2019 CVEs (page 157)
Page 157 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7329 | Medium | 6.1 | 2019-02-04 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishan… |
CVE-2019-7328 | Medium | 6.1 | 2019-02-04 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' para… |
CVE-2019-7327 | Medium | 6.1 | 2019-02-04 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' para… |
CVE-2019-7326 | Medium | 6.1 | 2019-02-04 | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' p… |
CVE-2019-7325 | Medium | 6.1 | 2019-02-04 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SEL… |
CVE-2019-7324 | Medium | 6.1 | 2019-02-04 | app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting. |
CVE-2019-3813 | High | 7.5 | 2019-02-04 | Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of serv… |
CVE-2019-3461 | High | 7.0 | 2019-02-04 | Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via… |
CVE-2019-7323 | High | 7.5 | 2019-02-04 | GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to… |
CVE-2019-7317 | Medium | 5.3 | 2019-02-04 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. |
CVE-2019-7316 | Critical | 9.8 | 2019-02-04 | An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability. |
CVE-2019-7314 | Critical | 9.8 | 2019-02-04 | liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-Afte… |
CVE-2019-7313 | Medium | 6.1 | 2019-02-03 | www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects… |
CVE-2019-7312 | Medium | 5.3 | 2019-02-03 | Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1… |
CVE-2019-7310 | High | 7.8 | 2019-02-03 | In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to caus… |
CVE-2019-7309 | Medium | 5.5 | 2019-02-03 | In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs ar… |
CVE-2019-7308 | Medium | 5.6 | 2019-02-01 | kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases… |
CVE-2019-3604 | Medium | 4.8 | 2019-02-01 | Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authentica… |
CVE-2019-7301 | High | 7.2 | 2019-02-01 | Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the index.cgi?action=View_Ce… |
CVE-2019-7300 | High | 7.2 | 2019-02-01 | Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fiel… |
CVE-2019-7298 | High | 8.1 | 2019-02-01 | An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS co… |
CVE-2019-7297 | Critical | 9.8 | 2019-01-31 | An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS co… |
CVE-2019-7296 | Medium | 6.1 | 2019-01-31 | typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula. |
CVE-2019-7295 | Medium | 6.1 | 2019-01-31 | typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula. |
CVE-2019-7283 | High | 7.4 | 2019-01-31 | An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rc… |
CVE-2019-7282 | Medium | 5.9 | 2019-01-31 | In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. Th… |
CVE-2019-6111 | Medium | 5.9 | 2019-01-31 | An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the c… |
CVE-2019-6110 | Medium | 6.8 | 2019-01-31 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the… |
CVE-2019-6109 | Medium | 6.8 | 2019-01-31 | An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can emplo… |
CVE-2019-4040 | Medium | 6.1 | 2019-01-31 | IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the int… |
CVE-2019-7250 | Medium | 6.1 | 2019-01-31 | An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user… |
CVE-2019-7249 | Critical | 9.8 | 2019-01-31 | In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (wh… |
CVE-2019-7216 | High | 7.8 | 2019-01-31 | An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % c… |
CVE-2019-6438 | Critical | 9.8 | 2019-01-31 | SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. |
CVE-2019-0190 | High | 7.5 | 2019-01-30 | A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loo… |
CVE-2019-7237 | High | 7.5 | 2019-01-30 | An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal. |
CVE-2019-7236 | High | 7.5 | 2019-01-30 | An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal. |
CVE-2019-7235 | High | 7.5 | 2019-01-30 | An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory be… |
CVE-2019-7234 | Critical | 9.1 | 2019-01-30 | An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP… |
CVE-2019-7233 | High | 8.8 | 2019-01-30 | In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference. |
CVE-2019-3913 | Medium | 4.9 | 2019-01-30 | Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system lead… |
CVE-2019-3912 | Medium | 6.1 | 2019-01-30 | An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote a… |
CVE-2019-3911 | Medium | 6.1 | 2019-01-30 | Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inje… |
CVE-2019-1566 | Medium | 6.1 | 2019-01-30 | The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacke… |
CVE-2019-1565 | Medium | 5.4 | 2019-01-30 | The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authent… |
CVE-2019-7173 | Medium | 4.8 | 2019-01-29 | A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/a… |
CVE-2019-7172 | Medium | 6.1 | 2019-01-29 | A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users… |
CVE-2019-7171 | Medium | 4.8 | 2019-01-29 | A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/blocks/blocks/… |
CVE-2019-7170 | Medium | 4.8 | 2019-01-29 | A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/taxonomy/vocab… |
CVE-2019-7169 | Medium | 4.8 | 2019-01-29 | A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/menus/menus/ed… |
CVE-2019-7168 | Medium | 4.8 | 2019-01-29 | A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to /admin/nodes/nodes/add… |
CVE-2019-3807 | Low | 3.7 | 2019-01-29 | An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers w… |
CVE-2019-3806 | High | 8.1 | 2019-01-29 | An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some sp… |
CVE-2019-7160 | Critical | 9.8 | 2019-01-29 | idreamsoft iCMS 7.0.13 allows admincp.php?app=files ../ Directory Traversal via the udir parameter to files.admincp.php, resulting in execution of arbitrary PH… |
CVE-2019-7156 | Medium | 6.5 | 2019-01-29 | In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero. |
CVE-2019-7154 | Medium | 6.5 | 2019-01-29 | The main function in tools/wasm2js.cpp in Binaryen 1.38.22 has a heap-based buffer overflow because Emscripten is misused, triggering an error in cashew::JSPri… |
CVE-2019-7153 | Medium | 6.5 | 2019-01-29 | A NULL pointer dereference was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getFunc… |
CVE-2019-7152 | Medium | 6.5 | 2019-01-29 | A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::processFunctions() in wasm/wasm-binary.cpp (when calling wasm::WasmBinaryBuilder::getF… |
CVE-2019-7151 | Medium | 6.5 | 2019-01-29 | A NULL pointer dereference was discovered in wasm::Module::getFunctionOrNull in wasm/wasm.cpp in Binaryen 1.38.22. A crafted input can cause segmentation fault… |
CVE-2019-7150 | Medium | 5.5 | 2019-01-29 | An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to dwfl_segment_report… |
CVE-2019-7149 | Medium | 6.5 | 2019-01-29 | A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils 0.175. A crafted input can cause segment… |
CVE-2019-7148 | Medium | 6.5 | 2019-01-29 | An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174. Remote attackers could leve… |
CVE-2019-7147 | Medium | 5.5 | 2019-01-29 | A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation faults… |
CVE-2019-7146 | Medium | 5.5 | 2019-01-29 | In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to… |
CVE-2019-3462 | High | 8.1 | 2019-01-28 | Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, pot… |
CVE-2019-6992 | Medium | 6.1 | 2019-01-28 | A stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a… |
CVE-2019-6991 | Critical | 9.8 | 2019-01-28 | A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenti… |
CVE-2019-6990 | Medium | 5.4 | 2019-01-28 | A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulner… |
CVE-2019-3593 | High | 7.5 | 2019-01-28 | Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.R18 allows local users to bypass produ… |
CVE-2019-6988 | Medium | 6.5 | 2019-01-28 | An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in ope… |
CVE-2019-6986 | High | 7.5 | 2019-01-28 | SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of se… |
CVE-2019-3815 | Low | 3.3 | 2019-01-28 | A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c doe… |
CVE-2019-6985 | High | 8.8 | 2019-01-28 | An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in In… |
CVE-2019-6984 | Medium | 6.5 | 2019-01-28 | An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-After-Free or Type Co… |
CVE-2019-6983 | Medium | 6.5 | 2019-01-28 | An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Integer Overflow and cra… |
CVE-2019-6982 | Medium | 5.5 | 2019-01-28 | An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Write and… |
CVE-2019-6979 | Medium | 6.1 | 2019-01-28 | An issue was discovered in the User IP History Logs (aka IP_History_Logs) plugin 1.0.2 for MyBB. There is XSS via the admin/modules/tools/ip_history_logs.php u… |
CVE-2019-6978 | Critical | 9.8 | 2019-01-28 | The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the gdImage*Ptr() functions in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c. NOTE: PHP is unaffected. |
CVE-2019-6977 | High | 8.8 | 2019-01-27 | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7… |
CVE-2019-6703 | Critical | 9.8 | 2019-01-27 | Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers… |
CVE-2019-6976 | Medium | 5.3 | 2019-01-26 | libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not z… |
CVE-2019-6799 | Medium | 5.9 | 2019-01-26 | An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, a… |
CVE-2019-6798 | Critical | 9.8 | 2019-01-26 | An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection atta… |
CVE-2019-6966 | Medium | 6.5 | 2019-01-25 | An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4_Array<A… |
CVE-2019-3819 | Medium | 4.4 | 2019-01-25 | A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain para… |
CVE-2019-6956 | High | 7.1 | 2019-01-25 | An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c. |
CVE-2019-6805 | Critical | 9.8 | 2019-01-25 | SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter. |
CVE-2019-6804 | Medium | 6.1 | 2019-01-25 | An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/ex… |
CVE-2019-6803 | Medium | 6.1 | 2019-01-25 | typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar. |
CVE-2019-6802 | Medium | 6.1 | 2019-01-25 | CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI. |
CVE-2019-6780 | Medium | 6.1 | 2019-01-24 | The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferre… |
CVE-2019-6779 | High | 8.1 | 2019-01-24 | Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete friend links. |
CVE-2019-1669 | High | 8.6 | 2019-01-24 | A vulnerability in the data acquisition (DAQ) component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to byp… |
CVE-2019-1668 | Medium | 6.1 | 2019-01-24 | A vulnerability in the chat feed feature of Cisco SocialMiner could allow an unauthenticated, remote attacker to perform cross-site scripting (XSS) attacks aga… |
CVE-2019-1658 | Medium | 4.7 | 2019-01-24 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-s… |
CVE-2019-1657 | Medium | 4.3 | 2019-01-24 | A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe crea… |
CVE-2019-1656 | Medium | 5.3 | 2019-01-24 | A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to access the shell of the unde… |
CVE-2019-1655 | Medium | 6.1 | 2019-01-24 | A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site sc… |
CVE-2019-1653 | High | 7.5 | 2019-01-24 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remo… |
CVE-2019-6777 | Medium | 6.1 | 2019-01-24 | An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter. |