Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 95 of 164.
- CVE-2019-1694 Denial of service in Cisco Adaptive Security Appliance (ASA) Software
- CVE-2019-16935 Cross-site scripting in canonical:ubuntu linux
- CVE-2019-16932 Server-side request forgery in themeisle:visualizer
- CVE-2019-16931 Cross-site scripting in themeisle:visualizer
- CVE-2019-16930 Information disclosure in z.cash:zcash
- CVE-2019-1693 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability
- CVE-2019-16929 Improper Authentication in Auth0.AuthenticationApi
- CVE-2019-16928 Exim Out-of-bounds Write
- CVE-2019-16927 Memory corruption in glyphandcog:xpdf
- CVE-2019-16926 Cross-site scripting in flower project:flower
- CVE-2019-16925 Cross-site scripting in flower project:flower
- CVE-2019-16924 Information disclosure in nuvending:nulock
- CVE-2019-16923 kkcms 1.3 has jx.php?url= XSS.
- CVE-2019-16922 Information disclosure in salesagility:suitecrm
- CVE-2019-16921 Information disclosure in linux:linux kernel
- CVE-2019-16920 D-Link Multiple Routers Command Injection
- CVE-2019-1692 Information disclosure in Cisco Application Policy Infrastructure Controller (APIC)
- CVE-2019-16919 Missing authorization in linuxfoundation:harbor
- CVE-2019-16917 SQL injection in wikidsystems:two factor authentication enterprise server
- CVE-2019-16915 Path traversal in netgate:pfsense
- CVE-2019-16914 Cross-site scripting in netgate:pfsense
- CVE-2019-16913 Misconfiguration in pcprotect:antivirus
- CVE-2019-16910 Weak cryptography in arm:mbed crypto
- CVE-2019-1691 Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability
- CVE-2019-16909 Missing authorization in infosysta:in-app \& desktop notifications
- CVE-2019-16908 Information disclosure in infosysta:in-app \& desktop notifications
- CVE-2019-16907 Missing authorization in infosysta:in-app \& desktop notifications
- CVE-2019-16906 Missing authorization in infosysta:in-app \& desktop notifications
- CVE-2019-16905 Integer overflow in netapp:cloud backup
- CVE-2019-16904 TeamPass Cross-site Scripting (XSS) vulnerability
- CVE-2019-16903 Path traversal in plutinosoft:platinum
- CVE-2019-16902 Path traversal in reputeinfosystems:arforms
- CVE-2019-16901 Other in advantech:webaccess\/hmi designer
- CVE-2019-16900 Memory corruption in advantech:webaccess\/hmi designer
- CVE-2019-1690 Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability
- CVE-2019-16899 Memory corruption in advantech:webaccess\/hmi designer
- CVE-2019-16897 Privilege escalation in k7computing:k7 antivirus premium
- CVE-2019-16896 Privilege escalation in k7computing:k7 ultimate security
- CVE-2019-16894 SQL injection in inoideas:inoerp
- CVE-2019-16893 Missing authorization in tp-link:tp-sg105e firmware
- CVE-2019-16892 Rubyzip denial of service
- CVE-2019-16891 Liferay Portal Allows RCE via Deserialization of a JSON Payload
- CVE-2019-16890 Cross-site scripting in halo:halo
- CVE-2019-1689 Cisco Webex Teams for iOS Arbitrary File Upload Vulnerability
- CVE-2019-16889 Denial of service in ui:ep-r6 firmware
- CVE-2019-16887 Memory corruption in irfanview:irfanview
- CVE-2019-16885 Deserialization in okay-cms:okaycms
- CVE-2019-16884 Incorrect Authorization in runc
- CVE-2019-16882 Use after free in string-interner
- CVE-2019-16881 Use after free in portaudio-rs
- CVE-2019-16880 Double free in linea
- CVE-2019-1688 Cisco Network Assurance Engine CLI Access with Default Password Vulnerability
- CVE-2019-16879 Auth bypass in mysyngeryss:husky rtu 6049-e70 firmware
- CVE-2019-16878 Cross-site scripting in portainer:portainer
- CVE-2019-16877 Missing authorization in portainer:portainer
- CVE-2019-16876 Path traversal in portainer:portainer
- CVE-2019-16874 Missing authorization in portainer:portainer
- CVE-2019-16873 Cross-site scripting in portainer:portainer
- CVE-2019-16872 Missing authorization in portainer:portainer
- CVE-2019-16871 Auth bypass in beckhoff:twincat
- CVE-2019-1687 Denial of service in Cisco Adaptive Security Appliance (ASA) Software
- CVE-2019-16869 HTTP Request Smuggling in Netty
- CVE-2019-16868 Path traversal in emlog:emlog
- CVE-2019-16867 Path traversal in hongcms project:hongcms
- CVE-2019-16866 Memory corruption in canonical:ubuntu linux
- CVE-2019-16865 DOS attack in Pillow when processing specially crafted image files
- CVE-2019-16864 Command injection in enterprisedt:completeftp server
- CVE-2019-16863 Weak cryptography in st:st33tphf20i2c firmware
- CVE-2019-16862 Cross-site scripting in open-emr:openemr
- CVE-2019-16861 Privilege escalation in code42:code42
- CVE-2019-16860 Privilege escalation in code42:code42
- CVE-2019-1686 Cisco ASR 9000 Series Aggregation Services Routers ACL Bypass Vulnerability
- CVE-2019-1685 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
- CVE-2019-1684 Memory corruption in Cisco IP Phone 8800 Series Software
- CVE-2019-1683 Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability
- CVE-2019-1682 Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
- CVE-2019-1681 Cisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability
- CVE-2019-1680 Cisco Webex Business Suite Content Injection Vulnerability
- CVE-2019-16792 HTTP Request Smuggling: Content-Length Sent Twice in Waitress
- CVE-2019-16791 downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver
- CVE-2019-16790 Remote Code Execution in Tiny File Manager
- CVE-2019-1679 Server-side request forgery in Cisco Expressway Series
- CVE-2019-16789 HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers
- CVE-2019-16786 HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
- CVE-2019-16785 HTTP Request Smuggling: LF vs CRLF handling in Waitress
- CVE-2019-16784 Local Privilege Escalation present only on the Windows version of PyInstaller
- CVE-2019-16782 Possible Information Leak / Session Hijack Vulnerability in Rack
- CVE-2019-16781 Stored cross-site scripting (XSS) in WordPress block editor
- CVE-2019-16780 Stored cross-site scripting (XSS) in WordPress block editor
- CVE-2019-1678 Cisco Meeting Server Denial of Service Vulnerability
- CVE-2019-16779 In RubyGem excon, interrupted Persistent Connections May Leak Response Data
- CVE-2019-16778 Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
- CVE-2019-16777 Arbitrary File Overwrite in npm CLI
- CVE-2019-16776 Unauthorized File Access in npm CLI before before version 6.13.3
- CVE-2019-16775 Unauthorized File Access in npm CLI before before version 6.13.3
- CVE-2019-16774 Object injection in cookie driver
- CVE-2019-16772 regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js
- CVE-2019-16771 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria
- CVE-2019-16770 Potential DOS attack in Puma
- CVE-2019-1677 Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability