2019 CVEs (page 115)
Page 115 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10134 | Low | 3.7 | 2019-06-26 | A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their q… |
CVE-2019-10133 | Low | 3.1 | 2019-06-26 | A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to inter… |
CVE-2019-12984 | Medium | 5.5 | 2019-06-26 | A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered b… |
CVE-2019-12982 | Medium | 6.5 | 2019-06-26 | Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could levera… |
CVE-2019-12981 | High | 8.8 | 2019-06-26 | Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c. |
CVE-2019-12980 | Medium | 6.5 | 2019-06-26 | In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote a… |
CVE-2019-12979 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage… |
CVE-2019-12978 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. |
CVE-2019-12977 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. |
CVE-2019-12976 | Medium | 5.5 | 2019-06-26 | ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c. |
CVE-2019-12975 | Medium | 5.5 | 2019-06-26 | ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c. |
CVE-2019-12974 | Medium | 5.5 | 2019-06-26 | A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote… |
CVE-2019-12973 | Medium | 5.5 | 2019-06-26 | In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to caus… |
CVE-2019-11583 | Medium | 6.5 | 2019-06-26 | The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnerability in issue… |
CVE-2019-10164 | High | 8.8 | 2019-06-26 | PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack… |
CVE-2019-4241 | High | 7.8 | 2019-06-26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative acces… |
CVE-2019-4235 | High | 7.5 | 2019-06-26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to… |
CVE-2019-4234 | Medium | 4.3 | 2019-06-26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequ… |
CVE-2019-4225 | Medium | 4.4 | 2019-06-26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 15… |
CVE-2019-4224 | High | 8.8 | 2019-06-26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could a… |
CVE-2019-3569 | High | 7.5 | 2019-06-26 | HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to t… |
CVE-2019-6169 | High | 7.5 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP. |
CVE-2019-6168 | Critical | 9.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
CVE-2019-6167 | Critical | 9.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
CVE-2019-6166 | High | 8.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery. |
CVE-2019-6163 | Medium | 5.5 | 2019-06-26 | A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standar… |
CVE-2019-12972 | Medium | 5.5 | 2019-06-26 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read i… |
CVE-2019-11272 | High | 7.3 | 2019-06-26 | Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application usi… |
CVE-2019-12968 | Medium | 5.3 | 2019-06-26 | A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin vers… |
CVE-2019-12966 | Critical | 9.8 | 2019-06-26 | FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input. |
CVE-2019-9836 | Medium | 5.3 | 2019-06-25 | Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and e… |
CVE-2019-3961 | Medium | 6.1 | 2019-06-25 | Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, re… |
CVE-2019-12280 | High | 7.8 | 2019-06-25 | PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. |
CVE-2019-6329 | High | 7.8 | 2019-06-25 | HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different… |
CVE-2019-6328 | High | 7.8 | 2019-06-25 | HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different… |
CVE-2019-4382 | Medium | 5.3 | 2019-06-25 | IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP re… |
CVE-2019-4377 | Medium | 4.3 | 2019-06-25 | IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM… |
CVE-2019-4158 | Medium | 5.4 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality t… |
CVE-2019-4157 | Medium | 6.1 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… |
CVE-2019-4156 | Medium | 5.9 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inf… |
CVE-2019-4153 | Medium | 6.8 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victi… |
CVE-2019-4152 | Medium | 4.4 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of proper session expiration may allow attacker… |
CVE-2019-4151 | Medium | 5.9 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inf… |
CVE-2019-4150 | Low | 3.7 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted ent… |
CVE-2019-4145 | High | 7.1 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks… |
CVE-2019-4135 | High | 8.8 | 2019-06-25 | IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users. IBM X-… |
CVE-2019-12964 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject. |
CVE-2019-12963 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action. |
CVE-2019-12962 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header. |
CVE-2019-12961 | High | 8.8 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. |
CVE-2019-12960 | Critical | 9.8 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d. |
CVE-2019-12817 | High | 7.0 | 2019-06-25 | arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one anoth… |
CVE-2019-12949 | Medium | 6.1 | 2019-06-25 | In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an attacker can lever… |
CVE-2019-12958 | Medium | 5.5 | 2019-06-25 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second pr… |
CVE-2019-12957 | High | 7.8 | 2019-06-25 | In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset arr… |
CVE-2019-12951 | Critical | 9.8 | 2019-06-24 | An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a critical heap-based buffer overflow. |
CVE-2019-10689 | Medium | 6.5 | 2019-06-24 | VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector (BToE) application version 3.9.1 and earlier provides in… |
CVE-2019-12346 | Medium | 6.1 | 2019-06-24 | In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse… |
CVE-2019-7231 | Medium | 5.7 | 2019-06-24 | The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates th… |
CVE-2019-9958 | High | 8.8 | 2019-06-24 | CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by c… |
CVE-2019-9957 | Medium | 5.4 | 2019-06-24 | Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into… |
CVE-2019-12880 | Medium | 4.3 | 2019-06-24 | BCN Quark Quarking Password Manager 3.1.84 suffers from a clickjacking vulnerability caused by allowing * within web_accessible_resources. An attacker can take… |
CVE-2019-10271 | Medium | 4.3 | 2019-06-24 | An issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It allows unauthorized profile and cover picture modification. It is possible to modi… |
CVE-2019-9085 | Medium | 6.5 | 2019-06-24 | Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter to visualizza_contra… |
CVE-2019-7229 | High | 8.3 | 2019-06-24 | The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device"… |
CVE-2019-7232 | High | 8.8 | 2019-06-24 | The ABB IDAL HTTP server is vulnerable to a buffer overflow when a long Host header is sent in a web request. The Host header value overflows a buffer and over… |
CVE-2019-7230 | High | 8.8 | 2019-06-24 | The ABB IDAL FTP server mishandles format strings in a username during the authentication process. Attempting to authenticate with the username %s%p%x%d will c… |
CVE-2019-12940 | Medium | 5.9 | 2019-06-24 | LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter. |
CVE-2019-12939 | Critical | 9.8 | 2019-06-24 | LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter. |
CVE-2019-12870 | High | 8.8 | 2019-06-24 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-12869 | High | 8.8 | 2019-06-24 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-12384 | Medium | 5.9 | 2019-06-24 | FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from pol… |
CVE-2019-12323 | High | 7.5 | 2019-06-24 | The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS. |
CVE-2019-12292 | Critical | 9.8 | 2019-06-24 | Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control. |
CVE-2019-11648 | High | 7.5 | 2019-06-24 | An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited… |
CVE-2019-11647 | Medium | 6.1 | 2019-06-24 | A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to… |
CVE-2019-12871 | High | 8.8 | 2019-06-24 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-12938 | Medium | 4.3 | 2019-06-24 | The Roundcube component of Analogic Poste.io 2.1.6 uses .htaccess to protect the logs/ folder, which is effective with the Apache HTTP Server but is ineffectiv… |
CVE-2019-12929 | Critical | 9.8 | 2019-06-24 | The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, denial of service… |
CVE-2019-12928 | Critical | 9.8 | 2019-06-24 | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, de… |
CVE-2019-12937 | High | 7.8 | 2019-06-23 | apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable. |
CVE-2019-12936 | High | 7.1 | 2019-06-23 | BlueStacks App Player 2, 3, and 4 before 4.90 allows DNS Rebinding for attacks on exposed IPC functions. |
CVE-2019-12935 | High | 7.4 | 2019-06-23 | Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI. |
CVE-2019-10028 | High | 7.5 | 2019-06-21 | Denial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019. |
CVE-2019-11392 | High | 7.5 | 2019-06-21 | BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd. |
CVE-2019-10720 | High | 8.8 | 2019-06-21 | BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager. NOTE: this issue exists becau… |
CVE-2019-10719 | High | 8.8 | 2019-06-21 | BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEng… |
CVE-2019-10718 | High | 7.5 | 2019-06-21 | BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs. |
CVE-2019-12572 | High | 7.8 | 2019-06-21 | A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could allow an authenticated, local attacker… |
CVE-2019-11011 | Critical | 9.8 | 2019-06-21 | Akamai CloudTest before 58.30 allows remote code execution. |
CVE-2019-10270 | High | 8.8 | 2019-06-21 | An arbitrary password reset issue was discovered in the Ultimate Member plugin 2.39 for WordPress. It is possible (due to lack of verification and correlation… |
CVE-2019-10072 | High | 7.5 | 2019-06-21 | The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5… |
CVE-2019-12836 | High | 8.8 | 2019-06-21 | The Bobronix JEditor editor before 3.0.6 for Jira allows an attacker to add a URL/Link (to an existing issue) that can cause forgery of a request to an out-of-… |
CVE-2019-1904 | High | 8.8 | 2019-06-21 | A vulnerability in the web-based UI (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (… |
CVE-2019-3735 | High | 7.8 | 2019-06-20 | Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 co… |
CVE-2019-12920 | Critical | 9.8 | 2019-06-20 | On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The d… |
CVE-2019-12919 | Medium | 5.5 | 2019-06-20 | On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the internal SD card via… |
CVE-2019-8459 | Critical | 9.8 | 2019-06-20 | Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause… |
CVE-2019-8458 | Medium | 4.4 | 2019-06-20 | Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update i… |
CVE-2019-12745 | Medium | 5.4 | 2019-06-20 | out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field. |