2019 CVEs (page 143)
Page 143 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1003071 | High | 8.8 | 2019-04-04 | Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with acces… |
CVE-2019-1003070 | High | 8.8 | 2019-04-04 | Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with ac… |
CVE-2019-1003069 | High | 8.8 | 2019-04-04 | Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users wi… |
CVE-2019-1003068 | High | 8.8 | 2019-04-04 | Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with E… |
CVE-2019-1003067 | High | 8.8 | 2019-04-04 | Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read… |
CVE-2019-1003066 | High | 8.8 | 2019-04-04 | Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to… |
CVE-2019-1003065 | High | 8.8 | 2019-04-04 | Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by user… |
CVE-2019-1003064 | High | 8.8 | 2019-04-04 | Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with acc… |
CVE-2019-1003063 | High | 8.8 | 2019-04-04 | Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by user… |
CVE-2019-1003062 | High | 8.8 | 2019-04-04 | Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by… |
CVE-2019-1003061 | High | 8.8 | 2019-04-04 | Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users wit… |
CVE-2019-1003060 | High | 8.8 | 2019-04-04 | Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with… |
CVE-2019-1003059 | Medium | 6.5 | 2019-04-04 | A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with Overall/Read permission… |
CVE-2019-1003058 | Medium | 6.5 | 2019-04-04 | A cross-site request forgery vulnerability in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers to initiate… |
CVE-2019-1003057 | High | 8.8 | 2019-04-04 | Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with a… |
CVE-2019-1003056 | High | 8.8 | 2019-04-04 | Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended… |
CVE-2019-1003055 | High | 8.8 | 2019-04-04 | Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with acces… |
CVE-2019-1003054 | High | 8.8 | 2019-04-04 | Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended… |
CVE-2019-1003053 | High | 8.8 | 2019-04-04 | Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read perm… |
CVE-2019-1003052 | High | 8.8 | 2019-04-04 | Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed b… |
CVE-2019-1003051 | High | 8.8 | 2019-04-04 | Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the m… |
CVE-2019-10844 | Critical | 9.8 | 2019-04-04 | nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted. |
CVE-2019-10842 | Critical | 9.8 | 2019-04-04 | Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can craft… |
CVE-2019-10723 | Medium | 5.5 | 2019-04-03 | An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitial… |
CVE-2019-10240 | High | 8.1 | 2019-04-03 | Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts c… |
CVE-2019-5423 | High | 7.5 | 2019-04-03 | Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker. |
CVE-2019-5422 | Medium | 6.1 | 2019-04-03 | XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the se… |
CVE-2019-5421 | Critical | 9.8 | 2019-04-03 | Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specif… |
CVE-2019-10261 | Medium | 4.8 | 2019-04-03 | CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameserv… |
CVE-2019-4014 | High | 7.8 | 2019-04-03 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authentica… |
CVE-2019-10673 | High | 8.8 | 2019-04-03 | A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become admin and sub… |
CVE-2019-6506 | Critical | 9.8 | 2019-04-02 | SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection. |
CVE-2019-10714 | Medium | 6.5 | 2019-04-02 | LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV. |
CVE-2019-6531 | High | 8.1 | 2019-04-02 | An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.131… |
CVE-2019-10708 | Critical | 9.8 | 2019-04-02 | S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter. |
CVE-2019-10707 | Critical | 9.8 | 2019-04-02 | MKCMS V5.0 has SQL injection via the bplay.php play parameter. |
CVE-2019-9946 | High | 7.5 | 2019-04-02 | Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI '… |
CVE-2019-7477 | High | 7.5 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled… |
CVE-2019-7475 | Critical | 9.8 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing s… |
CVE-2019-7474 | Medium | 6.5 | 2019-04-02 | A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate wi… |
CVE-2019-10692 | Critical | 9.8 | 2019-04-02 | In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. |
CVE-2019-5524 | High | 8.8 | 2019-04-02 | VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This… |
CVE-2019-5515 | High | 8.8 | 2019-04-02 | VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerab… |
CVE-2019-1010260 | High | 8.1 | 2019-04-02 | Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a MITM. This attack is exp… |
CVE-2019-9759 | Critical | 9.8 | 2019-04-02 | An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_hand… |
CVE-2019-4093 | Medium | 4.4 | 2019-04-02 | IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interfa… |
CVE-2019-4080 | Medium | 6.5 | 2019-04-02 | IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A r… |
CVE-2019-4043 | High | 7.1 | 2019-04-02 | IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remot… |
CVE-2019-9193 | High | 7.2 | 2019-04-01 | In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary c… |
CVE-2019-5519 | Medium | 6.8 | 2019-04-01 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), F… |
CVE-2019-5518 | Medium | 6.8 | 2019-04-01 | VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), F… |
CVE-2019-5514 | High | 8.8 | 2019-04-01 | VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker ma… |
CVE-2019-3792 | Medium | 6.8 | 2019-04-01 | Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL… |
CVE-2019-6715 | High | 7.5 | 2019-04-01 | pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionC… |
CVE-2019-3489 | High | 7.5 | 2019-04-01 | An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured t… |
CVE-2019-8956 | High | 7.8 | 2019-04-01 | In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL f… |
CVE-2019-5523 | Critical | 9.8 | 2019-04-01 | VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider Portals. S… |
CVE-2019-9132 | High | 8.8 | 2019-04-01 | Remote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially crafted link in the message window. This affects KaKaoTalk wind… |
CVE-2019-10686 | Critical | 10.0 | 2019-04-01 | An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request v… |
CVE-2019-5891 | Critical | 9.8 | 2019-04-01 | An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user… |
CVE-2019-5890 | High | 8.8 | 2019-04-01 | An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access t… |
CVE-2019-5889 | High | 7.5 | 2019-04-01 | An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977. |
CVE-2019-5888 | Medium | 6.1 | 2019-04-01 | Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977. |
CVE-2019-10684 | Critical | 9.8 | 2019-04-01 | Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=confi… |
CVE-2019-3876 | Medium | 6.3 | 2019-04-01 | A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Opt… |
CVE-2019-3836 | Medium | 5.9 | 2019-04-01 | It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggere… |
CVE-2019-1002101 | Medium | 6.4 | 2019-04-01 | The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the contai… |
CVE-2019-1002100 | Medium | 6.5 | 2019-04-01 | In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a spe… |
CVE-2019-10678 | High | 7.5 | 2019-03-31 | Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options. |
CVE-2019-10672 | Critical | 9.8 | 2019-03-31 | treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. |
CVE-2019-10664 | Critical | 9.8 | 2019-03-31 | Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp. |
CVE-2019-10663 | High | 8.8 | 2019-03-30 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup AP… |
CVE-2019-10662 | High | 8.8 | 2019-03-30 | Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-ba… |
CVE-2019-10661 | Critical | 9.8 | 2019-03-30 | On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password. |
CVE-2019-10660 | High | 8.8 | 2019-03-30 | Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?c… |
CVE-2019-10659 | High | 8.8 | 2019-03-30 | Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /… |
CVE-2019-10658 | High | 8.8 | 2019-03-30 | Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/cont… |
CVE-2019-10657 | Medium | 6.5 | 2019-03-30 | Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config req… |
CVE-2019-10656 | High | 8.8 | 2019-03-30 | Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci… |
CVE-2019-10655 | Critical | 9.8 | 2019-03-30 | Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticate… |
CVE-2019-10654 | Medium | 5.5 | 2019-03-30 | The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (i… |
CVE-2019-10652 | High | 7.2 | 2019-03-30 | An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature. |
CVE-2019-10650 | High | 8.1 | 2019-03-30 | In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial… |
CVE-2019-10649 | Medium | 5.5 | 2019-03-30 | In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via… |
CVE-2019-10648 | Critical | 9.8 | 2019-03-30 | Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an… |
CVE-2019-10647 | Critical | 9.8 | 2019-03-30 | ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[]… |
CVE-2019-10646 | Medium | 6.1 | 2019-03-30 | Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaS… |
CVE-2019-10644 | High | 8.8 | 2019-03-30 | An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account. |
CVE-2019-9922 | High | 7.5 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files. |
CVE-2019-9921 | Medium | 6.5 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a differen… |
CVE-2019-9920 | High | 8.8 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of anothe… |
CVE-2019-9919 | Medium | 5.4 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the… |
CVE-2019-9918 | Critical | 9.1 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQ… |
CVE-2019-9695 | Medium | 6.8 | 2019-03-29 | Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an indiv… |
CVE-2019-9605 | Medium | 5.4 | 2019-03-29 | PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload. |
CVE-2019-9604 | High | 8.8 | 2019-03-29 | PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions. |
CVE-2019-6481 | High | 7.5 | 2019-03-29 | Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten… |
CVE-2019-10477 | High | 7.5 | 2019-03-29 | The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions. |
CVE-2019-10276 | Critical | 9.8 | 2019-03-29 | Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg c… |
CVE-2019-10269 | Critical | 9.8 | 2019-03-29 | BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt… |