2019 CVEs (page 32)
Page 32 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-14919 | High | 7.8 | 2020-01-09 | An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network attacker to authenticate via hardcoded cred… |
CVE-2019-14918 | Medium | 5.4 | 2020-01-09 | XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to ach… |
CVE-2019-20224 | High | 8.8 | 2020-01-09 | netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in… |
CVE-2019-19332 | Medium | 6.1 | 2020-01-09 | An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_… |
CVE-2019-19494 | High | 8.8 | 2020-01-09 | Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel… |
CVE-2019-11292 | Medium | 6.5 | 2020-01-09 | Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomca… |
CVE-2019-9812 | Critical | 9.3 | 2020-01-08 | Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that pr… |
CVE-2019-17025 | High | 8.8 | 2020-01-08 | Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2019-17024 | High | 8.8 | 2020-01-08 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2019-17023 | Medium | 6.5 | 2020-01-08 | After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition in the TLS State Mach… |
CVE-2019-17022 | Medium | 6.1 | 2020-01-08 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting… |
CVE-2019-17021 | Medium | 5.3 | 2020-01-08 | During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses from the parent process… |
CVE-2019-17020 | Medium | 6.5 | 2020-01-08 | If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not be applied to the con… |
CVE-2019-17019 | High | 8.8 | 2020-01-08 | When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text… |
CVE-2019-17018 | Medium | 5.3 | 2020-01-08 | When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerability affec… |
CVE-2019-17017 | High | 8.8 | 2020-01-08 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could… |
CVE-2019-17016 | Medium | 6.1 | 2020-01-08 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for inj… |
CVE-2019-17015 | High | 8.8 | 2020-01-08 | During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the… |
CVE-2019-17014 | High | 7.4 | 2020-01-08 | If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in a cross-origin info… |
CVE-2019-17013 | High | 8.8 | 2020-01-08 | Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corruption and we presume that with enough e… |
CVE-2019-17012 | High | 8.8 | 2020-01-08 | Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presu… |
CVE-2019-17011 | High | 7.5 | 2020-01-08 | Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a po… |
CVE-2019-17010 | High | 7.5 | 2020-01-08 | Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-f… |
CVE-2019-17009 | High | 7.8 | 2020-01-08 | When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a… |
CVE-2019-17008 | High | 8.8 | 2020-01-08 | When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects… |
CVE-2019-17005 | High | 8.8 | 2020-01-08 | The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array… |
CVE-2019-17002 | Medium | 4.3 | 2020-01-08 | If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was not upgraded to http… |
CVE-2019-17001 | Medium | 6.1 | 2020-01-08 | A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document (cross-site scripti… |
CVE-2019-17000 | Medium | 6.1 | 2020-01-08 | An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypass in a cross-origin frame if the docume… |
CVE-2019-11765 | Medium | 6.5 | 2020-01-08 | A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown. However, due to la… |
CVE-2019-11764 | High | 8.8 | 2020-01-08 | Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory c… |
CVE-2019-11763 | Medium | 6.1 | 2020-01-08 | Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities. This could have led to HTML commen… |
CVE-2019-11762 | Medium | 6.1 | 2020-01-08 | If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/getters/setters on… |
CVE-2019-11761 | Medium | 5.4 | 2020-01-08 | By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this o… |
CVE-2019-11760 | High | 8.8 | 2020-01-08 | A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vuln… |
CVE-2019-11759 | High | 8.8 | 2020-01-08 | An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This could be used by an attacker to execute a… |
CVE-2019-11758 | High | 8.8 | 2020-01-08 | Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. This bug showed evidence of memory c… |
CVE-2019-11757 | High | 8.8 | 2020-01-08 | When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use… |
CVE-2019-11756 | High | 8.8 | 2020-01-08 | Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects F… |
CVE-2019-11745 | High | 8.8 | 2020-01-08 | When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. Th… |
CVE-2019-19495 | Critical | 9.8 | 2020-01-08 | The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScri… |
CVE-2019-5082 | Critical | 9.8 | 2020-01-08 | An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC… |
CVE-2019-20367 | Critical | 9.1 | 2020-01-08 | nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab). |
CVE-2019-20366 | Medium | 6.1 | 2020-01-08 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents. |
CVE-2019-20365 | Medium | 6.1 | 2020-01-08 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page. |
CVE-2019-20364 | Medium | 6.1 | 2020-01-08 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp. |
CVE-2019-20363 | Medium | 6.1 | 2020-01-08 | An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents. |
CVE-2019-19544 | High | 7.8 | 2020-01-08 | CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges… |
CVE-2019-10777 | Critical | 9.8 | 2020-01-08 | In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitizat… |
CVE-2019-5188 | High | 7.5 | 2020-01-08 | A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-… |
CVE-2019-19518 | Critical | 9.8 | 2020-01-08 | CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote at… |
CVE-2019-17076 | Critical | 9.8 | 2020-01-08 | An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Servic… |
CVE-2019-10778 | Critical | 9.8 | 2020-01-08 | devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName`… |
CVE-2019-20362 | High | 7.8 | 2020-01-08 | In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe… |
CVE-2019-14820 | Medium | 4.3 | 2020-01-08 | It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a speci… |
CVE-2019-20361 | Critical | 9.8 | 2020-01-08 | There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash pa… |
CVE-2019-20360 | High | 7.5 | 2020-01-08 | A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user inf… |
CVE-2019-17151 | Medium | 5.4 | 2020-01-07 | This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction… |
CVE-2019-17148 | High | 7.8 | 2020-01-07 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485). An at… |
CVE-2019-17147 | High | 8.8 | 2020-01-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to… |
CVE-2019-17146 | Critical | 9.8 | 2020-01-07 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to… |
CVE-2019-18652 | Medium | 6.1 | 2020-01-07 | A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's bro… |
CVE-2019-6529 | Medium | 4.9 | 2020-01-07 | An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166). |
CVE-2019-14906 | Critical | 9.8 | 2020-01-07 | A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL… |
CVE-2019-9465 | Medium | 5.5 | 2020-01-07 | In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local informat… |
CVE-2019-6700 | Medium | 6.5 | 2020-01-07 | An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retriev… |
CVE-2019-18386 | High | 8.7 | 2020-01-07 | Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically… |
CVE-2019-16154 | Medium | 6.1 | 2020-01-07 | An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scr… |
CVE-2019-10776 | Critical | 9.8 | 2020-01-07 | In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all version… |
CVE-2019-14819 | High | 8.8 | 2020-01-07 | A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the curre… |
CVE-2019-14879 | Medium | 5.4 | 2020-01-07 | A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the asso… |
CVE-2019-14866 | High | 7.3 | 2020-01-07 | In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an… |
CVE-2019-14854 | Medium | 6.5 | 2020-01-07 | OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to Debug or higher. A low… |
CVE-2019-14843 | High | 8.8 | 2020-01-07 | A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app… |
CVE-2019-14837 | Critical | 9.1 | 2020-01-07 | A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a clien… |
CVE-2019-14834 | Low | 3.7 | 2020-01-07 | A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via v… |
CVE-2019-6857 | High | 7.5 | 2020-01-06 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see secur… |
CVE-2019-6856 | High | 7.5 | 2020-01-06 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see secur… |
CVE-2019-6855 | High | 7.3 | 2020-01-06 | Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all ve… |
CVE-2019-6854 | High | 7.8 | 2020-01-06 | A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 20… |
CVE-2019-20348 | Medium | 6.8 | 2020-01-06 | OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical acc… |
CVE-2019-18842 | Medium | 6.1 | 2020-01-06 | A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version… |
CVE-2019-18625 | High | 7.5 | 2020-01-06 | An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After t… |
CVE-2019-16271 | Medium | 5.3 | 2020-01-06 | DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 with… |
CVE-2019-19585 | High | 7.8 | 2020-01-06 | An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache config… |
CVE-2019-19509 | High | 8.8 | 2020-01-06 | An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php bec… |
CVE-2019-18179 | Medium | 4.3 | 2020-01-06 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An atta… |
CVE-2019-16717 | Medium | 6.1 | 2020-01-06 | OX App Suite through 7.10.2 has XSS. |
CVE-2019-16716 | Medium | 6.6 | 2020-01-06 | OX App Suite through 7.10.2 has Incorrect Access Control. |
CVE-2019-16274 | High | 7.5 | 2020-01-06 | DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP. |
CVE-2019-16273 | Critical | 9.8 | 2020-01-06 | DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system… |
CVE-2019-16272 | Critical | 9.8 | 2020-01-06 | On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement. |
CVE-2019-9472 | Medium | 5.5 | 2020-01-06 | In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additi… |
CVE-2019-9471 | Medium | 6.7 | 2020-01-06 | In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wit… |
CVE-2019-9470 | Medium | 6.7 | 2020-01-06 | In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with S… |
CVE-2019-9469 | High | 7.8 | 2020-01-06 | In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege… |
CVE-2019-9468 | High | 7.8 | 2020-01-06 | In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additio… |
CVE-2019-18792 | Critical | 9.1 | 2020-01-06 | An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake… |
CVE-2019-15603 | Medium | 6.1 | 2020-01-06 | The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing. |
CVE-2019-15602 | Medium | 6.1 | 2020-01-06 | The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in files it serves. |