Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 96 of 164.
- CVE-2019-16769 Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
- CVE-2019-16768 Internal exception message exposure for login action in Sylius
- CVE-2019-16767 In EzMaster before 5.2.11 docker containers were executed with advanced privileges by default
- CVE-2019-16766 2FA bypass in Wagtail through new device path
- CVE-2019-16765 Code injection in vscode-codeql
- CVE-2019-16764 PowAssent is susceptible to denial of service attacks
- CVE-2019-16763 XSS in Pannellum from 2.5.0 through 2.5.4
- CVE-2019-16762 Validator parsing discrepancy due to string encoding in NPM slpjs
- CVE-2019-16761 Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0
- CVE-2019-16760 Cargo prior to Rust 1.26.0 may download the wrong dependency
- CVE-2019-1676 Cisco Meeting Server SIP Processing Denial of Service Vulnerability
- CVE-2019-16759 vBulletin PHP Module Remote Code Execution
- CVE-2019-16758 Path traversal in lexmark:services monitor firmware
- CVE-2019-16755 Deserialization in bmc:myit digital workplace
- CVE-2019-16754 Null dereference in riot-os:riot
- CVE-2019-16753 Weak cryptography in decentralized anonymous payment system project:decentralized anonymous payment system
- CVE-2019-16752 Server-side request forgery in dash:dash core
- CVE-2019-16751 Devise Token Auth vulnerable to Cross-site Scripting
- CVE-2019-1675 Cisco Aironet Active Sensor Static Credentials Vulnerability
- CVE-2019-16748 Memory corruption in wolfssl:wolfssl
- CVE-2019-16747 Memory corruption in matrixssl:matrixssl
- CVE-2019-16746 Memory corruption in canonical:ubuntu linux
- CVE-2019-16745 SQL injection in ebrigade:ebrigade
- CVE-2019-16744 SQL injection in ebrigade:ebrigade
- CVE-2019-16743 SQL injection in ebrigade:ebrigade
- CVE-2019-1674 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability
- CVE-2019-16738 MediaWiki information disclosure
- CVE-2019-16737 Command injection in petwant:pf-103 firmware
- CVE-2019-16736 Memory corruption in petwant:pf-103 firmware
- CVE-2019-16735 Memory corruption in petwant:pf-103 firmware
- CVE-2019-16734 Hardcoded credentials in petwant:pf-103 firmware
- CVE-2019-16733 Command injection in petwant:pf-103 firmware
- CVE-2019-16732 Weak cryptography in petwant:pf-103 firmware
- CVE-2019-16731 Missing authorization in petwant:pf-103 firmware
- CVE-2019-16730 Command injection in petwant:pf-103 firmware
- CVE-2019-1673 Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- CVE-2019-16729 Privilege escalation in canonical:ubuntu linux
- CVE-2019-16728 Cross-Site Scripting in dompurify
- CVE-2019-16725 Joomla! XSS in Default Templates
- CVE-2019-16724 Memory corruption in upredsun:file sharing wizard
- CVE-2019-16723 Missing authorization in cacti:cacti
- CVE-2019-16722 Code injection in zzzcms:zzzphp
- CVE-2019-16721 Cross-site request forgery in 5none:nonecms
- CVE-2019-16720 File upload in zzzcms:zzzphp
- CVE-2019-1672 Cisco Web Security Appliance Decryption Policy Bypass Vulnerability
- CVE-2019-16719 Cross-site request forgery in wtcms project:wtcms
- CVE-2019-16718 Command injection in radare:radare2
- CVE-2019-16717 OX App Suite through 7.10.2 has XSS.
- CVE-2019-16716 Missing authorization in open-xchange:open-xchange appsuite
- CVE-2019-16714 Information disclosure in canonical:ubuntu linux
- CVE-2019-16713 Denial of service in canonical:ubuntu linux
- CVE-2019-16712 Denial of service in imagemagick:imagemagick
- CVE-2019-16711 Denial of service in canonical:ubuntu linux
- CVE-2019-16710 Denial of service in canonical:ubuntu linux
- CVE-2019-1671 Cisco Firepower Management Center Cross-Site Scripting Vulnerability
- CVE-2019-16709 Denial of service in canonical:ubuntu linux
- CVE-2019-16708 Denial of service in canonical:ubuntu linux
- CVE-2019-16707 Memory corruption in fedoraproject:fedora
- CVE-2019-16706 Cross-site request forgery in kkcms project:kkcms
- CVE-2019-16705 Memory corruption in libming:libming
- CVE-2019-16704 Cross-site scripting in phpmywind:phpmywind
- CVE-2019-16703 Cross-site scripting in phpmywind:phpmywind
- CVE-2019-16702 Memory corruption in integard pro project:integard pro
- CVE-2019-16701 Command injection in netgate:pfsense
- CVE-2019-16700 slub_events for Typo3 Arbitrary File Upload
- CVE-2019-1670 Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability
- CVE-2019-16699 sr_freecap for Typo3 RCE Vulnerability
- CVE-2019-16698 direct_mail for Typo3 sensitive data exposure
- CVE-2019-16696 SQL injection in phpipam:phpipam
- CVE-2019-16695 SQL injection in phpipam:phpipam
- CVE-2019-16694 SQL injection in phpipam:phpipam
- CVE-2019-16693 SQL injection in phpipam:phpipam
- CVE-2019-16692 SQL injection in phpipam:phpipam
- CVE-2019-1669 Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability
- CVE-2019-16688 Dolibarr stored Cross-site Scripting in an Email Template section
- CVE-2019-16687 Dolibarr Cross-site Scripting in a User Profile in a Signature section
- CVE-2019-16686 Dolibarr Cross-site Scripting in a User Note section
- CVE-2019-16685 Dolibarr stored Cross-site Scripting vulnerability
- CVE-2019-16684 Cross-site scripting in xoops:xoops
- CVE-2019-16683 Cross-site scripting in xoops:xoops
- CVE-2019-16682 url_redirect for Typo3 SQLi Vulnerability
- CVE-2019-16681 Other in traveloka:traveloka
- CVE-2019-16680 Path traversal in canonical:ubuntu linux
- CVE-2019-1668 Cisco SocialMiner Chat Feed Cross-Site Scripting Vulnerability
- CVE-2019-16679 Path traversal in gilacms:gila cms
- CVE-2019-16678 Cross-site request forgery in yzmcms:yzmcms
- CVE-2019-16677 Cross-site request forgery in idreamsoft:icms
- CVE-2019-16676 Improper Input Validation in simple_form
- CVE-2019-16675 Memory corruption in phoenixcontact:config\+
- CVE-2019-16674 Weak cryptography in weidmueller:ie-sw-pl08m-6tx-2sc firmware
- CVE-2019-16673 Information disclosure in weidmueller:ie-sw-pl08m-6tx-2sc firmware
- CVE-2019-16672 Information disclosure in weidmueller:ie-sw-pl08m-6tx-2sc firmware
- CVE-2019-16671 Denial of service in weidmueller:ie-sw-pl08m-6tx-2sc firmware
- CVE-2019-16670 Auth bypass in weidmueller:ie-sw-pl08m-6tx-2sc firmware
- CVE-2019-1667 Cisco HyperFlex Arbitrary Statistics Write Vulnerability
- CVE-2019-16669 Pagekit User enumeration
- CVE-2019-16667 Cross-site request forgery in netgate:pfsense
- CVE-2019-16665 Cross-site scripting in thinksaas:thinksaas
- CVE-2019-16664 Cross-site scripting in thinksaas:thinksaas
- CVE-2019-16663 Command injection in rconfig:rconfig