2019 CVEs (page 34)
Page 34 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10227 | Medium | 6.1 | 2019-12-31 | openITCOCKPIT before 3.7.1 has reflected XSS in the 404-not-found component. |
CVE-2019-9668 | High | 7.5 | 2019-12-31 | An issue was discovered in rovinbhandari FTP through 2012-03-28. receive_file in file_transfer_functions.c allows remote attackers to cause a denial of service… |
CVE-2019-9556 | Medium | 5.4 | 2019-12-31 | FiberHome an5506-04-f RP2669 devices have XSS. |
CVE-2019-9554 | Medium | 6.1 | 2019-12-31 | In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI. |
CVE-2019-9553 | Medium | 6.1 | 2019-12-31 | Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933. |
CVE-2019-9207 | Medium | 6.1 | 2019-12-31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued. |
CVE-2019-9206 | Medium | 6.1 | 2019-12-31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued. |
CVE-2019-9197 | High | 8.8 | 2019-12-31 | The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code. |
CVE-2019-7751 | High | 7.5 | 2019-12-31 | A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP befo… |
CVE-2019-12837 | Medium | 4.3 | 2019-12-31 | The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints. |
CVE-2019-7162 | Critical | 9.1 | 2019-12-31 | An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.6 Build 5607. An exposed service allows an unauthenticated person to retrieve internal inform… |
CVE-2019-20176 | High | 7.5 | 2019-12-31 | In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. |
CVE-2019-12273 | Medium | 6.5 | 2019-12-31 | OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self-hosted by the cust… |
CVE-2019-12186 | Medium | 4.8 | 2019-12-31 | An issue was discovered in Sylius products. Missing input sanitization in sylius/sylius 1.0.x through 1.0.18, 1.1.x through 1.1.17, 1.2.x through 1.2.16, 1.3.x… |
CVE-2019-10229 | High | 8.8 | 2019-12-31 | An issue was discovered in MailStore Server (and Service Provider Edition) 9.x through 11.x before 11.2.2. When the directory service (for synchronizing and au… |
CVE-2019-20175 | High | 7.5 | 2019-12-31 | An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a spec… |
CVE-2019-20172 | High | 7.8 | 2019-12-31 | Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows loc… |
CVE-2019-7479 | High | 7.2 | 2019-12-31 | A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version… |
CVE-2019-19927 | Medium | 6.0 | 2019-12-31 | In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operation… |
CVE-2019-7478 | Critical | 9.8 | 2019-12-31 | A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 a… |
CVE-2019-20171 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in i… |
CVE-2019-20170 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in… |
CVE-2019-20169 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. |
CVE-2019-20168 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_f… |
CVE-2019-20167 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_… |
CVE-2019-20166 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/bo… |
CVE-2019-20165 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/… |
CVE-2019-20164 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia… |
CVE-2019-20163 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in… |
CVE-2019-20162 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in iso… |
CVE-2019-20161 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit… |
CVE-2019-20160 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in… |
CVE-2019-20159 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c. |
CVE-2019-19032 | High | 8.1 | 2019-12-30 | XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an XML File is validated. The component is… |
CVE-2019-19031 | High | 8.1 | 2019-12-30 | Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component… |
CVE-2019-16790 | Medium | 6.5 | 2019-12-30 | In Tiny File Manager before 2.3.9, there is a remote code execution via Upload from URL and Edit/Rename files. Only authenticated users are impacted. |
CVE-2019-20149 | High | 7.5 | 2019-12-30 | ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'construc… |
CVE-2019-20141 | Medium | 6.1 | 2019-12-30 | An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter. |
CVE-2019-19806 | Medium | 5.3 | 2019-12-30 | _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the accou… |
CVE-2019-19805 | Medium | 5.3 | 2019-12-30 | _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 takes a different amount of time to return depending on whether an email address i… |
CVE-2019-19470 | High | 7.8 | 2019-12-30 | Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product… |
CVE-2019-13465 | High | 8.6 | 2019-12-30 | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. ROS_ASSERT_MSG only works when ROS_AS… |
CVE-2019-13445 | Critical | 9.8 | 2019-12-30 | An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/re… |
CVE-2019-20140 | High | 8.8 | 2019-12-30 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_out_code at fromgif.c. |
CVE-2019-19739 | High | 7.5 | 2019-12-30 | MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels. |
CVE-2019-19738 | Medium | 6.1 | 2019-12-30 | log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow a… |
CVE-2019-19737 | High | 8.8 | 2019-12-30 | MFScripts YetiShare 3.5.2 through 4.5.3 does not set the SameSite flag on session cookies, allowing the cookie to be sent in cross-site requests and potentiall… |
CVE-2019-19736 | Medium | 6.1 | 2019-12-30 | MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be u… |
CVE-2019-19735 | Critical | 9.1 | 2019-12-30 | class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows… |
CVE-2019-19734 | High | 8.8 | 2019-12-30 | _account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an attacke… |
CVE-2019-19733 | Medium | 6.1 | 2019-12-30 | _get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output… |
CVE-2019-19732 | High | 7.2 | 2019-12-30 | translation_manage_text.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir_0 and/or sSo… |
CVE-2019-17621 | Critical | 9.8 | 2019-12-30 | The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands… |
CVE-2019-17558 | High | 7.5 | 2019-12-30 | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided throug… |
CVE-2019-10774 | Critical | 9.8 | 2019-12-30 | php-shellcommand versions before 1.6.1 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-4655 | Medium | 4.3 | 2019-12-30 | IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset… |
CVE-2019-4623 | Medium | 5.4 | 2019-12-30 | IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus… |
CVE-2019-4343 | Medium | 6.5 | 2019-12-30 | IBM Cognos Analytics 11.0 and 11.1 allows overly permissive cross-origin resource sharing which could allow an attacker to transfer private information. An att… |
CVE-2019-4335 | Medium | 5.5 | 2019-12-30 | IBM Watson Studio Local 1.2.3 stores key files in the user's home directory which could be obtained by another local user. IBM X-Force ID: 161413. |
CVE-2019-20139 | Medium | 5.4 | 2019-12-30 | In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or frequency parameter. Any… |
CVE-2019-16535 | Critical | 9.8 | 2019-12-30 | In all versions of ClickHouse before 19.14, an OOB read, OOB write and integer underflow in decompression algorithms can be used to achieve RCE or DoS via nati… |
CVE-2019-15024 | Medium | 6.5 | 2019-12-30 | In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network wh… |
CVE-2019-20138 | High | 7.5 | 2019-12-30 | The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used. |
CVE-2019-20096 | Medium | 5.5 | 2019-12-30 | In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b. |
CVE-2019-20095 | Medium | 5.5 | 2019-12-30 | mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated ho… |
CVE-2019-20094 | High | 8.8 | 2019-12-30 | An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gif_init_frame at fromgif.c. |
CVE-2019-20093 | Medium | 5.5 | 2019-12-30 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) vi… |
CVE-2019-20092 | Medium | 5.5 | 2019-12-30 | An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_EsDescriptor::GetDecode… |
CVE-2019-20091 | Medium | 5.5 | 2019-12-30 | An issue was discovered in Bento4 1.5.1.0. There is a NULL pointer dereference in AP4_Descriptor::GetTag in mp42ts when called from AP4_DecoderConfigDescriptor… |
CVE-2019-20090 | High | 7.8 | 2019-12-30 | An issue was discovered in Bento4 1.5.1.0. There is a use-after-free in AP4_Sample::GetOffset in Core/Ap4Sample.h when called from Ap4LinearReader.cpp. |
CVE-2019-20089 | High | 7.8 | 2019-12-30 | GoPro GPMF-parser 1.2.3 has an heap-based buffer over-read in GPMF_SeekToSamples in GPMF_parse.c for the size calculation. |
CVE-2019-20088 | High | 7.8 | 2019-12-30 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c. |
CVE-2019-20087 | High | 8.8 | 2019-12-30 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature. |
CVE-2019-20086 | High | 8.8 | 2019-12-30 | GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c. |
CVE-2019-20085 | High | 7.5 | 2019-12-30 | TVT NVMS-1000 devices allow GET /.. Directory Traversal |
CVE-2019-20079 | High | 7.8 | 2019-12-30 | The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. |
CVE-2019-20076 | Medium | 6.1 | 2019-12-30 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration). |
CVE-2019-20075 | Medium | 6.1 | 2019-12-30 | On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic). |
CVE-2019-20074 | High | 8.8 | 2019-12-30 | On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page. |
CVE-2019-20073 | Medium | 6.1 | 2019-12-30 | On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration). |
CVE-2019-20072 | Medium | 6.1 | 2019-12-30 | On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration). |
CVE-2019-20071 | Medium | 6.5 | 2019-12-30 | On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs. |
CVE-2019-20070 | Medium | 6.1 | 2019-12-30 | On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration). |
CVE-2019-20063 | High | 8.8 | 2019-12-29 | hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. |
CVE-2019-20058 | Medium | 6.1 | 2019-12-29 | Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because… |
CVE-2019-20057 | Low | 3.7 | 2019-12-29 | com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect a… |
CVE-2019-20056 | Medium | 6.5 | 2019-12-29 | stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned. |
CVE-2019-20055 | Medium | 6.5 | 2019-12-29 | LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets. |
CVE-2019-20054 | Medium | 5.5 | 2019-12-28 | In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da958803… |
CVE-2019-20053 | Medium | 5.5 | 2019-12-27 | An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file. |
CVE-2019-20052 | Medium | 6.5 | 2019-12-27 | A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case. |
CVE-2019-20051 | Medium | 5.5 | 2019-12-27 | A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to… |
CVE-2019-20049 | Critical | 9.8 | 2019-12-27 | An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass auth… |
CVE-2019-20048 | High | 7.2 | 2019-12-27 | An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory… |
CVE-2019-20047 | High | 7.5 | 2019-12-27 | An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthen… |
CVE-2019-16896 | High | 7.8 | 2019-12-27 | In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an… |
CVE-2019-19781 | Critical | 9.8 | 2019-12-27 | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. |
CVE-2019-20043 | Medium | 4.3 | 2019-12-27 | In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a… |
CVE-2019-20042 | Medium | 6.1 | 2019-12-27 | In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site s… |
CVE-2019-20041 | Critical | 9.8 | 2019-12-27 | wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization… |