2019 CVEs (page 101)
Page 101 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-14417 | High | 7.2 | 2019-07-29 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execut… |
CVE-2019-14416 | High | 7.2 | 2019-07-29 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. An arbitrary command execution vulnerability allows a malicious VRP user to execut… |
CVE-2019-14415 | Medium | 4.8 | 2019-07-29 | An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. A persistent cross-site scripting (XSS) vulnerability allows a malicious VRP user… |
CVE-2019-13655 | Medium | 6.5 | 2019-07-29 | Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of… |
CVE-2019-14271 | Critical | 9.8 | 2019-07-29 | In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library… |
CVE-2019-13571 | Critical | 9.8 | 2019-07-29 | A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability wo… |
CVE-2019-13498 | High | 7.4 | 2019-07-29 | One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fix… |
CVE-2019-13126 | High | 7.5 | 2019-07-29 | An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, then t… |
CVE-2019-11868 | High | 7.8 | 2019-07-29 | See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary by… |
CVE-2019-6726 | Medium | 6.5 | 2019-07-29 | The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_f… |
CVE-2019-14267 | High | 7.8 | 2019-07-29 | PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. |
CVE-2019-12948 | High | 8.3 | 2019-07-29 | A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploit… |
CVE-2019-12743 | Medium | 5.3 | 2019-07-29 | HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones)… |
CVE-2019-11201 | High | 8.0 | 2019-07-29 | Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. It was identified that the editor a… |
CVE-2019-11200 | High | 8.8 | 2019-07-29 | Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient che… |
CVE-2019-11199 | Medium | 5.4 | 2019-07-29 | Dolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities allowed the execution of a JavaScript payload each time any regu… |
CVE-2019-13103 | High | 7.1 | 2019-07-29 | A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinite… |
CVE-2019-1020009 | High | 7.5 | 2019-07-29 | Fleet before 2.1.2 allows exposure of SMTP credentials. |
CVE-2019-1020008 | Medium | 6.1 | 2019-07-29 | stacktable.js before 1.0.4 allows XSS. |
CVE-2019-1020007 | Medium | 5.4 | 2019-07-29 | Dependency-Track before 3.5.1 allows XSS. |
CVE-2019-1020006 | Medium | 6.1 | 2019-07-29 | invenio-app before 1.1.1 allows host header injection. |
CVE-2019-1020005 | Medium | 5.4 | 2019-07-29 | invenio-communities before 1.0.0a20 allows XSS. |
CVE-2019-1020004 | High | 7.5 | 2019-07-29 | Tridactyl before 1.16.0 allows fake key events. |
CVE-2019-1020003 | Medium | 5.4 | 2019-07-29 | invenio-records before 1.2.2 allows XSS. |
CVE-2019-1020002 | High | 7.5 | 2019-07-29 | Pterodactyl before 0.7.14 with 2FA allows credential sniffing. |
CVE-2019-1105 | Medium | 5.4 | 2019-07-29 | A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could e… |
CVE-2019-1020019 | Medium | 6.1 | 2019-07-29 | invenio-previewer before 1.0.0a12 allows XSS. |
CVE-2019-1020018 | High | 7.3 | 2019-07-29 | Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link. |
CVE-2019-1020017 | Medium | 5.3 | 2019-07-29 | Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP. |
CVE-2019-1020016 | Medium | 6.1 | 2019-07-29 | ASH-AIO before 2.0.0.3 allows an open redirect. |
CVE-2019-1020015 | High | 7.5 | 2019-07-29 | graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT. |
CVE-2019-1020014 | Medium | 5.5 | 2019-07-29 | docker-credential-helpers before 0.6.3 has a double free in the List functions. |
CVE-2019-1020013 | Medium | 5.3 | 2019-07-29 | parse-server before 3.6.0 allows account enumeration. |
CVE-2019-1020012 | High | 7.5 | 2019-07-29 | parse-server before 3.4.1 allows DoS after any POST to a volatile class. |
CVE-2019-1020011 | High | 7.2 | 2019-07-29 | SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority. |
CVE-2019-1020010 | Medium | 6.1 | 2019-07-29 | Misskey before 10.102.4 allows hijacking a user's token. |
CVE-2019-1020001 | High | 7.5 | 2019-07-29 | yard before 0.9.20 allows path traversal. |
CVE-2019-14379 | Critical | 9.8 | 2019-07-29 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manage… |
CVE-2019-14378 | High | 8.8 | 2019-07-29 | ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. |
CVE-2019-14373 | High | 7.8 | 2019-07-28 | An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a heap-based buffer over-read… |
CVE-2019-14372 | Medium | 6.5 | 2019-07-28 | In Libav 12.3, there is an infinite loop in the function wv_read_block_header() in the file wvdec.c. |
CVE-2019-14371 | Medium | 6.5 | 2019-07-28 | An issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the file libavformat/mov.c, related to offset and tag. |
CVE-2019-14370 | Medium | 6.5 | 2019-07-28 | In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp. It could result in denial of service. |
CVE-2019-14369 | Medium | 6.5 | 2019-07-28 | Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service (heap-based buffer over-read) via a crafted im… |
CVE-2019-14368 | High | 7.8 | 2019-07-28 | Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp. |
CVE-2019-14364 | Medium | 6.1 | 2019-07-28 | An XSS vulnerability in the "Email Subscribers & Newsletters" plugin 4.1.6 for WordPress allows an attacker to inject malicious JavaScript code through a publi… |
CVE-2019-14363 | Critical | 9.8 | 2019-07-28 | A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.18_1.0.63 allows an attacker to remotely ex… |
CVE-2019-14362 | Medium | 5.4 | 2019-07-28 | Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the ser… |
CVE-2019-14352 | High | 7.8 | 2019-07-28 | In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account… |
CVE-2019-14351 | High | 8.8 | 2019-07-28 | EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time us… |
CVE-2019-14350 | Medium | 6.1 | 2019-07-28 | EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript cod… |
CVE-2019-14349 | Medium | 6.1 | 2019-07-28 | EspoCRM version 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the api/v1/Document functionality for storing documents in… |
CVE-2019-14331 | Medium | 6.1 | 2019-07-28 | An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create User. A malicious attacker can mod… |
CVE-2019-14330 | Medium | 6.1 | 2019-07-28 | An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create Case. A malicious attacker can mod… |
CVE-2019-14329 | Medium | 6.1 | 2019-07-28 | An issue was discovered in EspoCRM before 5.6.6. There is stored XSS due to lack of filtration of user-supplied data in Create Task. A malicious attacker can m… |
CVE-2019-14328 | High | 8.8 | 2019-07-28 | The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section. |
CVE-2019-14323 | High | 7.5 | 2019-07-28 | SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server… |
CVE-2019-14322 | High | 7.5 | 2019-07-28 | In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames. |
CVE-2019-14315 | Medium | 6.1 | 2019-07-28 | A cross-site scripting (XSS) vulnerability in upload.php in SunHater KCFinder 3.20-test1, 3.20-test2, 3.12, and earlier allows remote attackers to inject arbit… |
CVE-2019-14298 | Medium | 5.4 | 2019-07-27 | Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx. |
CVE-2019-14297 | Medium | 5.4 | 2019-07-27 | Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx. |
CVE-2019-14296 | High | 7.8 | 2019-07-27 | canUnpack in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash) or possibly have un… |
CVE-2019-14295 | Medium | 5.5 | 2019-07-27 | An Integer overflow in the getElfSections function in p_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) via a skewed offset… |
CVE-2019-14294 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read. |
CVE-2019-14293 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2. |
CVE-2019-14292 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1. |
CVE-2019-14291 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3. |
CVE-2019-14290 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2. |
CVE-2019-14289 | Medium | 5.5 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line"… |
CVE-2019-14288 | High | 7.8 | 2019-07-27 | An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case. |
CVE-2019-14286 | Medium | 6.1 | 2019-07-27 | In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicio… |
CVE-2019-13588 | Medium | 6.1 | 2019-07-26 | A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web… |
CVE-2019-10267 | High | 8.8 | 2019-07-26 | An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the… |
CVE-2019-10266 | High | 7.5 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When sending an out-of-bounds XML document to a URL, it is possible to read the file struc… |
CVE-2019-10265 | High | 7.5 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the di… |
CVE-2019-10264 | High | 7.2 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. With a valid administrator account, the "Move / Import / Export Users" screen has an Impor… |
CVE-2019-10263 | Medium | 6.1 | 2019-07-26 | An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. When creating a trial account, it is possible to inject XSS in the Alias field, allowing t… |
CVE-2019-13990 | Critical | 9.8 | 2019-07-26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. |
CVE-2019-9492 | High | 7.8 | 2019-07-26 | A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the produ… |
CVE-2019-6002 | Medium | 6.1 | 2019-07-26 | Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2019-14284 | Medium | 6.2 | 2019-07-26 | In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger… |
CVE-2019-14283 | Medium | 6.8 | 2019-07-26 | In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and… |
CVE-2019-14228 | Medium | 6.1 | 2019-07-26 | Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess… |
CVE-2019-13955 | Medium | 6.5 | 2019-07-26 | Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker… |
CVE-2019-13954 | Medium | 6.5 | 2019-07-26 | Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacke… |
CVE-2019-13638 | High | 7.8 | 2019-07-26 | GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payloa… |
CVE-2019-13565 | High | 7.5 | 2019-07-26 | An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd… |
CVE-2019-13387 | Medium | 6.1 | 2019-07-26 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, Reflected XSS in filemanager2.php (parameter fm_current_dir) allows attackers to steal a cookie or… |
CVE-2019-13386 | High | 8.8 | 2019-07-26 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, a hidden action=9 feature in filemanager2.php allows attackers to execute a shell command, i.e., o… |
CVE-2019-13385 | Medium | 4.3 | 2019-07-26 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.840, File and Directory Information Exposure in filemanager allows attackers to enumerate users and che… |
CVE-2019-13382 | High | 7.8 | 2019-07-26 | UploaderService in SnagIT 2019.1.2 allows elevation of privilege by placing an invalid presentation file in %PROGRAMDATA%\TechSmith\TechSmith Recorder\QueuedPr… |
CVE-2019-13057 | Medium | 4.9 | 2019-07-26 | An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databas… |
CVE-2019-14282 | Critical | 9.8 | 2019-07-26 | The simple_captcha2 gem 0.2.3 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. |
CVE-2019-14281 | Critical | 9.8 | 2019-07-26 | The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. |
CVE-2019-14280 | Medium | 5.3 | 2019-07-26 | In some circumstances, Craft 2 before 2.7.10 and 3 before 3.2.6 wasn't stripping EXIF data from user-uploaded images when it was configured to do so, potential… |
CVE-2019-14277 | Critical | 9.8 | 2019-07-26 | Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the… |
CVE-2019-14275 | Medium | 5.5 | 2019-07-26 | Xfig fig2dev 3.2.7a has a stack-based buffer overflow in the calc_arrow function in bound.c. |
CVE-2019-14274 | Medium | 5.5 | 2019-07-26 | MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. |
CVE-2019-5607 | High | 7.8 | 2019-07-26 | In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE b… |
CVE-2019-5606 | High | 7.8 | 2019-07-26 | In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE b… |