2019 CVEs (page 154)
Page 154 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8372 | High | 7.0 | 2019-02-18 | The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory… |
CVE-2019-6453 | High | 8.1 | 2019-02-18 | mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that… |
CVE-2019-8902 | Medium | 5.7 | 2019-02-18 | An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI. |
CVE-2019-8436 | Medium | 5.4 | 2019-02-18 | imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter. |
CVE-2019-8435 | Medium | 4.8 | 2019-02-18 | admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. |
CVE-2019-8434 | Medium | 6.1 | 2019-02-18 | In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter. |
CVE-2019-8433 | High | 7.5 | 2019-02-18 | JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file. |
CVE-2019-8432 | Medium | 6.1 | 2019-02-18 | In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter. |
CVE-2019-8429 | Critical | 9.8 | 2019-02-18 | ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter. |
CVE-2019-8428 | Critical | 9.8 | 2019-02-18 | ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value. |
CVE-2019-8427 | Critical | 9.8 | 2019-02-18 | daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. |
CVE-2019-8426 | Medium | 6.1 | 2019-02-18 | skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter. |
CVE-2019-8425 | Medium | 6.1 | 2019-02-18 | includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. |
CVE-2019-8424 | Critical | 9.8 | 2019-02-18 | ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. |
CVE-2019-8423 | Critical | 9.8 | 2019-02-18 | ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter. |
CVE-2019-8422 | High | 7.2 | 2019-02-17 | A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php. |
CVE-2019-8421 | High | 7.2 | 2019-02-17 | upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter. |
CVE-2019-8419 | Medium | 6.1 | 2019-02-17 | VNote 2.2 has XSS via a new text note. |
CVE-2019-8418 | High | 8.8 | 2019-02-17 | SeaCMS 7.2 mishandles member.php?mod=repsw4 requests. |
CVE-2019-7649 | High | 7.5 | 2019-02-17 | global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing. |
CVE-2019-8413 | Medium | 5.5 | 2019-02-17 | On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a… |
CVE-2019-8412 | High | 8.8 | 2019-02-17 | FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-… |
CVE-2019-8411 | High | 7.5 | 2019-02-17 | admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal. |
CVE-2019-8408 | Medium | 4.9 | 2019-02-17 | OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice. |
CVE-2019-8407 | Medium | 6.5 | 2019-02-17 | HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI. |
CVE-2019-8393 | Critical | 9.8 | 2019-02-17 | Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled. |
CVE-2019-8400 | Medium | 6.1 | 2019-02-17 | ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter. |
CVE-2019-8398 | Medium | 6.5 | 2019-02-17 | An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c. |
CVE-2019-8397 | Medium | 6.5 | 2019-02-17 | An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c. |
CVE-2019-8396 | Medium | 6.5 | 2019-02-17 | A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5… |
CVE-2019-8395 | Critical | 9.8 | 2019-02-17 | An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a requ… |
CVE-2019-8394 | Medium | 6.5 | 2019-02-17 | Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization. |
CVE-2019-8392 | High | 7.5 | 2019-02-17 | An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via… |
CVE-2019-7399 | High | 7.4 | 2019-02-17 | Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages. |
CVE-2019-8389 | High | 8.1 | 2019-02-17 | A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, acce… |
CVE-2019-8383 | High | 7.8 | 2019-02-17 | An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by se… |
CVE-2019-8382 | High | 8.8 | 2019-02-17 | An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap… |
CVE-2019-8381 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to… |
CVE-2019-8380 | High | 8.8 | 2019-02-17 | An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It ca… |
CVE-2019-8379 | High | 7.8 | 2019-02-17 | An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be trigger… |
CVE-2019-8378 | High | 8.8 | 2019-02-17 | An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Codecs/Ap4BitStream.cpp, a similar issue to… |
CVE-2019-8377 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by s… |
CVE-2019-8376 | High | 7.8 | 2019-02-17 | An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by send… |
CVE-2019-8363 | Medium | 6.1 | 2019-02-16 | Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value. |
CVE-2019-8362 | High | 7.5 | 2019-02-16 | DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip… |
CVE-2019-8361 | Medium | 6.1 | 2019-02-16 | PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection. |
CVE-2019-8360 | Critical | 9.8 | 2019-02-16 | Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter. |
CVE-2019-8358 | High | 8.1 | 2019-02-16 | In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled. |
CVE-2019-8357 | Medium | 5.5 | 2019-02-15 | An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference. |
CVE-2019-8356 | Medium | 5.5 | 2019-02-15 | An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the staticall… |
CVE-2019-8355 | Medium | 5.5 | 2019-02-15 | An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps mall… |
CVE-2019-8354 | Medium | 5.0 | 2019-02-15 | An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer… |
CVE-2019-4059 | Critical | 9.8 | 2019-02-15 | IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unaut… |
CVE-2019-0267 | High | 8.8 | 2019-02-15 | SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lea… |
CVE-2019-0266 | High | 7.5 | 2019-02-15 | Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file… |
CVE-2019-0265 | Medium | 4.9 | 2019-02-15 | SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Fixed in… |
CVE-2019-0262 | Medium | 5.4 | 2019-02-15 | SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Sc… |
CVE-2019-0261 | Critical | 9.8 | 2019-02-15 | Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanc… |
CVE-2019-0259 | Critical | 9.8 | 2019-02-15 | SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format valida… |
CVE-2019-0258 | High | 8.8 | 2019-02-15 | SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. |
CVE-2019-0257 | High | 8.8 | 2019-02-15 | Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7… |
CVE-2019-0256 | Medium | 5.5 | 2019-02-15 | Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted. |
CVE-2019-0255 | High | 8.1 | 2019-02-15 | SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system… |
CVE-2019-0254 | Medium | 5.4 | 2019-02-15 | SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnera… |
CVE-2019-0251 | Medium | 6.1 | 2019-02-15 | The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting… |
CVE-2019-8347 | High | 8.8 | 2019-02-15 | BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=user URI. |
CVE-2019-6974 | High | 8.1 | 2019-02-15 | In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-a… |
CVE-2019-8345 | Medium | 4.2 | 2019-02-15 | The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local n… |
CVE-2019-8343 | High | 7.8 | 2019-02-15 | In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c. |
CVE-2019-8341 | Critical | 9.8 | 2019-02-15 | An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a t… |
CVE-2019-6589 | Medium | 6.1 | 2019-02-14 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undiscl… |
CVE-2019-8337 | Medium | 5.3 | 2019-02-13 | In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked. |
CVE-2019-5916 | Critical | 9.8 | 2019-02-13 | Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earl… |
CVE-2019-5915 | Medium | 6.1 | 2019-02-13 | Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… |
CVE-2019-5914 | Medium | 5.3 | 2019-02-13 | V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same n… |
CVE-2019-5913 | High | 7.8 | 2019-02-13 | Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Tr… |
CVE-2019-5912 | High | 7.8 | 2019-02-13 | Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via… |
CVE-2019-5911 | High | 7.8 | 2019-02-13 | Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via… |
CVE-2019-5910 | High | 7.5 | 2019-02-13 | Directory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2019-5909 | Critical | 9.8 | 2019-02-13 | License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.01.00 - R4.04.00), P… |
CVE-2019-3610 | Medium | 5.6 | 2019-02-13 | Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data vi… |
CVE-2019-8335 | Medium | 6.1 | 2019-02-13 | An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&id=[XSS]. |
CVE-2019-8334 | Medium | 6.1 | 2019-02-13 | An issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c=Channel&m=Home&viewid=[XSS]. |
CVE-2019-3782 | High | 7.8 | 2019-02-13 | Cloud Foundry CredHub CLI, versions prior to 2.2.1, inadvertently writes authentication credentials provided via environment variables to its persistent config… |
CVE-2019-8319 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8318 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8317 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8316 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8315 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8314 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8313 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-8312 | High | 8.8 | 2019-02-13 | An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code… |
CVE-2019-6545 | High | 7.5 | 2019-02-13 | AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. An unaut… |
CVE-2019-6543 | Critical | 9.8 | 2019-02-13 | AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update. Code is… |
CVE-2019-6541 | High | 7.8 | 2019-02-13 | A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code execution. Mat Powell, Ziad… |
CVE-2019-6539 | High | 7.8 | 2019-02-13 | Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitrary code execution… |
CVE-2019-6537 | High | 7.8 | 2019-02-13 | Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files… |
CVE-2019-8308 | High | 8.2 | 2019-02-12 | Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executabl… |
CVE-2019-7550 | Medium | 5.3 | 2019-02-12 | In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function. If a register/check/username?user… |
CVE-2019-1688 | High | 7.1 | 2019-02-12 | A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized acc… |