2019 CVEs (page 4)
Page 4 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25462 | High | 8.2 | 2026-02-22 | Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro… |
CVE-2019-25461 | High | 7.5 | 2026-02-22 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL c… |
CVE-2019-25460 | High | 7.5 | 2026-02-22 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL c… |
CVE-2019-25459 | Critical | 9.8 | 2026-02-22 | Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through… |
CVE-2019-25458 | Critical | 9.8 | 2026-02-22 | Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t… |
CVE-2019-25457 | High | 7.5 | 2026-02-22 | Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25456 | Critical | 9.1 | 2026-02-22 | Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t… |
CVE-2019-25455 | High | 7.5 | 2026-02-22 | Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throu… |
CVE-2019-25452 | High | 7.5 | 2026-02-22 | Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers… |
CVE-2019-25450 | High | 7.5 | 2026-02-22 | Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code… |
CVE-2019-25446 | High | 8.2 | 2026-02-22 | DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th… |
CVE-2019-25443 | High | 8.2 | 2026-02-22 | Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET… |
CVE-2019-25442 | High | 7.5 | 2026-02-22 | Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through… |
CVE-2019-25440 | High | 8.2 | 2026-02-22 | WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pr… |
CVE-2019-25439 | High | 8.2 | 2026-02-22 | NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Ref… |
CVE-2019-25433 | High | 8.2 | 2026-02-22 | XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the… |
CVE-2019-25391 | High | 8.2 | 2026-02-22 | Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklist… |
CVE-2019-25366 | High | 8.2 | 2026-02-22 | microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code… |
CVE-2019-25454 | Medium | 6.1 | 2026-02-20 | phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the col… |
CVE-2019-25453 | Medium | 6.1 | 2026-02-20 | phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the… |
CVE-2019-25451 | High | 8.8 | 2026-02-20 | phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious re… |
CVE-2019-25449 | Medium | 6.1 | 2026-02-20 | OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads t… |
CVE-2019-25448 | Medium | 6.4 | 2026-02-20 | OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with scr… |
CVE-2019-25447 | Medium | 4.3 | 2026-02-20 | OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malic… |
CVE-2019-25441 | Critical | 9.8 | 2026-02-20 | thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious inp… |
CVE-2019-25438 | High | 7.5 | 2026-02-20 | LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting maliciou… |
CVE-2019-25437 | Medium | 6.2 | 2026-02-20 | Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supply… |
CVE-2019-25436 | Medium | 6.5 | 2026-02-20 | Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper valida… |
CVE-2019-25435 | High | 7.8 | 2026-02-20 | Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to exe… |
CVE-2019-25434 | High | 7.5 | 2026-02-20 | SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in t… |
CVE-2019-25432 | High | 7.5 | 2026-02-20 | Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication paramete… |
CVE-2019-25431 | High | 8.2 | 2026-02-20 | delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unauthenticated attackers to manipulate data… |
CVE-2019-25445 | Medium | 6.1 | 2026-02-20 | Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the k… |
CVE-2019-25444 | Critical | 9.1 | 2026-02-20 | Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code th… |
CVE-2019-25430 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitt… |
CVE-2019-25429 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25428 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the openvpn_users endpoint that allow attackers to inject malici… |
CVE-2019-25427 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25426 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25425 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25424 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized… |
CVE-2019-25423 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject… |
CVE-2019-25422 | High | 7.2 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the vpnfw endpoint. Attackers… |
CVE-2019-25421 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoin… |
CVE-2019-25420 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25419 | High | 7.2 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input t… |
CVE-2019-25418 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25417 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25416 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25415 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized… |
CVE-2019-25414 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipul… |
CVE-2019-25413 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipul… |
CVE-2019-25412 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized… |
CVE-2019-25411 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the GATEWA… |
CVE-2019-25410 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and des… |
CVE-2019-25409 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the destin… |
CVE-2019-25408 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25407 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted inpu… |
CVE-2019-25406 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by manipulating the organi… |
CVE-2019-25405 | High | 7.2 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input t… |
CVE-2019-25404 | Medium | 6.4 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting c… |
CVE-2019-25403 | Medium | 6.4 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting c… |
CVE-2019-25402 | Medium | 6.1 | 2026-02-19 | Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitt… |
CVE-2019-25401 | High | 7.5 | 2026-02-18 | Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a denial of service vulnerability in the admin configuration page. Remote attackers c… |
CVE-2019-25400 | Medium | 5.4 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the fwhosts.cgi script that allow attackers to inject malicious… |
CVE-2019-25399 | Medium | 6.4 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple stored cross-site scripting vulnerabilities in the extrahd.cgi script that allow attackers to inject malicious sc… |
CVE-2019-25398 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple cross-site scripting vulnerabilities in the ovpnmain.cgi script that allow attackers to inject malicious scripts… |
CVE-2019-25397 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains multiple reflected cross-site scripting vulnerabilities in the hosts.cgi script that allow attackers to inject malicious s… |
CVE-2019-25396 | Medium | 6.1 | 2026-02-18 | IPFire 2.21 Core Update 127 contains a reflected cross-site scripting vulnerability in the updatexlrator.cgi script that allows attackers to inject malicious s… |
CVE-2019-25365 | Critical | 9.8 | 2026-02-18 | ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting th… |
CVE-2019-25364 | Critical | 9.8 | 2026-02-18 | MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a… |
CVE-2019-25363 | High | 7.5 | 2026-02-18 | WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized li… |
CVE-2019-25362 | Critical | 9.8 | 2026-02-18 | WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license… |
CVE-2019-25361 | Critical | 9.8 | 2026-02-18 | Ayukov NFTP client 1.71 contains a buffer overflow vulnerability in the SYST command handling that allows remote attackers to execute arbitrary code. Attackers… |
CVE-2019-25360 | Critical | 9.8 | 2026-02-18 | Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting… |
CVE-2019-25359 | High | 8.2 | 2026-02-18 | SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp… |
CVE-2019-25358 | High | 7.5 | 2026-02-18 | FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini conf… |
CVE-2019-25357 | High | 8.4 | 2026-02-18 | Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite S… |
CVE-2019-25356 | Medium | 6.1 | 2026-02-18 | Bematech (formerly Logic Controls, now Elgin) MP-4200 TH printer contains a cross-site scripting vulnerability in the admin configuration page. Attackers can i… |
CVE-2019-25355 | High | 7.5 | 2026-02-18 | gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniq… |
CVE-2019-25354 | High | 7.5 | 2026-02-18 | iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attack… |
CVE-2019-25353 | High | 7.5 | 2026-02-18 | Foscam Video Management System 1.1.4.9 contains a denial of service vulnerability in the username input field that allows attackers to crash the application. A… |
CVE-2019-25352 | High | 7.5 | 2026-02-18 | Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segment… |
CVE-2019-25351 | High | 8.8 | 2026-02-18 | Centova Cast 3.2.11 contains a file download vulnerability that allows authenticated attackers to retrieve arbitrary system files through the server.copyfile A… |
CVE-2019-25350 | High | 7.5 | 2026-02-18 | XMedia Recode 3.4.8.6 contains a denial of service vulnerability that allows attackers to crash the application by loading a specially crafted .m3u playlist fi… |
CVE-2019-25349 | High | 7.5 | 2026-02-18 | ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Serv… |
CVE-2019-25326 | Medium | 6.2 | 2026-02-18 | ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key f… |
CVE-2019-25395 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the preferences.cgi script that allow attacker… |
CVE-2019-25394 | High | 7.2 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple stored cross-site scripting vulnerabilities in the modem.cgi script that allow attackers to i… |
CVE-2019-25393 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25392 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25390 | Medium | 5.4 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the interfaces.cgi script that allow attack… |
CVE-2019-25389 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25388 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25387 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |
CVE-2019-25386 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attacker… |
CVE-2019-25385 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by ma… |
CVE-2019-25384 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the portfw.cgi script that allow attackers… |
CVE-2019-25383 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple reflected cross-site scripting vulnerabilities in the apcupsd.cgi script that allow attackers… |
CVE-2019-25382 | Medium | 6.1 | 2026-02-16 | Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicio… |