2019 CVEs (page 160)
Page 160 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-2401 | High | 8.1 | 2019-01-16 | Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9… |
CVE-2019-2400 | High | 8.2 | 2019-01-16 | Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). Supported versions that are affected are 12.1.1, 12… |
CVE-2019-2399 | Medium | 6.5 | 2019-01-16 | Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Security). The suppor… |
CVE-2019-2398 | Medium | 4.3 | 2019-01-16 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). Supported versions that are affected are 10… |
CVE-2019-2397 | Medium | 4.4 | 2019-01-16 | Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9… |
CVE-2019-2396 | Medium | 4.7 | 2019-01-16 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). Supported versions that are affected are 12… |
CVE-2019-2395 | Medium | 5.4 | 2019-01-16 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is… |
CVE-2019-6462 | Medium | 6.5 | 2019-01-16 | An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for… |
CVE-2019-6461 | Medium | 6.5 | 2019-01-16 | An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c. |
CVE-2019-6460 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in librec.a. |
CVE-2019-6459 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a. |
CVE-2019-6458 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a. |
CVE-2019-6457 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a. |
CVE-2019-6456 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a. |
CVE-2019-6455 | Medium | 6.5 | 2019-01-16 | An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c. |
CVE-2019-6447 | High | 8.1 | 2019-01-16 | The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP por… |
CVE-2019-6264 | Medium | 6.1 | 2019-01-16 | An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in mod_banners leads to a stored XSS vulnerability. |
CVE-2019-6263 | Medium | 4.8 | 2019-01-16 | An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration Text Filter settings allowed stored XSS. |
CVE-2019-6262 | Medium | 5.4 | 2019-01-16 | An issue was discovered in Joomla! before 3.9.2. Inadequate checks of the Global Configuration helpurl settings allowed stored XSS. |
CVE-2019-6261 | Medium | 6.1 | 2019-01-16 | An issue was discovered in Joomla! before 3.9.2. Inadequate escaping in com_contact leads to a stored XSS vulnerability. |
CVE-2019-6446 | Critical | 9.8 | 2019-01-16 | An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafte… |
CVE-2019-6445 | Medium | 6.5 | 2019-01-16 | An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_… |
CVE-2019-6444 | Critical | 9.1 | 2019-01-16 | An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is deref… |
CVE-2019-6443 | Critical | 9.1 | 2019-01-16 | An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in nt… |
CVE-2019-6442 | Medium | 6.5 | 2019-01-16 | An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to c… |
CVE-2019-6440 | Critical | 9.8 | 2019-01-16 | Zemana AntiMalware before 3.0.658 Beta mishandles update logic. |
CVE-2019-6439 | Critical | 9.8 | 2019-01-16 | examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow. |
CVE-2019-3557 | Critical | 9.8 | 2019-01-15 | The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. This behavior caused some s… |
CVE-2019-3554 | Medium | 5.9 | 2019-01-15 | Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems a… |
CVE-2019-0030 | High | 7.2 | 2019-01-15 | Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5… |
CVE-2019-0029 | High | 8.8 | 2019-01-15 | Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk ser… |
CVE-2019-0027 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script a… |
CVE-2019-0026 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and stea… |
CVE-2019-0025 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and s… |
CVE-2019-0024 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and s… |
CVE-2019-0023 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal se… |
CVE-2019-0022 | Critical | 10.0 | 2019-01-15 | Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the… |
CVE-2019-0021 | High | 7.1 | 2019-01-15 | On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to v… |
CVE-2019-0020 | Critical | 10.0 | 2019-01-15 | Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the… |
CVE-2019-0018 | Medium | 5.4 | 2019-01-15 | A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and st… |
CVE-2019-0017 | Medium | 6.5 | 2019-01-15 | The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images o… |
CVE-2019-0016 | Medium | 6.5 | 2019-01-15 | A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions… |
CVE-2019-0015 | Medium | 5.4 | 2019-01-15 | A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted… |
CVE-2019-0014 | High | 7.5 | 2019-01-15 | On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to… |
CVE-2019-0013 | Medium | 6.5 | 2019-01-15 | The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, re… |
CVE-2019-0012 | High | 7.5 | 2019-01-15 | A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause… |
CVE-2019-0011 | Medium | 6.5 | 2019-01-15 | The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for ano… |
CVE-2019-0010 | High | 7.5 | 2019-01-15 | An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indicatio… |
CVE-2019-0009 | Medium | 5.5 | 2019-01-15 | On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE). In… |
CVE-2019-0007 | Critical | 9.3 | 2019-01-15 | The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a fami… |
CVE-2019-0006 | Critical | 9.8 | 2019-01-15 | A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, Q… |
CVE-2019-0005 | Medium | 5.3 | 2019-01-15 | On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may a… |
CVE-2019-0004 | Medium | 5.5 | 2019-01-15 | On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operatio… |
CVE-2019-0003 | Medium | 5.9 | 2019-01-15 | When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration… |
CVE-2019-0002 | Critical | 9.8 | 2019-01-15 | On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. Wh… |
CVE-2019-0001 | High | 7.5 | 2019-01-15 | Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber… |
CVE-2019-3811 | Medium | 5.2 | 2019-01-15 | A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty str… |
CVE-2019-6296 | Critical | 9.8 | 2019-01-15 | Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter. |
CVE-2019-6295 | Critical | 9.8 | 2019-01-15 | Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter. |
CVE-2019-6294 | High | 8.8 | 2019-01-15 | An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI. |
CVE-2019-6289 | High | 8.8 | 2019-01-15 | uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension an… |
CVE-2019-6293 | Medium | 5.5 | 2019-01-15 | An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_no… |
CVE-2019-6292 | Medium | 6.5 | 2019-01-15 | An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack cons… |
CVE-2019-6291 | Medium | 5.5 | 2019-01-15 | An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 fu… |
CVE-2019-6290 | Medium | 5.5 | 2019-01-15 | An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite r… |
CVE-2019-6267 | Medium | 6.1 | 2019-01-15 | The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templat… |
CVE-2019-6286 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a sim… |
CVE-2019-6285 | Medium | 6.5 | 2019-01-14 | The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption an… |
CVE-2019-6284 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp. |
CVE-2019-6283 | Medium | 6.5 | 2019-01-14 | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp. |
CVE-2019-6278 | Medium | 5.4 | 2019-01-14 | XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option. |
CVE-2019-6259 | Critical | 9.8 | 2019-01-14 | An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter. |
CVE-2019-6257 | High | 7.7 | 2019-01-14 | A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources… |
CVE-2019-6256 | Critical | 9.8 | 2019-01-14 | A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in han… |
CVE-2019-6251 | High | 8.1 | 2019-01-14 | WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious… |
CVE-2019-6250 | High | 8.8 | 2019-01-13 | A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready… |
CVE-2019-6249 | High | 8.8 | 2019-01-13 | An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins&act=edit_info&act_typ… |
CVE-2019-6248 | Medium | 6.1 | 2019-01-13 | PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php. |
CVE-2019-6247 | High | 8.8 | 2019-01-13 | An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to c… |
CVE-2019-6246 | Critical | 9.8 | 2019-01-13 | An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the gil::get_color function in Generic Image Library in Boost, the return code is used as an… |
CVE-2019-6245 | High | 8.8 | 2019-01-13 | An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. In the function agg::cell_aa::not_equal, dx is assigned to (x2 - x… |
CVE-2019-6244 | High | 8.8 | 2019-01-12 | An issue was discovered in UsualToolCMS 8.0. cmsadmin/a_sqlbackx.php?t=sql allows CSRF attacks that can execute SQL statements, and consequently execute arbitr… |
CVE-2019-6243 | Medium | 6.1 | 2019-01-12 | Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). |
CVE-2019-3803 | Medium | 4.5 | 2019-01-12 | Pivotal Concourse, all versions prior to 4.2.2, puts the user access token in a url during the login flow. A remote attacker who gains access to a user's brows… |
CVE-2019-6138 | High | 7.5 | 2019-01-11 | An issue has been found in libIEC61850 v1.3.1. Memory_malloc and Memory_calloc in hal/memory/lib_memory.c have memory leaks when called from mms/iso_mms/common… |
CVE-2019-6137 | High | 7.5 | 2019-01-11 | An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference. |
CVE-2019-6136 | High | 7.5 | 2019-01-11 | An issue has been found in libIEC61850 v1.3.1. Ethernet_setProtocolFilter in hal/ethernet/linux/ethernet_linux.c has a SEGV, as demonstrated by sv_subscriber_e… |
CVE-2019-6135 | High | 7.5 | 2019-01-11 | An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called from Asn1PrimitiveValue_create in mms/asn… |
CVE-2019-6133 | Medium | 6.7 | 2019-01-11 | In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are… |
CVE-2019-6132 | High | 7.5 | 2019-01-11 | An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when… |
CVE-2019-6131 | Medium | 5.5 | 2019-01-11 | svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mut… |
CVE-2019-6130 | Medium | 5.5 | 2019-01-11 | Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling… |
CVE-2019-6129 | Medium | 6.5 | 2019-01-11 | png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job… |
CVE-2019-6128 | High | 8.8 | 2019-01-11 | The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb. |
CVE-2019-6127 | High | 7.2 | 2019-01-11 | An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be used for PHP code execution via "INTO OUTF… |
CVE-2019-6126 | High | 7.5 | 2019-01-11 | The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigatin… |
CVE-2019-0088 | High | 7.8 | 2019-01-10 | Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation o… |
CVE-2019-5893 | Critical | 9.8 | 2019-01-10 | Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter. |
CVE-2019-5892 | Medium | 6.5 | 2019-01-10 | bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux… |
CVE-2019-5887 | High | 7.5 | 2019-01-10 | An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the input parameters are not checked, resulting in input mishandling… |