Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 89 of 164.
- CVE-2019-17639 Memory corruption in Eclipse OpenJ9
- CVE-2019-17638 Operation on a Resource after Expiration or Release in Jetty Server
- CVE-2019-17637 XML external entity in Eclipse Web Tools Platform
- CVE-2019-17636 Insufficient Verification of Data Authenticity in Eclipse Theia
- CVE-2019-17635 Deserialization in Eclipse Memory Analyzer
- CVE-2019-17634 Cross-site scripting in Eclipse Memory Analyzer
- CVE-2019-17633 Cross-site request forgery in Eclipse Che
- CVE-2019-17632 Unescaped exception messages in error responses in Jetty
- CVE-2019-17631 Missing authorization in Eclipse OpenJ9
- CVE-2019-17630 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2019-1763 Cisco IP Phone 8800 Series Authorization Bypass Vulnerability
- CVE-2019-17629 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2019-17627 Auth bypass in yalehome:yale bluetooth key
- CVE-2019-17626 XML Injection in ReportLab
- CVE-2019-17625 Rambox RCE Vulnerability
- CVE-2019-17624 Memory corruption in x.org:x server
- CVE-2019-17621 D-Link DIR-859 Router Command Execution
- CVE-2019-1762 Cisco IOS and IOS XE Software Information Disclosure Vulnerability
- CVE-2019-17613 Code injection in qibosoft:qibosoft
- CVE-2019-17612 SQL injection in 74cms:74cms
- CVE-2019-17611 Cross-site scripting in hongcms project:hongcms
- CVE-2019-17610 Cross-site scripting in hongcms project:hongcms
- CVE-2019-1761 Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability
- CVE-2019-17609 Cross-site scripting in hongcms project:hongcms
- CVE-2019-17608 Cross-site scripting in hongcms project:hongcms
- CVE-2019-17607 Cross-site scripting in hongcms project:hongcms
- CVE-2019-17606 hexo-admin plugin for Node.js XSS Vulnerability
- CVE-2019-17605 Business logic in eyecomms:eyecms
- CVE-2019-17604 Missing authorization in eyecomms:eyecms
- CVE-2019-17603 Memory corruption in asus:aura sync
- CVE-2019-17602 SQL injection in zohocorp:manageengine opmanager
- CVE-2019-17601 Memory corruption in minishare project:minishare
- CVE-2019-17600 Information disclosure in intelbras:iwr 1000n firmware
- CVE-2019-1760 Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability
- CVE-2019-17599 Cross-site scripting in expresstech:quiz and survey master
- CVE-2019-17598 Play Framework Inadequate Encryption Strength vulnerability
- CVE-2019-17596 Denial of service in arista:cloudvision portal
- CVE-2019-17595 Memory corruption in invisible-island:ncurses
- CVE-2019-17594 Memory corruption in invisible-island:ncurses
- CVE-2019-17593 Cross-site request forgery in jizhicms:jizhicms
- CVE-2019-17592 Regular Expression Denial of Service in csv-parse
- CVE-2019-17590 Cross-site request forgery in csrf magic project:csrf magic
- CVE-2019-1759 Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability
- CVE-2019-17584 Hardcoded credentials in meinbergglobal:syncbox\/ptpv2 firmware
- CVE-2019-17583 Denial of service in idreamsoft:icms
- CVE-2019-17582 Use after free in libzip:libzip
- CVE-2019-17581 Cross-site scripting in dormsystem project:dormsystem
- CVE-2019-17580 SQL injection in dormsystem project:dormsystem
- CVE-2019-1758 Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability
- CVE-2019-17579 Cross-site scripting in sonarsource:sonarqube
- CVE-2019-17578 Dolibarr Cross-site Scripting vulnerability
- CVE-2019-17577 Dolibarr Cross-site Scripting via outgoing email setup feature
- CVE-2019-17576 Dolibarr Cross-site Scripting via outgoing email setup feature
- CVE-2019-17575 File upload in wbce:wbce cms
- CVE-2019-17574 Missing authorization in code-atlantic:popup maker
- CVE-2019-17573 Reflected Cross-Site Scripting in Apache CXF
- CVE-2019-17572 Directory traversal in Apache RocketMQ
- CVE-2019-17571 Deserialization of Untrusted Data in Log4j
- CVE-2019-17570 Insecure Deserialization in Apache XML-RPC
- CVE-2019-1757 Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability
- CVE-2019-17569 Potential HTTP request smuggling in Apache Tomcat
- CVE-2019-17567 mod_proxy_wstunnel tunneling of non Upgraded connections
- CVE-2019-17566 Server-side request forgery (SSRF) in Apache Batik
- CVE-2019-17565 Other in Apache Traffic Server
- CVE-2019-17564 Deserialization of Untrusted Data in Apache Dubbo
- CVE-2019-17563 In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
- CVE-2019-17562 Command injection in Apache CloudStack
- CVE-2019-17561 Improper Verification of Cryptographic Signature in Apache Netbeans
- CVE-2019-17560 Improper Certificate Validation in Apache Netbeans
- CVE-2019-1756 Cisco IOS XE Software Command Injection Vulnerability
- CVE-2019-17559 Other in Apache Traffic Server
- CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution
- CVE-2019-17557 Cross-site scripting in Apache Syncome EndUser
- CVE-2019-17556 Deserialization of Untrusted Data in Apache Olingo
- CVE-2019-17555 Improper input validation in Apache Olingo
- CVE-2019-17554 Improper Restriction of XML External Entity Reference in Apache Olingo
- CVE-2019-17553 SQL injection in metinfo:metinfo
- CVE-2019-17552 SQL injection in idreamsoft:icms
- CVE-2019-17551 Cross-site scripting in apakgroup:wholesale floorplanning finance
- CVE-2019-17550 Cross-site scripting in adenion:blog2social
- CVE-2019-1755 Cisco IOS XE Software Command Injection Vulnerability
- CVE-2019-17549 Denial of service in eset:cyber security
- CVE-2019-17547 Use after free in imagemagick:imagemagick
- CVE-2019-17546 Integer overflow in libtiff:libtiff
- CVE-2019-17545 Memory corruption in debian:debian linux
- CVE-2019-17544 Memory corruption in canonical:ubuntu linux
- CVE-2019-17543 Memory corruption in lz4 project:lz4
- CVE-2019-17542 Memory corruption in canonical:ubuntu linux
- CVE-2019-17541 Use after free in imagemagick:imagemagick
- CVE-2019-17540 Memory corruption in debian:debian linux
- CVE-2019-1754 Cisco IOS XE Software Privilege Escalation Vulnerability
- CVE-2019-17539 Null dereference in canonical:ubuntu linux
- CVE-2019-17538 Path traversal in jnoj:jiangnan online judge
- CVE-2019-17537 Path traversal in jnoj:jiangnan online judge
- CVE-2019-17536 File upload in gilacms:gila cms
- CVE-2019-17535 Cross-site scripting in gilacms:gila cms
- CVE-2019-17534 Use after free in libvips:libvips
- CVE-2019-17533 Memory corruption in debian:debian linux
- CVE-2019-17532 Denial of service in belkin:wemo switch 28b firmware
- CVE-2019-17531 jackson-databind polymorphic typing issue