null dereference in linux:linux kernel
- CVE-2019-18884 Cross-site request forgery in fairsketch:rise - ultimate project manager
- CVE-2019-18883 Cross-site scripting in lavalite:lavalite
- CVE-2019-18882 Cross-site scripting in wso2:identity server
- CVE-2019-18881 Cross-site scripting in wso2:identity server
- CVE-2019-1888 Cisco Unified Contact Center Express Privilege Escalation Vulnerability
- CVE-2019-18874 Double Free in psutil
- CVE-2019-18873 Cross-site scripting in fudforum:fudforum
- CVE-2019-18872 Weak cryptography in blaauwproducts:remote kiln control
- CVE-2019-18871 Path traversal in blaauwproducts:remote kiln control
- CVE-2019-18870 Path traversal in blaauwproducts:remote kiln control
- CVE-2019-1887 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
- CVE-2019-18869 Code injection in blaauwproducts:remote kiln control
- CVE-2019-18868 Information disclosure in blaauwproducts:remote kiln control
- CVE-2019-18867 Information disclosure in blaauwproducts:remote kiln control
- CVE-2019-18866 SQL injection in blaauwproducts:remote kiln control
- CVE-2019-18865 Information disclosure in blaauwproducts:remote kiln control
- CVE-2019-18864 Information disclosure in blaauwproducts:remote kiln control
- CVE-2019-18863 Weak cryptography in mitel:6863i firmware
- CVE-2019-18862 Privilege escalation in gnu:mailutils
- CVE-2019-18860 Other in canonical:ubuntu linux
- CVE-2019-1886 Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability
- CVE-2019-18859 Cross-site scripting in digi:anywhereusb\/14 firmware
- CVE-2019-18858 Memory corruption in codesys:control for beaglebone
- CVE-2019-18857 XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
- CVE-2019-18856 Denial of service in drupal:svg sanitizer
- CVE-2019-18855 Denial of service in 10up:safe svg
- CVE-2019-18854 Denial of service in 10up:safe svg
- CVE-2019-18853 Denial of service in imagemagick:imagemagick
- CVE-2019-18852 Hardcoded credentials in dlink:dir-600 b1 firmware
- CVE-2019-18850 Information disclosure in trustedsec:trevorc2
- CVE-2019-1885 Cisco Integrated Management Controller Command Injection Vulnerability
- CVE-2019-18849 Memory corruption in canonical:ubuntu linux
- CVE-2019-18848 JSON-jwt Gem lacked element count during splitting of JWE string
- CVE-2019-18847 Security feature bypass in akamai:enterprise application access
- CVE-2019-18846 OX App Suite through 7.10.2 allows SSRF.
- CVE-2019-18845 Privilege escalation in patriotmemory:viper rgb firmware
- CVE-2019-18844 Denial of service in linux:acrn
- CVE-2019-18842 Cross-site scripting in usriot:usr-wifi232-g2 firmware
- CVE-2019-18841 Prototype Pollution in chartkick
- CVE-2019-18840 Memory corruption in wolfssl:wolfssl
- CVE-2019-1884 Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability
- CVE-2019-18839 Cross-site scripting in fudforum:fudforum
- CVE-2019-18838 Null dereference in envoyproxy:envoy
- CVE-2019-18837 Path traversal in crun
- CVE-2019-18836 Denial of service in envoyproxy:envoy
- CVE-2019-18835 Improper Verification of Cryptographic Signature in matrix-synapse
- CVE-2019-18834 Cross-site scripting in woocommerce:subscriptions
- CVE-2019-18833 Weak cryptography in barco:clickshare button r9861500d01 firmware
- CVE-2019-18832 Weak cryptography in barco:clickshare button r9861500d01 firmware
- CVE-2019-18831 Hardcoded credentials in barco:clickshare cs-100 firmware
- CVE-2019-18830 Command injection in barco:clickshare cs-100 firmware
- CVE-2019-1883 Cisco Integrated Management Controller CLI Command Injection Vulnerability
- CVE-2019-18829 Security feature bypass in barco:clickshare button r9861500d01 firmware
- CVE-2019-18828 Hardcoded credentials in barco:clickshare cs-100 firmware
- CVE-2019-18827 Security feature bypass in barco:clickshare cs-100 firmware
- CVE-2019-18826 Security feature bypass in barco:clickshare cs-100 firmware
- CVE-2019-18825 Weak cryptography in barco:clickshare cs-100 huddle firmware
- CVE-2019-18824 Security feature bypass in barco:clickshare button r9861500d01 firmware
- CVE-2019-18823 Auth bypass in debian:debian linux
- CVE-2019-18822 Privilege escalation in eleveo:call recording
- CVE-2019-18821 Memory corruption in eximioussoft:logo designer
- CVE-2019-18820 Memory corruption in eximioussoft:logo designer
- CVE-2019-1882 Cisco Industrial Network Director Stored Cross-Site Scripting Vulnerability
- CVE-2019-18819 Memory corruption in eximioussoft:logo designer
- CVE-2019-18818 Strapi allows unauthenticated attacker to reset admin password without valid reset token
- CVE-2019-18817 Istio vulnerable to denial of service
- CVE-2019-18816 Cross-site scripting in popojicms:popojicms
- CVE-2019-18815 Open redirect in popojicms:popojicms
- CVE-2019-18814 Use after free in linux:linux kernel