CVE List - 2019 / December
Showing 701 - 800 of 1578 CVEs for December 2019 (Page 8 of 16)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2019-18824 | 2019-12-17 | Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support... |
| CVE-2019-18825 | 2019-12-17 | Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices... |
| CVE-2019-18829 | 2019-12-17 | Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support... |
| CVE-2019-18832 | 2019-12-17 | Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials... |
| CVE-2019-18833 | 2019-12-17 | Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure... |
| CVE-2019-19264 | 2019-12-17 | In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters... |
| CVE-2019-19712 | 2019-12-17 | Contao 4.0 through 4.8.5 has Insecure Permissions. Back end users... |
| CVE-2019-19714 | 2019-12-17 | Contao 4.8.4 and 4.8.5 has Improper Encoding or Escaping of... |
| CVE-2019-19745 | 2019-12-17 | Contao 4.0 through 4.8.5 allows PHP local file inclusion. A... |
| CVE-2019-16549 | 2019-12-17 | Jenkins Maven Release Plugin 0.16.1 and earlier does not configure... |
| CVE-2019-16550 | 2019-12-17 | A cross-site request forgery vulnerability in a connection test form... |
| CVE-2019-16551 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin... |
| CVE-2019-16552 | 2019-12-17 | A missing permission check in Jenkins Gerrit Trigger Plugin 2.30.1... |
| CVE-2019-16553 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer... |
| CVE-2019-16554 | 2019-12-17 | A missing permission check in Jenkins Build Failure Analyzer Plugin... |
| CVE-2019-16555 | 2019-12-17 | A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin... |
| CVE-2019-16556 | 2019-12-17 | Jenkins Rundeck Plugin 3.6.5 and earlier stores credentials unencrypted in... |
| CVE-2019-16557 | 2019-12-17 | Jenkins Redgate SQL Change Automation Plugin 2.0.3 and earlier stores... |
| CVE-2019-16558 | 2019-12-17 | Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate... |
| CVE-2019-16559 | 2019-12-17 | A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1... |
| CVE-2019-16560 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin... |
| CVE-2019-16561 | 2019-12-17 | Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with... |
| CVE-2019-16562 | 2019-12-17 | Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the... |
| CVE-2019-16563 | 2019-12-17 | Jenkins Mission Control Plugin 0.9.16 and earlier does not escape... |
| CVE-2019-16564 | 2019-12-17 | Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not... |
| CVE-2019-16565 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Team Concert Plugin... |
| CVE-2019-16566 | 2019-12-17 | A missing permission check in Jenkins Team Concert Plugin 1.3.0... |
| CVE-2019-16567 | 2019-12-17 | A missing permission check in Jenkins Team Concert Plugin 1.3.0... |
| CVE-2019-16568 | 2019-12-17 | Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service... |
| CVE-2019-16569 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26... |
| CVE-2019-16570 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1... |
| CVE-2019-16571 | 2019-12-17 | A missing permission check in Jenkins RapidDeploy Plugin 4.1 and... |
| CVE-2019-16572 | 2019-12-17 | Jenkins Weibo Plugin 1.0.1 and earlier stores credentials unencrypted in... |
| CVE-2019-16573 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Alauda DevOps Pipeline... |
| CVE-2019-16574 | 2019-12-17 | A missing permission check in Jenkins Alauda DevOps Pipeline Plugin... |
| CVE-2019-16575 | 2019-12-17 | A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport... |
| CVE-2019-16576 | 2019-12-17 | A missing permission check in Jenkins Alauda Kubernetes Suport Plugin... |
| CVE-2019-19675 | 2019-12-17 | In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user... |
| CVE-2019-19315 | 2019-12-17 | NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro... |
| CVE-2019-19847 | 2019-12-17 | Libspiro through 20190731 has a stack-based buffer overflow in the... |
| CVE-2019-18956 | 2019-12-17 | Divisa Proxia Suite 9 < 9.12.16, 9.11.19, 9.10.26, 9.9.8, 9.8.43... |
| CVE-2019-18670 | 2019-12-17 | In the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access... |
| CVE-2019-15235 | 2019-12-17 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.864 allows an attacker... |
| CVE-2019-14782 | 2019-12-17 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows... |
| CVE-2019-19848 | 2019-12-17 | An issue was discovered in TYPO3 before 8.7.30, 9.x before... |
| CVE-2019-19850 | 2019-12-17 | An issue was discovered in TYPO3 before 8.7.30, 9.x before... |
| CVE-2019-19849 | 2019-12-17 | An issue was discovered in TYPO3 before 8.7.30, 9.x before... |
| CVE-2019-19634 | 2019-12-17 | class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4,... |
| CVE-2019-19497 | 2019-12-17 | MDaemon Email Server 17.5.1 allows XSS via the filename of... |
| CVE-2019-19241 | 2019-12-17 | In the Linux kernel before 5.4.2, the io_uring feature leads... |
| CVE-2019-0383 | 2019-12-17 | Transaction Management in SAP Treasury and Risk Management (corrected in... |
| CVE-2019-0384 | 2019-12-17 | Transaction Management in SAP Treasury and Risk Management (corrected in... |
| CVE-2019-17334 | 2019-12-17 | TIBCO Spotfire Analyst and Desktop Remote Code Execution Via Shared Files |
| CVE-2019-17335 | 2019-12-17 | TIBCO Spotfire Server Exposes User-Specific Cached Data To Others Users |
| CVE-2019-17336 | 2019-12-17 | TIBCO Spotfire Web Player Potentially Exposes Credentials For Shared Data Sources |
| CVE-2019-17337 | 2019-12-17 | TIBCO Spotfire Server Library Vulnerable to Reflected Cross-Site Scripting |
| CVE-2019-3992 | 2019-12-17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure... |
| CVE-2019-3993 | 2019-12-17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure... |
| CVE-2019-3994 | 2019-12-17 | ELOG 3.1.4-57bea22 and below is affected by a denial of... |
| CVE-2019-3995 | 2019-12-17 | ELOG 3.1.4-57bea22 and below is affected by a denial of... |
| CVE-2019-3996 | 2019-12-17 | ELOG 3.1.4-57bea22 and below can be used as an HTTP... |
| CVE-2019-11657 | 2019-12-17 | Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger... |
| CVE-2019-7481 | 2019-12-17 | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only... |
| CVE-2019-18257 | 2019-12-17 | In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based... |
| CVE-2018-1311 | 2019-12-18 | The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a... |
| CVE-2019-19775 | 2019-12-18 | The image thumbnailing handler in Zulip Server versions 1.9.0 to... |
| CVE-2019-15013 | 2019-12-18 | The WorkflowResource class removeStatus method in Jira before version 7.13.12,... |
| CVE-2019-19845 | 2019-12-18 | In Joomla! before 3.9.14, a missing access check in framework... |
| CVE-2019-19846 | 2019-12-18 | In Joomla! before 3.9.14, the lack of validation of configuration... |
| CVE-2019-19880 | 2019-12-18 | exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger... |
| CVE-2018-11980 | 2019-12-18 | When a fake broadcast/multicast 11w rmf without mmie received, since... |
| CVE-2019-10480 | 2019-12-18 | Out of bound write can happen in WMI firmware event... |
| CVE-2019-10481 | 2019-12-18 | Out of bound access occurs while handling the WMI FW... |
| CVE-2019-10482 | 2019-12-18 | Due to the use of non-time-constant comparison functions there is... |
| CVE-2019-10487 | 2019-12-18 | Buffer over read can happen while parsing SMS OTA messages... |
| CVE-2019-10500 | 2019-12-18 | While processing MT Secondary PDP request, Buffer overflow will happen... |
| CVE-2019-10513 | 2019-12-18 | Possibility of Null pointer access if the SPDM commands are... |
| CVE-2019-10516 | 2019-12-18 | Multiple read overflows in MM while decoding service accept,service reject,attach... |
| CVE-2019-10517 | 2019-12-18 | Memory is being freed up twice when two concurrent threads... |
| CVE-2019-10518 | 2019-12-18 | Use after free of a pointer in iWLAN scenario during... |
| CVE-2019-10525 | 2019-12-18 | Buffer overflow during SIB read when network configures complete sib... |
| CVE-2019-10536 | 2019-12-18 | Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event... |
| CVE-2019-10537 | 2019-12-18 | Improper validation of event buffer extracted from FW response can... |
| CVE-2019-10544 | 2019-12-18 | Improper length check on source buffer to handle userspace data... |
| CVE-2019-10557 | 2019-12-18 | Out-of-bound read in the wireless driver in the Linux kernel... |
| CVE-2019-10564 | 2019-12-18 | Possible OOB issue in EEPROM due to lack of check... |
| CVE-2019-10572 | 2019-12-18 | Improper check in video driver while processing data from video... |
| CVE-2019-10584 | 2019-12-18 | Possibility of out of bound access in debug queue, if... |
| CVE-2019-10595 | 2019-12-18 | Possible buffer overwrite in message handler due to lack of... |
| CVE-2019-10598 | 2019-12-18 | Out of bound access can occur while processing peer info... |
| CVE-2019-10600 | 2019-12-18 | Use of local variable as argument to netlink CB callback... |
| CVE-2019-10601 | 2019-12-18 | Out of bound access can occur while processing firmware event... |
| CVE-2019-10605 | 2019-12-18 | Buffer overwrite can occur in IEEE80211 header filling function due... |
| CVE-2019-10607 | 2019-12-18 | Out of bounds memcpy can occur by providing the embedded... |
| CVE-2019-10614 | 2019-12-18 | Out of boundary access is possible as there is no... |
| CVE-2019-2242 | 2019-12-18 | Device memory may get corrupted because of buffer overflow/underflow. in... |
| CVE-2019-2274 | 2019-12-18 | Improper Access Control for RPU write access from secure processor... |
| CVE-2019-2304 | 2019-12-18 | Integer overflow to buffer overflow due to lack of validation... |
| CVE-2019-19742 | 2019-12-18 | On D-Link DIR-615 devices, the User Account Configuration page is... |
| CVE-2019-4388 | 2019-12-18 | HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site... |