2019 CVEs (page 43)
Page 43 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18323 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a De… |
CVE-2019-18322 | Critical | 9.1 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to… |
CVE-2019-18321 | Critical | 9.1 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to… |
CVE-2019-18320 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18319 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18318 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18317 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18316 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18315 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18314 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18313 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could gain remot… |
CVE-2019-18312 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to… |
CVE-2019-18311 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18310 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18309 | High | 7.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and a low privileg… |
CVE-2019-18308 | High | 7.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and a low privileg… |
CVE-2019-18307 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18306 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18305 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18304 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18303 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18302 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18301 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18300 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18299 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a De… |
CVE-2019-18298 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18297 | High | 7.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and low privileges… |
CVE-2019-18296 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18295 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18294 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18293 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18292 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18291 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18290 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18289 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a… |
CVE-2019-18288 | High | 8.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with valid authentication at the RMI i… |
CVE-2019-18287 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings… |
CVE-2019-18286 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings… |
CVE-2019-18285 | Medium | 5.9 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The RMI communication between the client and the A… |
CVE-2019-18284 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authenticati… |
CVE-2019-18283 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authenticati… |
CVE-2019-13947 | Medium | 4.9 | 2019-12-12 | A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Cen… |
CVE-2019-13944 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-13943 | Medium | 6.1 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-13942 | High | 7.5 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-13932 | Critical | 9.1 | 2019-12-12 | A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application to behave… |
CVE-2019-13931 | Medium | 5.4 | 2019-12-12 | A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not… |
CVE-2019-13930 | High | 8.1 | 2019-12-12 | A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecti… |
CVE-2019-19750 | Critical | 9.8 | 2019-12-12 | minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product. |
CVE-2019-4606 | High | 7.8 | 2019-12-12 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search pa… |
CVE-2019-19248 | High | 7.8 | 2019-12-12 | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2). |
CVE-2019-19247 | High | 7.8 | 2019-12-12 | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2). |
CVE-2019-19198 | Medium | 5.4 | 2019-12-12 | The Scoutnet Kalender plugin 1.1.0 for WordPress allows XSS. |
CVE-2019-18345 | Critical | 9.3 | 2019-12-12 | A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the… |
CVE-2019-17428 | Medium | 5.9 | 2019-12-12 | An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the databas… |
CVE-2019-17358 | High | 8.1 | 2019-12-12 | Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays. An authenticated… |
CVE-2019-16246 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution. |
CVE-2019-15936 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp allows Insecure File Upload. |
CVE-2019-15935 | Medium | 6.1 | 2019-12-12 | Intesync Solismed 3.3sp has XSS. |
CVE-2019-15934 | High | 8.8 | 2019-12-12 | Intesync Solismed 3.3sp has CSRF. |
CVE-2019-15933 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp has SQL Injection. |
CVE-2019-15932 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp has Incorrect Access Control. |
CVE-2019-15931 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246. |
CVE-2019-15930 | Medium | 4.3 | 2019-12-12 | Intesync Solismed 3.3sp allows Clickjacking. |
CVE-2019-14849 | Medium | 5.4 | 2019-12-12 | A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cr… |
CVE-2019-13945 | Medium | 6.8 | 2019-12-12 | A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-1200 CPU family < V4.x (incl. SIPLUS varia… |
CVE-2019-13927 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40… |
CVE-2019-2338 | High | 7.1 | 2019-12-12 | Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in Snapdragon Auto, Sn… |
CVE-2019-2337 | High | 7.5 | 2019-12-12 | While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdr… |
CVE-2019-2321 | High | 7.8 | 2019-12-12 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-2320 | Critical | 9.8 | 2019-12-12 | Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2319 | High | 7.8 | 2019-12-12 | HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2310 | High | 7.5 | 2019-12-12 | Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto… |
CVE-2019-2288 | High | 7.8 | 2019-12-12 | Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-10618 | Medium | 5.5 | 2019-12-12 | Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 |
CVE-2019-10592 | High | 7.8 | 2019-12-12 | Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdrago… |
CVE-2019-10571 | High | 7.8 | 2019-12-12 | Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10559 | Critical | 9.8 | 2019-12-12 | Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snap… |
CVE-2019-10555 | High | 7.8 | 2019-12-12 | Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-10545 | Medium | 5.5 | 2019-12-12 | Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, S… |
CVE-2019-10530 | High | 7.8 | 2019-12-12 | Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2019-10520 | Medium | 5.5 | 2019-12-12 | An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory i… |
CVE-2019-10511 | Critical | 9.8 | 2019-12-12 | Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2019-10494 | High | 8.1 | 2019-12-12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Cons… |
CVE-2019-10493 | Critical | 9.8 | 2019-12-12 | Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10485 | High | 7.5 | 2019-12-12 | Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-10484 | Medium | 5.5 | 2019-12-12 | Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon… |
CVE-2019-19748 | Medium | 6.1 | 2019-12-12 | The Work Time Calendar app before 4.7.1 for Jira allows XSS. |
CVE-2019-19746 | Medium | 5.5 | 2019-12-12 | make_arrow in arrow.c in Xfig fig2dev 3.2.7b allows a segmentation fault and out-of-bounds write because of an integer overflow via a large arrow type. |
CVE-2019-19740 | Critical | 9.8 | 2019-12-12 | Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable. |
CVE-2019-19726 | High | 7.8 | 2019-12-12 | OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMI… |
CVE-2019-7004 | Medium | 5.4 | 2019-12-12 | A Cross-Site Scripting (XSS) vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially discl… |
CVE-2019-5154 | High | 8.8 | 2019-12-12 | An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cau… |
CVE-2019-5093 | Critical | 9.8 | 2019-12-12 | An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially cra… |
CVE-2019-5092 | High | 8.8 | 2019-12-12 | An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0.2019.3.15. A speci… |
CVE-2019-5091 | High | 7.5 | 2019-12-12 | An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3.15. A specially cr… |
CVE-2019-5090 | High | 7.5 | 2019-12-12 | An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specia… |
CVE-2019-5085 | Critical | 9.8 | 2019-12-12 | An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.15. A specially craf… |
CVE-2019-10695 | Medium | 6.5 | 2019-12-12 | When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the… |
CVE-2019-10694 | Critical | 9.8 | 2019-12-12 | The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they… |