2019 CVEs (page 141)
Page 141 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10903 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash. This was addressed in epan/dissectors/packet-dcerpc-spoolss… |
CVE-2019-10902 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely. |
CVE-2019-10901 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by handling file d… |
CVE-2019-10900 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan/dissectors/file-rbm.c by handling unknown object types safely. |
CVE-2019-10899 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This was addressed in epan/dissectors/packet-srvloc.c by preventing… |
CVE-2019-10898 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Informat… |
CVE-2019-10897 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in wh… |
CVE-2019-10896 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed in epan/dissectors/packet-dof.c by properly handling… |
CVE-2019-10895 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by improving data val… |
CVE-2019-10894 | High | 7.5 | 2019-04-09 | In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring t… |
CVE-2019-0821 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera… |
CVE-2019-0816 | Medium | 5.1 | 2019-04-09 | A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Key… |
CVE-2019-0809 | High | 7.8 | 2019-04-09 | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link librar… |
CVE-2019-0808 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2019-0804 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosur… |
CVE-2019-0798 | Medium | 6.1 | 2019-04-09 | A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business… |
CVE-2019-0797 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2019-0784 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory, aka 'Windows ActiveX Remote Code Executi… |
CVE-2019-0783 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2019-0782 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2019-0780 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerabilit… |
CVE-2019-0779 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. |
CVE-2019-0778 | Medium | 5.4 | 2019-04-09 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2019-0777 | Medium | 5.4 | 2019-04-09 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross… |
CVE-2019-0776 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerabili… |
CVE-2019-0775 | Medium | 4.7 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2019-0774 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-0773 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
CVE-2019-0772 | High | 8.8 | 2019-04-09 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution… |
CVE-2019-0771 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
CVE-2019-0770 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
CVE-2019-9844 | Medium | 6.1 | 2019-04-09 | simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI. |
CVE-2019-0769 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Cor… |
CVE-2019-0768 | Medium | 4.3 | 2019-04-09 | A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions… |
CVE-2019-0767 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated… |
CVE-2019-0766 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability… |
CVE-2019-0765 | High | 8.8 | 2019-04-09 | A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'. |
CVE-2019-0763 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerabili… |
CVE-2019-0762 | Medium | 4.3 | 2019-04-09 | A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Featur… |
CVE-2019-0761 | Medium | 6.5 | 2019-04-09 | A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet… |
CVE-2019-0759 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Informatio… |
CVE-2019-0757 | Medium | 6.5 | 2019-04-09 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder s… |
CVE-2019-0756 | High | 8.8 | 2019-04-09 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab… |
CVE-2019-0755 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2019-0754 | Medium | 5.5 | 2019-04-09 | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. |
CVE-2019-0748 | High | 7.8 | 2019-04-09 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office A… |
CVE-2019-0746 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine In… |
CVE-2019-0726 | Critical | 9.8 | 2019-04-09 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie… |
CVE-2019-0704 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera… |
CVE-2019-0703 | Medium | 6.5 | 2019-04-09 | An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnera… |
CVE-2019-0702 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera… |
CVE-2019-0701 | Medium | 6.8 | 2019-04-09 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s… |
CVE-2019-0698 | Critical | 9.8 | 2019-04-09 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie… |
CVE-2019-0697 | Critical | 9.8 | 2019-04-09 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Clie… |
CVE-2019-0696 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege V… |
CVE-2019-0695 | Medium | 6.8 | 2019-04-09 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s… |
CVE-2019-0694 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privile… |
CVE-2019-0693 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privile… |
CVE-2019-0692 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privile… |
CVE-2019-0690 | Medium | 6.8 | 2019-04-09 | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a gu… |
CVE-2019-0689 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privile… |
CVE-2019-0683 | Medium | 5.9 | 2019-04-09 | An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request… |
CVE-2019-0682 | High | 7.8 | 2019-04-09 | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privile… |
CVE-2019-0680 | High | 7.5 | 2019-04-09 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2019-0678 | Medium | 6.8 | 2019-04-09 | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access inf… |
CVE-2019-11026 | Medium | 6.5 | 2019-04-08 | FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc. |
CVE-2019-11025 | Medium | 5.4 | 2019-04-08 | In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the Vi… |
CVE-2019-11024 | Medium | 5.5 | 2019-04-08 | The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion. |
CVE-2019-11023 | High | 8.8 | 2019-04-08 | The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv. |
CVE-2019-0667 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution… |
CVE-2019-0666 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution… |
CVE-2019-0665 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution… |
CVE-2019-0639 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption… |
CVE-2019-0617 | High | 7.8 | 2019-04-08 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-0614 | Medium | 6.5 | 2019-04-08 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-0612 | Medium | 5.3 | 2019-04-08 | A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerabil… |
CVE-2019-0611 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-0609 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corr… |
CVE-2019-0603 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully ex… |
CVE-2019-0592 | High | 7.5 | 2019-04-08 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-0211 | High | 7.8 | 2019-04-08 | In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including… |
CVE-2019-11018 | Critical | 9.8 | 2019-04-08 | application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change. |
CVE-2019-11016 | Medium | 6.1 | 2019-04-08 | Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect. |
CVE-2019-0217 | High | 7.5 | 2019-04-08 | In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credent… |
CVE-2019-1798 | Medium | 5.5 | 2019-04-08 | A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unaut… |
CVE-2019-1788 | Medium | 5.5 | 2019-04-08 | A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow… |
CVE-2019-11014 | Critical | 9.8 | 2019-04-08 | The VStarCam vstc.vscam.client library and vstc.vscam shared object, as used in the Eye4 application (for Android, iOS, and Windows), do not prevent spoofing o… |
CVE-2019-0215 | High | 7.5 | 2019-04-08 | In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to… |
CVE-2019-1787 | Medium | 5.5 | 2019-04-08 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unau… |
CVE-2019-1786 | Medium | 5.5 | 2019-04-08 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an un… |
CVE-2019-1785 | High | 7.8 | 2019-04-08 | A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote… |
CVE-2019-11010 | Medium | 6.5 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of se… |
CVE-2019-11009 | High | 8.1 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to caus… |
CVE-2019-11008 | High | 8.8 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers… |
CVE-2019-11007 | High | 8.1 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to caus… |
CVE-2019-11006 | Critical | 9.1 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to ca… |
CVE-2019-11005 | Critical | 9.8 | 2019-04-08 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attacke… |
CVE-2019-11004 | Medium | 6.1 | 2019-04-08 | In Materialize through 1.0.0, XSS is possible via the Toast feature. |
CVE-2019-11003 | Medium | 6.1 | 2019-04-08 | In Materialize through 1.0.0, XSS is possible via the Autocomplete feature. |
CVE-2019-11002 | Medium | 6.1 | 2019-04-08 | In Materialize through 1.0.0, XSS is possible via the Tooltip feature. |