2019 CVEs (page 147)
Page 147 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7299 | Medium | 6.1 | 2019-03-21 | A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress al… |
CVE-2019-7223 | Medium | 5.4 | 2019-03-21 | InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. T… |
CVE-2019-7222 | Medium | 5.5 | 2019-03-21 | The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. |
CVE-2019-7221 | High | 7.8 | 2019-03-21 | The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. |
CVE-2019-7161 | High | 7.5 | 2019-03-21 | An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacit… |
CVE-2019-6973 | High | 7.5 | 2019-03-21 | Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured fo… |
CVE-2019-6970 | High | 7.5 | 2019-03-21 | Moodle 3.5.x before 3.5.4 allows SSRF. |
CVE-2019-6967 | High | 8.8 | 2019-03-21 | AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF. |
CVE-2019-6778 | High | 7.8 | 2019-03-21 | In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow. |
CVE-2019-6735 | Medium | 6.5 | 2019-03-21 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to explo… |
CVE-2019-6734 | Medium | 6.5 | 2019-03-21 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to e… |
CVE-2019-6733 | Medium | 6.5 | 2019-03-21 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to e… |
CVE-2019-6732 | Medium | 6.5 | 2019-03-21 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to e… |
CVE-2019-6731 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit t… |
CVE-2019-6730 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this… |
CVE-2019-6729 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this… |
CVE-2019-6728 | Medium | 6.5 | 2019-03-21 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to explo… |
CVE-2019-6727 | High | 8.8 | 2019-03-21 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this… |
CVE-2019-6724 | High | 7.8 | 2019-03-21 | The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unp… |
CVE-2019-6716 | Critical | 9.4 | 2019-03-21 | An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to e… |
CVE-2019-6714 | Critical | 9.8 | 2019-03-21 | An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticate… |
CVE-2019-6702 | Medium | 5.9 | 2019-03-21 | The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier. |
CVE-2019-6690 | High | 7.5 | 2019-03-21 | python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg… |
CVE-2019-6501 | Medium | 5.5 | 2019-03-21 | In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations. |
CVE-2019-6492 | Medium | 5.5 | 2019-03-21 | SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401… |
CVE-2019-6454 | Medium | 5.5 | 2019-03-21 | An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporar… |
CVE-2019-6441 | Critical | 9.8 | 2019-03-21 | An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset… |
CVE-2019-6282 | High | 8.8 | 2019-03-21 | ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity UR… |
CVE-2019-6279 | High | 8.8 | 2019-03-21 | ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=… |
CVE-2019-6275 | High | 8.8 | 2019-03-21 | Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code. |
CVE-2019-6274 | High | 8.8 | 2019-03-21 | Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via di… |
CVE-2019-6273 | Medium | 6.5 | 2019-03-21 | download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files. |
CVE-2019-6272 | High | 8.8 | 2019-03-21 | Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code. |
CVE-2019-6116 | High | 7.8 | 2019-03-21 | In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution. |
CVE-2019-5885 | High | 7.5 | 2019-03-21 | Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other sec… |
CVE-2019-5729 | High | 8.1 | 2019-03-21 | Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks. |
CVE-2019-5723 | Critical | 9.8 | 2019-03-21 | An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigen… |
CVE-2019-5722 | Critical | 9.8 | 2019-03-21 | An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, inc… |
CVE-2019-5417 | High | 7.5 | 2019-03-21 | A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server. |
CVE-2019-5416 | High | 7.5 | 2019-03-21 | A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server. |
CVE-2019-5415 | High | 7.5 | 2019-03-21 | A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allow… |
CVE-2019-5414 | High | 8.1 | 2019-03-21 | If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in… |
CVE-2019-5413 | Critical | 9.8 | 2019-03-21 | An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1. |
CVE-2019-5011 | Medium | 5.5 | 2019-03-21 | An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to… |
CVE-2019-4094 | High | 7.8 | 2019-03-21 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially g… |
CVE-2019-3862 | High | 7.3 | 2019-03-21 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are par… |
CVE-2019-3859 | Critical | 9.1 | 2019-03-21 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who… |
CVE-2019-3832 | Medium | 5.5 | 2019-03-21 | It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function… |
CVE-2019-3497 | High | 8.8 | 2019-03-21 | An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools component is vulnerable to… |
CVE-2019-3496 | High | 8.8 | 2019-03-21 | An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostic_tools_controller Diagnostic Tools Controller is vulnerable… |
CVE-2019-3495 | High | 8.8 | 2019-03-21 | An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an a… |
CVE-2019-0191 | Medium | 6.5 | 2019-03-21 | Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the co… |
CVE-2019-6149 | Medium | 6.7 | 2019-03-18 | An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with… |
CVE-2019-5616 | Medium | 5.3 | 2019-03-15 | CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mec… |
CVE-2019-9835 | Critical | 9.6 | 2019-03-15 | The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted… |
CVE-2019-9834 | Medium | 6.1 | 2019-03-15 | The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Succe… |
CVE-2019-9833 | High | 7.5 | 2019-03-15 | The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests. |
CVE-2019-9832 | High | 7.5 | 2019-03-15 | The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a… |
CVE-2019-9831 | High | 7.5 | 2019-03-15 | The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /?Key=PhoneRequestAu… |
CVE-2019-9829 | High | 8.8 | 2019-03-15 | Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because templa… |
CVE-2019-9825 | Critical | 9.8 | 2019-03-14 | FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file e… |
CVE-2019-4034 | High | 8.8 | 2019-03-14 | IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit serv… |
CVE-2019-3833 | High | 7.5 | 2019-03-14 | Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote… |
CVE-2019-3816 | High | 7.5 | 2019-03-14 | Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root d… |
CVE-2019-0135 | High | 7.8 | 2019-03-14 | Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to po… |
CVE-2019-0129 | High | 7.8 | 2019-03-14 | Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2019-0122 | High | 7.1 | 2019-03-14 | Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially… |
CVE-2019-0121 | High | 7.8 | 2019-03-14 | Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2019-9787 | High | 8.8 | 2019-03-14 | WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occ… |
CVE-2019-9785 | High | 7.8 | 2019-03-14 | gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.top.require('child_p… |
CVE-2019-9779 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-… |
CVE-2019-9778 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec. |
CVE-2019-9777 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec. |
CVE-2019-9776 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-97… |
CVE-2019-9775 | Critical | 9.1 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. |
CVE-2019-9774 | Critical | 9.1 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c. |
CVE-2019-9773 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimen… |
CVE-2019-9772 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec. |
CVE-2019-9771 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c. |
CVE-2019-9770 | High | 7.5 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimen… |
CVE-2019-9769 | High | 8.8 | 2019-03-14 | PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator. |
CVE-2019-9768 | High | 7.5 | 2019-03-14 | Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers… |
CVE-2019-9767 | High | 7.8 | 2019-03-14 | Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .w… |
CVE-2019-9766 | High | 7.8 | 2019-03-14 | Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .m… |
CVE-2019-9765 | Medium | 6.1 | 2019-03-14 | In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comme… |
CVE-2019-9762 | Critical | 9.8 | 2019-03-14 | A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication. |
CVE-2019-9761 | High | 7.5 | 2019-03-14 | An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs be… |
CVE-2019-9760 | Critical | 9.8 | 2019-03-14 | FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted respo… |
CVE-2019-9754 | Medium | 5.5 | 2019-03-13 | An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byte out of bounds write in the end_macro… |
CVE-2019-9752 | Medium | 5.4 | 2019-03-13 | An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as… |
CVE-2019-9751 | Medium | 4.8 | 2019-03-13 | An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may m… |
CVE-2019-6601 | Medium | 5.5 | 2019-03-13 | In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and… |
CVE-2019-6600 | Medium | 6.1 | 2019-03-13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users… |
CVE-2019-6599 | Medium | 6.1 | 2019-03-13 | In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may re… |
CVE-2019-6598 | Medium | 4.3 | 2019-03-13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic M… |
CVE-2019-6597 | High | 7.2 | 2019-03-13 | In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands… |
CVE-2019-6596 | High | 7.5 | 2019-03-13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS sessi… |
CVE-2019-3785 | High | 8.1 | 2019-03-13 | Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read perm… |
CVE-2019-3716 | High | 7.8 | 2019-03-13 | RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA… |
CVE-2019-3715 | High | 7.8 | 2019-03-13 | RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log… |