2019 CVEs (page 46)
Page 46 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19333 | Critical | 9.8 | 2019-12-06 | In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "bits". An appl… |
CVE-2019-11554 | Medium | 5.9 | 2019-12-06 | The Audible application through 2.34.0 for Android has Missing SSL Certificate Validation for Adobe SDKs, allowing MITM attackers to cause a denial of service. |
CVE-2019-19624 | Medium | 6.5 | 2019-12-06 | An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale withi… |
CVE-2019-19619 | Medium | 6.1 | 2019-12-06 | domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer… |
CVE-2019-19617 | Critical | 9.8 | 2019-12-06 | phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php. |
CVE-2019-19616 | Medium | 4.3 | 2019-12-06 | An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allow… |
CVE-2019-19609 | High | 7.2 | 2019-12-05 | The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because i… |
CVE-2019-16770 | Medium | 5.3 | 2019-12-05 | In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service atta… |
CVE-2019-16768 | Low | 3.5 | 2019-12-05 | In affected versions of Sylius, exception messages from internal exceptions (like database exception) are wrapped by \Symfony\Component\Security\Core\Exception… |
CVE-2019-16769 | Medium | 4.2 | 2019-12-05 | The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters… |
CVE-2019-5098 | High | 8.6 | 2019-12-05 | An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of… |
CVE-2019-19546 | Medium | 6.5 | 2019-12-05 | Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintent… |
CVE-2019-19545 | Medium | 6.3 | 2019-12-05 | Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows res… |
CVE-2019-18381 | Medium | 6.3 | 2019-12-05 | Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows res… |
CVE-2019-17388 | High | 7.8 | 2019-12-05 | Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary… |
CVE-2019-17387 | High | 7.8 | 2019-12-05 | An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code exec… |
CVE-2019-7195 | Critical | 9.8 | 2019-12-05 | This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend upd… |
CVE-2019-7194 | Critical | 9.8 | 2019-12-05 | This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend upd… |
CVE-2019-7193 | Critical | 9.8 | 2019-12-05 | This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating… |
CVE-2019-7192 | Critical | 9.8 | 2019-12-05 | This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend upda… |
CVE-2019-7185 | Medium | 4.8 | 2019-12-05 | This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console… |
CVE-2019-7184 | Medium | 4.8 | 2019-12-05 | This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s management console… |
CVE-2019-7183 | Critical | 9.8 | 2019-12-05 | This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their lat… |
CVE-2019-19466 | Medium | 6.1 | 2019-12-05 | SCEditor 2.1.3 allows XSS. |
CVE-2019-3690 | Medium | 6.8 | 2019-12-05 | The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenin… |
CVE-2019-19595 | Critical | 9.8 | 2019-12-05 | reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execut… |
CVE-2019-19594 | Critical | 9.8 | 2019-12-05 | reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary… |
CVE-2019-19007 | High | 7.2 | 2019-12-05 | Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-20… |
CVE-2019-15897 | Critical | 9.6 | 2019-12-05 | beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typically not exposed to ex… |
CVE-2019-11255 | Medium | 4.8 | 2019-12-05 | Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4… |
CVE-2019-18180 | Medium | 5.3 | 2019-12-05 | Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e.g. attaching files to mails) of ((OTRS)) Commun… |
CVE-2019-17437 | High | 7.8 | 2019-12-05 | An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges an… |
CVE-2019-14910 | Critical | 9.8 | 2019-12-05 | A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (… |
CVE-2019-19602 | Medium | 6.1 | 2019-12-05 | fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent attackers to cause a d… |
CVE-2019-19317 | Critical | 9.8 | 2019-12-05 | lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of ser… |
CVE-2019-19601 | High | 7.8 | 2019-12-05 | OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf. |
CVE-2019-19598 | High | 8.8 | 2019-12-05 | D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP r… |
CVE-2019-19597 | High | 8.8 | 2019-12-05 | D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH… |
CVE-2019-19589 | Critical | 9.8 | 2019-12-05 | The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued… |
CVE-2019-19596 | Medium | 5.4 | 2019-12-05 | GitBook through 2.6.9 allows XSS via a local .md file. |
CVE-2019-19590 | High | 7.8 | 2019-12-05 | In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow w… |
CVE-2019-19588 | High | 7.5 | 2019-12-05 | The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string. This is fixed in… |
CVE-2019-19553 | High | 7.5 | 2019-12-05 | In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensurin… |
CVE-2019-19587 | Medium | 6.1 | 2019-12-05 | In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console. |
CVE-2019-19522 | High | 7.8 | 2019-12-05 | OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the… |
CVE-2019-19521 | Critical | 9.8 | 2019-12-05 | libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c… |
CVE-2019-19520 | High | 7.8 | 2019-12-05 | xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGL_DRIVERS_PATH environment variable, because xenocara/lib/m… |
CVE-2019-19519 | High | 7.8 | 2019-12-05 | In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in s… |
CVE-2019-19579 | Medium | 6.8 | 2019-12-04 | An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a ph… |
CVE-2019-16753 | High | 7.5 | 2019-12-04 | An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. The content to be signed is composed of a representation of string… |
CVE-2019-16752 | Medium | 4.3 | 2019-12-04 | An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary… |
CVE-2019-11216 | Medium | 6.5 | 2019-12-04 | BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to downl… |
CVE-2019-19364 | High | 7.8 | 2019-12-04 | A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1… |
CVE-2019-19229 | Medium | 6.5 | 2019-12-04 | admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal. |
CVE-2019-19228 | Critical | 9.8 | 2019-12-04 | Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account is stored in the /… |
CVE-2019-19133 | Medium | 6.1 | 2019-12-04 | The CSS Hero plugin through 4.0.3 for WordPress is prone to reflected XSS via the URI in a csshero_action=edit_page request because it fails to sufficiently sa… |
CVE-2019-19576 | Critical | 9.8 | 2019-12-04 | class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the… |
CVE-2019-18347 | Medium | 5.4 | 2019-12-04 | A stored XSS issue was discovered in DAViCal through 1.1.8. It does not adequately sanitize output of various fields that can be set by unprivileged users, mak… |
CVE-2019-18346 | High | 8.8 | 2019-12-04 | A CSRF issue was discovered in DAViCal through 1.1.8. If an authenticated user visits an attacker-controlled webpage, the attacker can send arbitrary requests… |
CVE-2019-17555 | High | 7.5 | 2019-12-04 | The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any… |
CVE-2019-7201 | High | 7.8 | 2019-12-04 | An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized bu… |
CVE-2019-7197 | Medium | 4.8 | 2019-12-04 | A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker… |
CVE-2019-19555 | Medium | 5.5 | 2019-12-04 | read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. |
CVE-2019-17556 | Critical | 9.8 | 2019-12-04 | Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserializ… |
CVE-2019-17554 | Medium | 5.5 | 2019-12-04 | The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with c… |
CVE-2019-11940 | Critical | 9.8 | 2019-12-04 | In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place the header table into a corr… |
CVE-2019-11936 | Critical | 9.8 | 2019-12-04 | Various APC functions accept keys containing null bytes as input, leading to premature truncation of input. This issue affects HHVM versions prior to 3.30.12… |
CVE-2019-11935 | Critical | 9.8 | 2019-12-04 | Insufficient boundary checks when processing a string in mb_ereg_replace allows access to out-of-bounds memory. This issue affects HHVM versions prior to 3.30… |
CVE-2019-11934 | Critical | 9.8 | 2019-12-04 | Improper handling of close_notify alerts can result in an out-of-bounds read in AsyncSSLSocket. This issue affects folly prior to v2019.11.04.00. |
CVE-2019-11930 | Critical | 9.8 | 2019-12-04 | An invalid free in mb_detect_order can cause the application to crash or potentially result in remote code execution. This issue affects HHVM versions prior to… |
CVE-2019-11937 | High | 7.5 | 2019-12-04 | In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service. |
CVE-2019-11923 | High | 7.5 | 2019-12-04 | In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for reso… |
CVE-2019-15638 | High | 7.8 | 2019-12-04 | COPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element. |
CVE-2019-14909 | High | 8.3 | 2019-12-04 | A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accept… |
CVE-2019-18850 | High | 7.5 | 2019-12-04 | TrevorC2 v1.1/v1.2 fails to prevent fingerprinting primarily via a discrepancy between response headers when responding to different HTTP methods, also via pre… |
CVE-2019-5164 | High | 7.8 | 2019-12-03 | An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager ca… |
CVE-2019-5163 | High | 7.5 | 2019-12-03 | An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_addr… |
CVE-2019-5133 | High | 8.8 | 2019-12-03 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library. A specially crafted BMP file can cause… |
CVE-2019-5132 | High | 8.8 | 2019-12-03 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GE… |
CVE-2019-5112 | High | 8.8 | 2019-12-03 | Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_status was… |
CVE-2019-5111 | High | 8.8 | 2019-12-03 | Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_cat was co… |
CVE-2019-5110 | High | 8.8 | 2019-12-03 | Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An at… |
CVE-2019-5109 | High | 8.8 | 2019-12-03 | Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An a… |
CVE-2019-5097 | High | 7.5 | 2019-12-03 | A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in versions v5.0.1, v.4… |
CVE-2019-5096 | Critical | 9.8 | 2019-12-03 | An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in version… |
CVE-2019-5083 | High | 8.8 | 2019-12-03 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially cr… |
CVE-2019-5076 | High | 8.8 | 2019-12-03 | An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PN… |
CVE-2019-3750 | Medium | 5.5 | 2019-12-03 | Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentiall… |
CVE-2019-3749 | Medium | 5.5 | 2019-12-03 | Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentiall… |
CVE-2019-19543 | High | 7.8 | 2019-12-03 | In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. |
CVE-2019-18574 | Medium | 4.8 | 2019-12-03 | RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security… |
CVE-2019-9689 | High | 7.5 | 2019-12-03 | process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero cert… |
CVE-2019-19459 | Critical | 9.8 | 2019-12-03 | An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files u… |
CVE-2019-19458 | High | 8.6 | 2019-12-03 | SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature. |
CVE-2019-19457 | Medium | 5.4 | 2019-12-03 | SALTO ProAccess SPACE 5.4.3.0 allows XSS. |
CVE-2019-19383 | High | 8.8 | 2019-12-03 | freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled). |
CVE-2019-19382 | High | 7.8 | 2019-12-03 | Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privil… |
CVE-2019-18993 | Medium | 5.4 | 2019-12-03 | OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-… |
CVE-2019-18992 | Medium | 5.4 | 2019-12-03 | OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New S… |
CVE-2019-16885 | Critical | 9.8 | 2019-12-03 | In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could ha… |