2019 CVEs (page 125)
Page 125 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7028 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7816 | Critical | 9.8 | 2019-05-24 | ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerability. Successful explo… |
CVE-2019-7815 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20091 and earlier, 2019.010.20091 and earlier, 2017.011.30120 and earlier version, and 2015.006.30475 and earlier ha… |
CVE-2019-7027 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7026 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7025 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7024 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7023 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7022 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7021 | High | 7.5 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7020 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7019 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-7018 | Critical | 9.8 | 2019-05-24 | Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier ha… |
CVE-2019-10685 | Medium | 6.1 | 2019-05-24 | A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. |
CVE-2019-8346 | Medium | 6.1 | 2019-05-24 | In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability allows for an unauthenticated manipulati… |
CVE-2019-2726 | Medium | 6.3 | 2019-05-24 | Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported ve… |
CVE-2019-2250 | High | 7.8 | 2019-05-24 | Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-2248 | High | 7.8 | 2019-05-24 | Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-2247 | High | 7.8 | 2019-05-24 | Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdrag… |
CVE-2019-2245 | Critical | 9.8 | 2019-05-24 | Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer… |
CVE-2019-2244 | Critical | 9.8 | 2019-05-24 | Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buff… |
CVE-2019-11604 | Medium | 6.1 | 2019-05-24 | An issue was discovered in Quest KACE Systems Management Appliance before 9.1. The script at /service/kbot_service_notsoap.php is vulnerable to unauthenticated… |
CVE-2019-10848 | Medium | 5.3 | 2019-05-24 | Computrols CBAS 18.0.0 allows Username Enumeration. |
CVE-2019-10847 | High | 8.8 | 2019-05-24 | Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. |
CVE-2019-10143 | High | 7.0 | 2019-05-24 | It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of th… |
CVE-2019-12315 | Medium | 6.1 | 2019-05-24 | Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by using the "print from file" feature, as demonstrat… |
CVE-2019-12195 | Medium | 4.8 | 2019-05-24 | TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin log… |
CVE-2019-12155 | High | 7.5 | 2019-05-24 | interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. |
CVE-2019-12150 | Critical | 9.8 | 2019-05-24 | Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must… |
CVE-2019-11876 | Medium | 6.1 | 2019-05-24 | In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malici… |
CVE-2019-11875 | High | 8.8 | 2019-05-24 | In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vuln… |
CVE-2019-12314 | Critical | 9.8 | 2019-05-24 | Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/Maco… |
CVE-2019-12313 | Medium | 6.1 | 2019-05-24 | XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element. |
CVE-2019-12312 | High | 7.5 | 2019-05-24 | In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA… |
CVE-2019-5804 | Medium | 5.5 | 2019-05-23 | Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain nam… |
CVE-2019-5803 | Medium | 6.5 | 2019-05-23 | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy v… |
CVE-2019-5802 | Medium | 6.5 | 2019-05-23 | Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted… |
CVE-2019-5801 | Medium | 6.5 | 2019-05-23 | Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2019-5800 | Medium | 6.5 | 2019-05-23 | Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML… |
CVE-2019-5799 | Medium | 6.5 | 2019-05-23 | Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content… |
CVE-2019-5798 | Medium | 6.5 | 2019-05-23 | Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted… |
CVE-2019-5796 | High | 7.5 | 2019-05-23 | Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2019-5795 | High | 8.8 | 2019-05-23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
CVE-2019-5794 | Medium | 6.5 | 2019-05-23 | Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafte… |
CVE-2019-5793 | Medium | 6.5 | 2019-05-23 | Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user int… |
CVE-2019-5792 | High | 8.8 | 2019-05-23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PD… |
CVE-2019-5791 | High | 8.8 | 2019-05-23 | Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML pa… |
CVE-2019-5790 | High | 8.8 | 2019-05-23 | An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbi… |
CVE-2019-5789 | High | 8.8 | 2019-05-23 | An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised t… |
CVE-2019-5788 | High | 8.8 | 2019-05-23 | An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromis… |
CVE-2019-5787 | High | 8.8 | 2019-05-23 | Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2019-12309 | Medium | 4.9 | 2019-05-23 | dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. The vulnerability is caused by the insecure extraction… |
CVE-2019-10850 | Critical | 9.8 | 2019-05-23 | Computrols CBAS 18.0.0 has Default Credentials. |
CVE-2019-10849 | High | 7.5 | 2019-05-23 | Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure. |
CVE-2019-10846 | Medium | 6.1 | 2019-05-23 | Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET par… |
CVE-2019-10866 | Critical | 9.8 | 2019-05-23 | In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get_labels_parameters in the file form-maker/admin… |
CVE-2019-10855 | High | 7.5 | 2019-05-23 | Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwad… |
CVE-2019-10854 | High | 8.8 | 2019-05-23 | Computrols CBAS 18.0.0 allows Authenticated Command Injection. |
CVE-2019-10853 | High | 8.1 | 2019-05-23 | Computrols CBAS 18.0.0 allows Authentication Bypass. |
CVE-2019-10852 | High | 8.8 | 2019-05-23 | Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substr… |
CVE-2019-10851 | Medium | 6.5 | 2019-05-23 | Computrols CBAS 18.0.0 has hard-coded encryption keys. |
CVE-2019-7128 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7127 | Medium | 6.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7124 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7123 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7122 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7121 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7120 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7119 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7118 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7117 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7116 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7115 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7114 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7111 | High | 8.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7110 | Medium | 6.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7109 | Medium | 6.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7061 | High | 7.5 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-12289 | Critical | 9.8 | 2019-05-23 | An issue was discovered in upgrade_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 devices. A remote… |
CVE-2019-12288 | Critical | 9.8 | 2019-05-23 | An issue was discovered in upgrade_htmls.cgi on VStarcam 100T (C7824WIP) KR75.8.53.20 and 200V (C38S) KR203.18.1.20 devices. The web service, network, and acco… |
CVE-2019-7125 | High | 8.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7113 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7112 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7108 | High | 7.5 | 2019-05-23 | Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerability. Successful exp… |
CVE-2019-7103 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7102 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7101 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7100 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7099 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7098 | Critical | 9.8 | 2019-05-23 | Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7096 | Critical | 9.8 | 2019-05-23 | Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploit… |
CVE-2019-7088 | Critical | 9.8 | 2019-05-23 | Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier ha… |
CVE-2019-7138 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7137 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7136 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7135 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7134 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7133 | Medium | 6.5 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7132 | High | 8.8 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. Successful exploitation could lead to remote code execution. |
CVE-2019-7130 | Critical | 9.8 | 2019-05-23 | Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. Successful exploitation could lead to remote code execution. |