2019 CVEs (page 127)
Page 127 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7787 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015… |
CVE-2019-7786 | High | 8.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7785 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7784 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7783 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7782 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7781 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7780 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier versio… |
CVE-2019-7779 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7778 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7777 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7776 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7775 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7774 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7773 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7772 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7771 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7770 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7769 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7768 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7767 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7766 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7765 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7764 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier, 2015… |
CVE-2019-7763 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7762 | Critical | 9.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7761 | High | 8.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7760 | High | 8.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7759 | High | 8.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7758 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 and earlier versio… |
CVE-2019-7145 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7144 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7143 | High | 8.8 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7142 | High | 7.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7141 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-7140 | Medium | 6.5 | 2019-05-22 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.3049… |
CVE-2019-9892 | Medium | 6.5 | 2019-05-22 | An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS… |
CVE-2019-10067 | Medium | 5.4 | 2019-05-22 | An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17. An attacker… |
CVE-2019-10066 | Medium | 5.4 | 2019-05-22 | An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x throu… |
CVE-2019-6513 | Medium | 5.4 | 2019-05-21 | An issue was discovered in WSO2 API Manager 2.6.0. It is possible for a logged-in user to upload, as API documentation, any type of file by changing the extens… |
CVE-2019-12270 | High | 7.4 | 2019-05-21 | OpenText Brava! Enterprise and Brava! Server 7.5 through 16.4 configure excessive permissions by default on Windows. During installation, a displaylistcache fi… |
CVE-2019-12269 | High | 7.5 | 2019-05-21 | Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indi… |
CVE-2019-12252 | Medium | 6.5 | 2019-05-21 | In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify… |
CVE-2019-12190 | Medium | 5.4 | 2019-05-21 | XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.747 via the testacc/fileManager2.php fm_current_dir or filename parameter. |
CVE-2019-12189 | Medium | 6.1 | 2019-05-21 | An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field. |
CVE-2019-12253 | Medium | 6.5 | 2019-05-21 | my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting. |
CVE-2019-12251 | High | 8.8 | 2019-05-21 | sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter. |
CVE-2019-12250 | Medium | 6.1 | 2019-05-21 | IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, whic… |
CVE-2019-10320 | Medium | 4.3 | 2019-05-21 | Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins ma… |
CVE-2019-10319 | Medium | 4.3 | 2019-05-21 | A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Over… |
CVE-2019-11816 | High | 7.2 | 2019-05-20 | Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges t… |
CVE-2019-10078 | Medium | 6.1 | 2019-05-20 | A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Init… |
CVE-2019-10077 | Medium | 6.1 | 2019-05-20 | A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. |
CVE-2019-10076 | Medium | 6.1 | 2019-05-20 | A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. |
CVE-2019-12241 | Critical | 9.8 | 2019-05-20 | The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php. |
CVE-2019-12240 | Critical | 9.8 | 2019-05-20 | The Virim plugin 0.4 for WordPress allows Insecure Deserialization via s_values, t_values, or c_values in graph.php. |
CVE-2019-12239 | High | 7.2 | 2019-05-20 | The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrati… |
CVE-2019-8352 | Critical | 9.8 | 2019-05-20 | By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Ag… |
CVE-2019-4293 | Medium | 5.3 | 2019-05-20 | IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further… |
CVE-2019-4058 | Medium | 6.5 | 2019-05-20 | IBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into exposing interface elements and information normally restricted to a… |
CVE-2019-4011 | Medium | 5.4 | 2019-05-20 | IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… |
CVE-2019-12222 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pix… |
CVE-2019-12221 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV… |
CVE-2019-12220 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out… |
CVE-2019-12219 | High | 8.8 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an inv… |
CVE-2019-12218 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL… |
CVE-2019-12217 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL… |
CVE-2019-12216 | Medium | 6.5 | 2019-05-20 | An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap… |
CVE-2019-12215 | Medium | 4.3 | 2019-05-20 | A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the dis… |
CVE-2019-12214 | High | 7.5 | 2019-05-20 | In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from t… |
CVE-2019-12213 | Medium | 6.5 | 2019-05-20 | When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion. |
CVE-2019-12212 | High | 7.5 | 2019-05-20 | When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eve… |
CVE-2019-12211 | High | 7.5 | 2019-05-20 | When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination addres… |
CVE-2019-12208 | Critical | 9.8 | 2019-05-20 | njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c. |
CVE-2019-12207 | Critical | 9.8 | 2019-05-20 | njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. |
CVE-2019-12206 | Critical | 9.8 | 2019-05-20 | njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c. |
CVE-2019-11809 | Medium | 6.1 | 2019-05-20 | An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack… |
CVE-2019-12198 | High | 7.5 | 2019-05-20 | In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header. |
CVE-2019-12185 | High | 8.8 | 2019-05-20 | eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An… |
CVE-2019-12184 | Medium | 5.4 | 2019-05-19 | There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by… |
CVE-2019-12173 | High | 8.8 | 2019-05-18 | MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-20… |
CVE-2019-12172 | High | 7.8 | 2019-05-17 | Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\\… |
CVE-2019-12170 | High | 8.8 | 2019-05-17 | ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command ex… |
CVE-2019-12168 | High | 7.2 | 2019-05-17 | Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen. |
CVE-2019-12163 | Medium | 5.3 | 2019-05-17 | GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request. |
CVE-2019-11644 | High | 7.8 | 2019-05-17 | In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Se… |
CVE-2019-8339 | Medium | 5.5 | 2019-05-17 | An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine. |
CVE-2019-12161 | High | 8.8 | 2019-05-17 | WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement f… |
CVE-2019-12160 | Critical | 9.8 | 2019-05-17 | GoHTTP through 2017-07-25 has a sendHeader use-after-free. |
CVE-2019-12159 | High | 7.5 | 2019-05-17 | GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL. |
CVE-2019-12158 | Critical | 9.8 | 2019-05-17 | GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension. |
CVE-2019-7353 | Critical | 9.1 | 2019-05-17 | An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authori… |
CVE-2019-12086 | High | 7.5 | 2019-05-17 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific pro… |
CVE-2019-11887 | Critical | 9.8 | 2019-05-17 | SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution. |
CVE-2019-11057 | High | 8.8 | 2019-05-17 | SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands. |
CVE-2019-6797 | High | 7.5 | 2019-05-17 | An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token use… |
CVE-2019-6790 | Medium | 4.3 | 2019-05-17 | An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6… |
CVE-2019-6787 | Medium | 6.5 | 2019-05-17 | An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The… |
CVE-2019-6781 | High | 7.5 | 2019-05-17 | An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It… |
CVE-2019-5958 | High | 7.8 | 2019-05-17 | Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1.0.9.0 and earlier allows an attacker to… |