2019 CVEs (page 137)
Page 137 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10248 | High | 8.1 | 2019-04-22 | Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could ha… |
CVE-2019-9955 | Medium | 6.1 | 2019-04-22 | On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL… |
CVE-2019-10247 | Medium | 5.3 | 2019-04-22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will re… |
CVE-2019-10246 | Medium | 5.3 | 2019-04-22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory nam… |
CVE-2019-10241 | Medium | 6.1 | 2019-04-22 | In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a special… |
CVE-2019-6157 | Medium | 6.5 | 2019-04-22 | In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's priva… |
CVE-2019-6155 | Medium | 4.1 | 2019-04-22 | A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to de… |
CVE-2019-3902 | Medium | 5.1 | 2019-04-22 | A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside… |
CVE-2019-3901 | Medium | 4.7 | 2019-04-22 | A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mu… |
CVE-2019-3899 | Critical | 9.8 | 2019-04-22 | It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only a… |
CVE-2019-11456 | High | 8.8 | 2019-04-22 | Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code. |
CVE-2019-11455 | High | 8.1 | 2019-04-22 | A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent me… |
CVE-2019-11454 | Medium | 6.1 | 2019-04-22 | Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaS… |
CVE-2019-11452 | High | 7.2 | 2019-04-22 | whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection. |
CVE-2019-11451 | High | 7.2 | 2019-04-22 | whatsns 4.0 allows index.php?inform/add.html qid SQL injection. |
CVE-2019-11450 | Critical | 9.8 | 2019-04-22 | whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection. |
CVE-2019-11244 | Medium | 5.0 | 2019-04-22 | In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with wo… |
CVE-2019-11243 | High | 8.1 | 2019-04-22 | In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer toke… |
CVE-2019-11449 | Medium | 6.1 | 2019-04-22 | I, Librarian 4.10 has XSS via the notes.php notes parameter. |
CVE-2019-11448 | Critical | 9.8 | 2019-04-22 | An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due… |
CVE-2019-11447 | High | 8.8 | 2019-04-22 | An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_f… |
CVE-2019-11446 | High | 8.8 | 2019-04-22 | An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user privilege. The Upload Files section in… |
CVE-2019-11445 | High | 7.2 | 2019-04-22 | OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the sit… |
CVE-2019-11444 | High | 7.2 | 2019-04-22 | An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute OS commands. Commands can be executed vi… |
CVE-2019-11428 | Medium | 6.1 | 2019-04-22 | I, Librarian 4.10 has XSS via the export.php export_files parameter. |
CVE-2019-11427 | Medium | 6.1 | 2019-04-22 | An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter. |
CVE-2019-11426 | Medium | 6.1 | 2019-04-22 | An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter. |
CVE-2019-11418 | Critical | 9.8 | 2019-04-22 | apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface. |
CVE-2019-11417 | Critical | 9.8 | 2019-04-22 | system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp functio… |
CVE-2019-11416 | High | 8.8 | 2019-04-22 | A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user. |
CVE-2019-11415 | High | 7.5 | 2019-04-22 | An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demon… |
CVE-2019-11414 | High | 8.8 | 2019-04-22 | An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative autho… |
CVE-2019-11413 | High | 7.5 | 2019-04-22 | An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check. |
CVE-2019-11412 | High | 7.5 | 2019-04-22 | An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call. |
CVE-2019-11411 | Critical | 9.8 | 2019-04-22 | An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow. |
CVE-2019-11405 | High | 8.1 | 2019-04-22 | OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which m… |
CVE-2019-11404 | High | 8.1 | 2019-04-22 | arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. Any of these dependent… |
CVE-2019-11403 | Critical | 9.8 | 2019-04-22 | In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page. |
CVE-2019-11402 | Critical | 9.8 | 2019-04-22 | In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format. |
CVE-2019-11401 | High | 7.2 | 2019-04-22 | A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extens… |
CVE-2019-11395 | Critical | 9.8 | 2019-04-22 | A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIS… |
CVE-2019-11393 | Critical | 9.8 | 2019-04-22 | An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by reques… |
CVE-2019-11235 | Critical | 9.8 | 2019-04-22 | FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid p… |
CVE-2019-11234 | Critical | 9.8 | 2019-04-22 | FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497. |
CVE-2019-11391 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11390 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11389 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf allows remote attackers to cause… |
CVE-2019-11388 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf allows remote attackers to cause… |
CVE-2019-11387 | Medium | 5.3 | 2019-04-21 | An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to caus… |
CVE-2019-11371 | Critical | 9.8 | 2019-04-20 | BWA (aka Burrow-Wheeler Aligner) 0.7.17 r1198 has a Buffer Overflow via a long prefix that is mishandled in bns_fasta2bntseq and bns_dump at btnseq.c. |
CVE-2019-11378 | High | 8.8 | 2019-04-20 | An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitra… |
CVE-2019-11377 | High | 8.8 | 2019-04-20 | wcms/wex/finder/action.php in WCMS v0.3.2 has a Arbitrary File Upload Vulnerability via developer/finder because .php is a valid extension according to the fm_… |
CVE-2019-11376 | High | 7.2 | 2019-04-20 | SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box. NOTE: the vendor indicates that there was an… |
CVE-2019-11375 | Medium | 6.5 | 2019-04-20 | Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI. |
CVE-2019-11374 | High | 8.8 | 2019-04-20 | 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI. |
CVE-2019-11373 | Medium | 6.5 | 2019-04-20 | An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. |
CVE-2019-11372 | Medium | 6.5 | 2019-04-20 | An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. |
CVE-2019-11366 | Medium | 5.9 | 2019-04-20 | An issue was discovered in atftpd in atftp 0.7.1. It does not lock the thread_list_mutex mutex before assigning the current thread data structure. As a result… |
CVE-2019-11365 | Critical | 9.8 | 2019-04-20 | An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely imp… |
CVE-2019-11362 | Critical | 9.8 | 2019-04-20 | app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI. |
CVE-2019-11359 | Medium | 6.1 | 2019-04-20 | Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project par… |
CVE-2019-11358 | Medium | 6.1 | 2019-04-20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an… |
CVE-2019-11354 | High | 7.8 | 2019-04-19 | The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to e… |
CVE-2019-11351 | High | 8.8 | 2019-04-19 | TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework. |
CVE-2019-11350 | Critical | 9.8 | 2019-04-19 | CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the proxy configuratio… |
CVE-2019-2041 | High | 7.3 | 2019-04-19 | In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure default value. This co… |
CVE-2019-2040 | Medium | 5.0 | 2019-04-19 | In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2019-2039 | Medium | 5.0 | 2019-04-19 | In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2019-2038 | Medium | 5.5 | 2019-04-19 | In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2019-2037 | High | 7.5 | 2019-04-19 | In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. This could lead to remote information dis… |
CVE-2019-2035 | High | 7.8 | 2019-04-19 | In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2019-2034 | High | 7.8 | 2019-04-19 | In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in th… |
CVE-2019-2033 | High | 7.8 | 2019-04-19 | In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2019-2032 | High | 7.8 | 2019-04-19 | In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escal… |
CVE-2019-2031 | High | 7.8 | 2019-04-19 | In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of… |
CVE-2019-2030 | Critical | 9.8 | 2019-04-19 | In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional execution p… |
CVE-2019-2029 | High | 8.8 | 2019-04-19 | In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no additional… |
CVE-2019-2028 | High | 8.8 | 2019-04-19 | In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execution with no additional execution privile… |
CVE-2019-2027 | High | 8.8 | 2019-04-19 | In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no addi… |
CVE-2019-2026 | High | 7.8 | 2019-04-19 | In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalatio… |
CVE-2019-9841 | Medium | 6.1 | 2019-04-19 | Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL. |
CVE-2019-5008 | High | 7.5 | 2019-04-19 | hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver. |
CVE-2019-11344 | Critical | 9.8 | 2019-04-19 | data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a… |
CVE-2019-10886 | Medium | 5.9 | 2019-04-19 | An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable… |
CVE-2019-4055 | High | 7.5 | 2019-04-19 | IBM MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, and 9.1.0.0 through 9.1.1 is vulnerable to a denial of service attack within the TLS key renegotiatio… |
CVE-2019-11340 | Medium | 5.9 | 2019-04-19 | util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is ena… |
CVE-2019-10245 | High | 7.5 | 2019-04-19 | In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes… |
CVE-2019-11339 | High | 8.8 | 2019-04-19 | The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service (… |
CVE-2019-11338 | High | 8.8 | 2019-04-19 | libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service (NULL p… |
CVE-2019-9161 | Critical | 9.8 | 2019-04-18 | WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a Remote Code Execution issue allowing remote attackers to achieve full access to th… |
CVE-2019-11332 | High | 8.8 | 2019-04-18 | MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail tr… |
CVE-2019-9160 | Critical | 9.8 | 2019-04-18 | WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH (on TCP… |
CVE-2019-11331 | High | 8.1 | 2019-04-18 | Network Time Protocol (NTP), as specified in RFC 5905, uses port 123 even for modes where a fixed port number is not required, which makes it easier for remote… |
CVE-2019-11015 | Medium | 6.8 | 2019-04-18 | A vulnerability was found in the MIUI OS version 10.1.3.0 that allows a physically proximate attacker to bypass Lockscreen based authentication via the Wallpap… |
CVE-2019-11324 | High | 7.5 | 2019-04-18 | The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificate… |
CVE-2019-3719 | High | 8.0 | 2019-04-18 | Dell SupportAssist Client versions prior to 3.2.0.90 contain a remote code execution vulnerability. An unauthenticated attacker, sharing the network access lay… |
CVE-2019-3718 | High | 8.8 | 2019-04-18 | Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially… |
CVE-2019-10893 | Medium | 4.8 | 2019-04-18 | CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XSS for Admin Email… |
CVE-2019-11084 | Medium | 6.1 | 2019-04-18 | GAuth 0.9.9 beta has stored XSS that shows a popup repeatedly and discloses cookies. |
CVE-2019-9005 | Medium | 6.5 | 2019-04-18 | The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal. |