Vulnerabilities published in 2019
16,385 vulnerabilities were published in 2019: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 97 of 164.
- CVE-2019-16662 Command injection in rconfig:rconfig
- CVE-2019-16661 Cross-site scripting in digimute:ogma cms
- CVE-2019-16660 Cross-site request forgery in joyplus project:joyplus
- CVE-2019-1666 Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability
- CVE-2019-16659 Cross-site request forgery in tuzicms:tuzicms
- CVE-2019-16658 Cross-site request forgery in tuzicms:tuzicms
- CVE-2019-16657 Cross-site scripting in tuzicms:tuzicms
- CVE-2019-16656 Code injection in joyplus project:joyplus
- CVE-2019-16655 Misconfiguration in joyplus project:joyplus
- CVE-2019-16653 Privilege escalation in geniusbytes:genius server
- CVE-2019-16652 Command injection in geniusbytes:genius server
- CVE-2019-16651 Information disclosure in virginmedia:super hub 3 firmware
- CVE-2019-16650 Auth bypass in supermicro:a1sa2-2750f firmware
- CVE-2019-1665 Cisco Hyperflex Stored Cross-Site Scripting Vulnerability
- CVE-2019-16649 Weak cryptography in supermicro:a1sa2-2750f firmware
- CVE-2019-16647 Privilege escalation in maxthon:maxthon browser
- CVE-2019-16645 Other in embedthis:goahead
- CVE-2019-16644 SQL injection in tuzicms:tuzicms
- CVE-2019-16643 Cross-site scripting in zrlog:zrlog
- CVE-2019-16642 SQL injection in yejiao:tuzicms
- CVE-2019-16641 Memory corruption in ruijie:eg-2000se firmware
- CVE-2019-16640 File upload in ruijie:eg-2000se firmware
- CVE-2019-1664 Cisco HyperFlex Software Unauthenticated Root Access Vulnerability
- CVE-2019-16639 Missing authorization in ruijie:eg-2000se firmware
- CVE-2019-16638 Weak cryptography in ruijie:eg-2000se firmware
- CVE-2019-1663 Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
- CVE-2019-1662 Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability
- CVE-2019-1661 Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability
- CVE-2019-1660 Cisco TelePresence Management Suite Simple Object Access Protocol Vulnerability
- CVE-2019-1659 Cisco Prime Infrastructure Certificate Validation Vulnerability
- CVE-2019-1658 Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability
- CVE-2019-16576 Improper Authorization in Jenkins Alauda Kubernetes Suport Plugin
- CVE-2019-16575 Cross-Site Request Forgery in Jenkins Alauda Kubernetes Suport Plugin
- CVE-2019-16574 Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins
- CVE-2019-16573 Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery
- CVE-2019-16572 Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file
- CVE-2019-16571 Jenkins RapidDeploy Plugin missing permission check
- CVE-2019-16570 Jenkins RapidDeploy Plugin Cross-Site Request Forgery plugin
- CVE-2019-1657 Cisco AMP Threat Grid API Key Information Disclosure Vulnerability
- CVE-2019-16569 CSRF vulnerability in Jenkins Mantis Plugin
- CVE-2019-16568 Jenkins SCTMExecutor Plugin stores credentials in plain text
- CVE-2019-16567 Jenkins Team Concert Plugin missing permission check
- CVE-2019-16566 Jenkins Team Concert Plugin missing permission check
- CVE-2019-16565 Jenkins Team Concert Plugin cross-site request forgery vulnerability
- CVE-2019-16564 Jenkins Pipeline Aggregator View Plugin stored XSS vulnerability
- CVE-2019-16563 Cross site scripting in Jenkins Mission Control Plugin
- CVE-2019-16562 Jenkins buildgraph-view Plugin vulnerable to stored Cross-site Scripting
- CVE-2019-16561 SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin
- CVE-2019-16560 Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
- CVE-2019-1656 Cisco Enterprise NFV Infrastructure Software Linux Shell Access Vulnerability
- CVE-2019-16559 Jenkins WebSphere Deployer Plugin missing permission check
- CVE-2019-16558 Improper Certificate Validation in Jenkins Spira Importer Plugin
- CVE-2019-16557 Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials
- CVE-2019-16556 Jenkins Rundeck Plugin stored credentials in plain text
- CVE-2019-16555 Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin
- CVE-2019-16554 Missing permission check in Jenkins Build Failure Analyzer Plugin
- CVE-2019-16553 Cross-Site Request Forgery in Jenkins Build Failure Analyzer Plugin
- CVE-2019-16552 Missing permission check in Jenkins Gerrit Trigger Plugin
- CVE-2019-16551 Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin
- CVE-2019-16550 Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin
- CVE-2019-1655 Cisco Webex Meetings Server Cross-Site Scripting Vulnerability
- CVE-2019-16549 Jenkins Maven Release Plug-in Plugin XXE vulnerability
- CVE-2019-16548 Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability
- CVE-2019-16547 Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
- CVE-2019-16546 Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
- CVE-2019-16545 Jenkins QMetry for JIRA Plugin shows plain text password in configuration form
- CVE-2019-16544 Jenkins QMetry for JIRA Plugin stored credentials in plain text
- CVE-2019-16543 Plaintext Storage in Jenkins Spira Importer Plugin
- CVE-2019-16542 Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials
- CVE-2019-16541 Jenkins JIRA Plugin allows users to select and use credentials with System scope
- CVE-2019-16540 Jenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files
- CVE-2019-1654 Cisco Aironet Series Access Points Development Shell Access Vulnerability
- CVE-2019-16539 Missing permission check in Jenkins Support Core Plugin
- CVE-2019-16538 Incorrect Authorization in Jenkins Script Security Plugin
- CVE-2019-16536 Stack overflow leading to DoS can be triggered by a malicious authenticated client.
- CVE-2019-16535 Memory corruption in ClickHouse
- CVE-2019-16534 Cross-site scripting in draytek:vigor2925 firmware
- CVE-2019-16533 Cross-site scripting in draytek:vigor2925 firmware
- CVE-2019-16532 Other in yzmcms:yzmcms
- CVE-2019-16531 Cross-site request forgery in layerbb:layerbb
- CVE-2019-16530 Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager
- CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure
- CVE-2019-16529 Information disclosure in mediawiki:checkuser
- CVE-2019-16528 Information disclosure in mediawiki:abusefilter
- CVE-2019-16525 Cross-site scripting in checklist:checklist
- CVE-2019-16524 Cross-site scripting in status301:easy fancybox
- CVE-2019-16523 Cross-site scripting in pixelite:events manager
- CVE-2019-16522 Cross-site scripting in eu cookie law project:eu cookie law
- CVE-2019-16521 Cross-site scripting in managewp:broken link checker
- CVE-2019-16520 Cross-site scripting in semperplugins:all in one seo pack
- CVE-2019-1652 Cisco Small Business Routers Improper Input Validation
- CVE-2019-16519 Privilege escalation in eset:cyber security
- CVE-2019-16518 Other in vandyvape:swell kit mod firmware
- CVE-2019-16517 Misconfiguration in connectwise:control
- CVE-2019-16516 Information disclosure in connectwise:control
- CVE-2019-16515 Misconfiguration in connectwise:control
- CVE-2019-16514 File upload in connectwise:control
- CVE-2019-16513 Cross-site request forgery in connectwise:control
- CVE-2019-16512 Cross-site scripting in connectwise:control
- CVE-2019-16511 Path traversal in firegiant:wix toolset