2019 CVEs (page 131)
Page 131 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7690 | Critical | 9.8 | 2019-05-13 | In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the lifetime of the proce… |
CVE-2019-4259 | Medium | 5.5 | 2019-05-13 | A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that could allow sensiti… |
CVE-2019-3684 | Medium | 5.9 | 2019-05-13 | SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a… |
CVE-2019-12047 | Medium | 6.1 | 2019-05-13 | Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec… |
CVE-2019-11429 | Medium | 4.8 | 2019-05-13 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro) is vulnerable to Reflected XSS for the… |
CVE-2019-8350 | Medium | 6.6 | 2019-05-13 | The Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was affected by an information disclosure vulnerability that leaked… |
CVE-2019-7411 | Medium | 5.4 | 2019-05-13 | Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web scri… |
CVE-2019-7409 | Medium | 6.1 | 2019-05-13 | Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) pa… |
CVE-2019-7404 | High | 7.5 | 2019-05-13 | An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. An unauthenticated user can read a log file via an HTTP request containing its full… |
CVE-2019-12043 | Medium | 6.1 | 2019-05-13 | In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0e… |
CVE-2019-12041 | High | 7.5 | 2019-05-13 | lib/common/html_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. |
CVE-2019-11888 | Critical | 9.8 | 2019-05-13 | Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive… |
CVE-2019-11886 | High | 8.8 | 2019-05-13 | The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstra… |
CVE-2019-11885 | Medium | 6.8 | 2019-05-12 | eyeDisk implements the unlock feature by sending a cleartext password. The password can be discovered by sniffing USB traffic or by sending a 06 05 52 41 01 b0… |
CVE-2019-5438 | Medium | 5.3 | 2019-05-10 | Path traversal using symlink in npm harp module versions <= 0.29.0. |
CVE-2019-5437 | Medium | 5.3 | 2019-05-10 | Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rul… |
CVE-2019-11884 | Low | 3.3 | 2019-05-10 | The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information… |
CVE-2019-5677 | Medium | 5.5 | 2019-05-10 | NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DeviceIoCont… |
CVE-2019-5676 | Medium | 6.7 | 2019-05-10 | NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without valida… |
CVE-2019-5675 | High | 7.8 | 2019-05-10 | NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscap… |
CVE-2019-3566 | Medium | 5.9 | 2019-05-10 | A bug in WhatsApp for Android's messaging logic would potentially allow a malicious individual who has taken over over a WhatsApp user's account to recover pre… |
CVE-2019-5496 | High | 7.5 | 2019-05-10 | Oncommand Insight versions prior to 7.3.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive informatio… |
CVE-2019-5495 | High | 7.5 | 2019-05-10 | OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an atta… |
CVE-2019-11066 | Critical | 9.8 | 2019-05-10 | openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method. |
CVE-2019-11059 | Critical | 9.8 | 2019-05-10 | Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow. |
CVE-2019-11000 | Medium | 6.5 | 2019-05-10 | An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure. |
CVE-2019-5494 | High | 7.5 | 2019-05-10 | OnCommand Unified Manager 7-Mode prior to version 5.2.4 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensit… |
CVE-2019-5018 | High | 8.1 | 2019-05-10 | An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use afte… |
CVE-2019-11879 | Medium | 5.5 | 2019-05-10 | The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root direc… |
CVE-2019-11082 | High | 7.5 | 2019-05-10 | core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local… |
CVE-2019-4204 | Medium | 5.4 | 2019-05-10 | IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… |
CVE-2019-11878 | Medium | 6.5 | 2019-05-10 | An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft… |
CVE-2019-1867 | Critical | 10.0 | 2019-05-10 | A vulnerability in the REST API of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to bypass authentication on the REST… |
CVE-2019-11871 | Medium | 5.4 | 2019-05-10 | The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins. |
CVE-2019-11870 | Medium | 6.1 | 2019-05-09 | Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/adm… |
CVE-2019-11869 | Medium | 6.1 | 2019-05-09 | The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenly expects that is_admin() verifies that the request comes from an admin user (i… |
CVE-2019-7652 | High | 7.7 | 2019-05-09 | TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create… |
CVE-2019-1568 | Medium | 6.1 | 2019-05-09 | Cross-site scripting (XSS) vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrary JavaScript or HTM… |
CVE-2019-11842 | High | 7.5 | 2019-05-09 | An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers… |
CVE-2019-11840 | Medium | 5.9 | 2019-05-09 | An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the a… |
CVE-2019-7181 | High | 7.5 | 2019-05-09 | Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program. |
CVE-2019-6566 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an atta… |
CVE-2019-6564 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow… |
CVE-2019-6548 | Critical | 9.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This serv… |
CVE-2019-6546 | High | 7.8 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an att… |
CVE-2019-6544 | Medium | 5.6 | 2019-05-09 | GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrat… |
CVE-2019-4072 | Medium | 6.3 | 2019-05-09 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even whe… |
CVE-2019-4071 | High | 8.8 | 2019-05-09 | IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands… |
CVE-2019-9847 | High | 7.8 | 2019-05-09 | A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable o… |
CVE-2019-11839 | Critical | 9.8 | 2019-05-09 | njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array… |
CVE-2019-11838 | Critical | 9.8 | 2019-05-09 | njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_a… |
CVE-2019-11837 | High | 7.5 | 2019-05-09 | njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and n… |
CVE-2019-11353 | Critical | 9.8 | 2019-05-09 | The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using d… |
CVE-2019-11323 | Medium | 5.9 | 2019-05-09 | HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include… |
CVE-2019-0226 | Medium | 4.9 | 2019-05-09 | Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vul… |
CVE-2019-11836 | Medium | 4.6 | 2019-05-09 | The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout. |
CVE-2019-11820 | Medium | 5.5 | 2019-05-09 | Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline. |
CVE-2019-11835 | Critical | 9.8 | 2019-05-09 | cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. |
CVE-2019-11834 | Critical | 9.8 | 2019-05-09 | cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. |
CVE-2019-11832 | High | 7.5 | 2019-05-09 | TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as… |
CVE-2019-11831 | Critical | 9.8 | 2019-05-09 | The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows atta… |
CVE-2019-11830 | Critical | 9.8 | 2019-05-09 | PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandles Phar stub parsing… |
CVE-2019-7442 | Critical | 9.8 | 2019-05-08 | An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read… |
CVE-2019-9698 | Medium | 5.5 | 2019-05-08 | Symantec AV Engine, prior to 13.0.9r17, may be susceptible to an arbitrary file deletion issue, which is a type of vulnerability that could allow an attacker t… |
CVE-2019-8285 | High | 8.8 | 2019-05-08 | Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution |
CVE-2019-11494 | High | 7.5 | 2019-05-08 | In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command. |
CVE-2019-11458 | High | 7.5 | 2019-05-08 | An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon… |
CVE-2019-11406 | Medium | 6.1 | 2019-05-08 | Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter. |
CVE-2019-11398 | Medium | 6.1 | 2019-05-08 | Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parame… |
CVE-2019-5021 | Critical | 9.8 | 2019-05-08 | Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a… |
CVE-2019-5014 | Medium | 6.5 | 2019-05-08 | An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can… |
CVE-2019-2054 | High | 7.8 | 2019-05-08 | In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could… |
CVE-2019-2053 | Medium | 5.5 | 2019-05-08 | In wnm_parse_neighbor_report_elem of wnm_sta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclo… |
CVE-2019-2052 | High | 7.5 | 2019-05-08 | In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional… |
CVE-2019-2051 | High | 7.5 | 2019-05-08 | In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing… |
CVE-2019-2050 | High | 7.8 | 2019-05-08 | In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of privileg… |
CVE-2019-2049 | High | 7.8 | 2019-05-08 | In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation… |
CVE-2019-2047 | Critical | 9.8 | 2019-05-08 | In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config… |
CVE-2019-2046 | Critical | 9.8 | 2019-05-08 | In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution… |
CVE-2019-2045 | Critical | 9.8 | 2019-05-08 | In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config… |
CVE-2019-2044 | High | 8.8 | 2019-05-08 | In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote co… |
CVE-2019-2043 | High | 7.3 | 2019-05-08 | In SmsDefaultDialog.onStart of SmsDefaultDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation… |
CVE-2019-11550 | Medium | 5.9 | 2019-05-08 | Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation. |
CVE-2019-11510 | Critical | 10.0 | 2019-05-08 | In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a speci… |
CVE-2019-11508 | High | 7.2 | 2019-05-08 | In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the… |
CVE-2019-11507 | Medium | 6.1 | 2019-05-08 | In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before 9.0R3, an XSS issue has been found on the Application Launcher page. |
CVE-2019-11499 | High | 7.5 | 2019-05-08 | In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if AUTH PLAIN is attempted over a TLS secured channel with an unacc… |
CVE-2019-11819 | High | 7.8 | 2019-05-08 | Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp… |
CVE-2019-11818 | Medium | 6.1 | 2019-05-08 | Alkacon OpenCMS v10.5.4 and before is affected by stored cross site scripting (XSS) in the module New User (/opencms/system/workplace/admin/accounts/user_new.j… |
CVE-2019-11643 | Medium | 6.1 | 2019-05-08 | Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes… |
CVE-2019-11642 | High | 8.8 | 2019-05-08 | A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Authenticated remote adversaries can poison lo… |
CVE-2019-11564 | Medium | 6.1 | 2019-05-08 | A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/… |
CVE-2019-11561 | Medium | 5.9 | 2019-05-08 | The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to… |
CVE-2019-9505 | Critical | 9.8 | 2019-05-08 | The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized chang… |
CVE-2019-8387 | Critical | 9.8 | 2019-05-08 | MASTER IPCAMERA01 3.3.4.2103 devices allow Remote Command Execution, related to the thttpd component. |
CVE-2019-8349 | Medium | 6.1 | 2019-05-08 | Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parame… |
CVE-2019-11815 | High | 8.1 | 2019-05-08 | An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related… |
CVE-2019-11814 | Medium | 6.1 | 2019-05-08 | An issue was discovered in app/webroot/js/misp.js in MISP before 2.4.107. There is persistent XSS via image names in titles, as demonstrated by a screenshot. |
CVE-2019-11813 | Medium | 6.1 | 2019-05-08 | An issue was discovered in app/View/Elements/Events/View/value_field.ctp in MISP before 2.4.107. There is persistent XSS via link type attributes with javascri… |
CVE-2019-11812 | Medium | 6.1 | 2019-05-08 | A persistent XSS issue was discovered in app/View/Helper/CommandHelper.php in MISP before 2.4.107. JavaScript can be included in the discussion interface, and… |