2019 CVEs (page 51)
Page 51 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18887 | High | 8.1 | 2019-11-21 | An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timi… |
CVE-2019-11325 | Critical | 9.8 | 2019-11-21 | An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted o… |
CVE-2019-19207 | High | 8.8 | 2019-11-21 | rConfig 3.9.2 allows devices.php?searchColumn= SQL injection. |
CVE-2019-19204 | High | 7.5 | 2019-11-21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c… |
CVE-2019-19203 | High | 7.5 | 2019-11-21 | An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without check… |
CVE-2019-5637 | High | 7.5 | 2019-11-21 | When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the… |
CVE-2019-5636 | Medium | 5.3 | 2019-11-21 | When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as no… |
CVE-2019-19202 | High | 8.8 | 2019-11-21 | In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2… |
CVE-2019-19197 | High | 7.8 | 2019-11-21 | IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execu… |
CVE-2019-19191 | High | 7.8 | 2019-11-21 | Shibboleth Service Provider (SP) 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user (the shibd accoun… |
CVE-2019-19033 | Critical | 9.8 | 2019-11-21 | Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any use… |
CVE-2019-19006 | Critical | 9.8 | 2019-11-21 | Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. |
CVE-2019-18890 | Medium | 6.5 | 2019-11-21 | A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query. |
CVE-2019-18886 | Medium | 5.3 | 2019-11-21 | An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on wheth… |
CVE-2019-18349 | Critical | 9.8 | 2019-11-21 | HotkeyP through 4.9 r96 allows privilege escalation in the privilege function in Commands.cpp. |
CVE-2019-16758 | High | 7.5 | 2019-11-21 | In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%… |
CVE-2019-16406 | High | 7.8 | 2019-11-21 | Centreon Web 19.04.4 has weak permissions within the OVA (aka VMware virtual machine) and OVF (aka VirtualBox virtual machine) files, allowing attackers to gai… |
CVE-2019-16405 | High | 7.2 | 2019-11-21 | Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x before 19.04.5 and 19.10.x before 19.10.2 allows Remote Code Execution by an administrator who can… |
CVE-2019-15511 | High | 7.8 | 2019-11-21 | An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker… |
CVE-2019-5072 | High | 7.8 | 2019-11-21 | An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi… |
CVE-2019-5071 | High | 7.8 | 2019-11-21 | An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi… |
CVE-2019-10767 | High | 7.5 | 2019-11-21 | An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited… |
CVE-2019-6693 | Medium | 6.5 | 2019-11-21 | Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to dec… |
CVE-2019-5509 | Critical | 9.8 | 2019-11-21 | ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited c… |
CVE-2019-5087 | High | 8.8 | 2019-11-21 | An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer ove… |
CVE-2019-5086 | High | 8.8 | 2019-11-21 | An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools, version 1.0.7. An in… |
CVE-2019-17650 | High | 7.8 | 2019-11-21 | An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the s… |
CVE-2019-17272 | High | 7.2 | 2019-11-21 | All versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability which when successfully exploited could allow an administrative u… |
CVE-2019-2339 | High | 7.8 | 2019-11-21 | Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2336 | Medium | 5.5 | 2019-11-21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2335 | High | 7.5 | 2019-11-21 | While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2329 | High | 7.8 | 2019-11-21 | Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2318 | Medium | 5.5 | 2019-11-21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2019-2315 | High | 7.8 | 2019-11-21 | While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Sn… |
CVE-2019-2303 | Critical | 9.8 | 2019-11-21 | SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2297 | High | 7.8 | 2019-11-21 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CVE-2019-2295 | Medium | 5.5 | 2019-11-21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2019-2289 | Critical | 9.8 | 2019-11-21 | Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-2271 | Critical | 9.8 | 2019-11-21 | Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-2268 | Critical | 9.8 | 2019-11-21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2019-2266 | High | 7.8 | 2019-11-21 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2251 | High | 7.8 | 2019-11-21 | If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon… |
CVE-2019-18958 | High | 7.8 | 2019-11-21 | Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG… |
CVE-2019-17421 | High | 7.8 | 2019-11-21 | Incorrect file permissions on the packaged Nipper executable file in Zoho ManageEngine OpManager 12.4.072 and Firewall Analyzer 12.4.072 allow local users to e… |
CVE-2019-16548 | High | 8.8 | 2019-11-21 | A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provisi… |
CVE-2019-16547 | Medium | 4.3 | 2019-11-21 | Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to ob… |
CVE-2019-16546 | Medium | 5.9 | 2019-11-21 | Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle a… |
CVE-2019-16545 | Medium | 6.5 | 2019-11-21 | Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resul… |
CVE-2019-16544 | High | 8.8 | 2019-11-21 | Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can b… |
CVE-2019-16543 | Medium | 5.5 | 2019-11-21 | Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed… |
CVE-2019-16542 | Medium | 6.5 | 2019-11-21 | Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can b… |
CVE-2019-16541 | Critical | 9.9 | 2019-11-21 | Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use crede… |
CVE-2019-16540 | Medium | 6.5 | 2019-11-21 | A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the J… |
CVE-2019-16539 | Medium | 6.5 | 2019-11-21 | A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles. |
CVE-2019-16538 | High | 8.8 | 2019-11-21 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed… |
CVE-2019-16340 | Critical | 9.8 | 2019-11-21 | Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI. |
CVE-2019-15704 | Medium | 5.5 | 2019-11-21 | A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the conso… |
CVE-2019-10627 | Critical | 9.8 | 2019-11-21 | Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect bu… |
CVE-2019-10617 | High | 7.8 | 2019-11-21 | Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377… |
CVE-2019-10566 | High | 7.8 | 2019-11-21 | Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon… |
CVE-2019-10563 | High | 7.8 | 2019-11-21 | Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Con… |
CVE-2019-10535 | Medium | 5.5 | 2019-11-21 | Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto… |
CVE-2019-10503 | High | 7.8 | 2019-11-21 | Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Sna… |
CVE-2019-10490 | Medium | 5.5 | 2019-11-21 | Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-10486 | High | 7.0 | 2019-11-21 | Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Sn… |
CVE-2019-19037 | Medium | 5.5 | 2019-11-21 | ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be… |
CVE-2019-19039 | Medium | 5.5 | 2019-11-21 | __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to o… |
CVE-2019-19036 | Medium | 5.5 | 2019-11-21 | btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. |
CVE-2019-6853 | Medium | 6.1 | 2019-11-20 | A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and… |
CVE-2019-6852 | High | 7.5 | 2019-11-20 | A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules… |
CVE-2019-3466 | High | 7.8 | 2019-11-20 | The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which coul… |
CVE-2019-18858 | Critical | 9.8 | 2019-11-20 | CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. |
CVE-2019-4561 | High | 8.8 | 2019-11-20 | IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By… |
CVE-2019-4530 | Medium | 6.5 | 2019-11-20 | IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be able to. IBM X-Force… |
CVE-2019-5542 | High | 7.7 | 2019-11-20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation o… |
CVE-2019-5541 | Critical | 9.1 | 2019-11-20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual network adapter. Suc… |
CVE-2019-5540 | High | 7.7 | 2019-11-20 | VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation o… |
CVE-2019-10765 | Critical | 9.8 | 2019-11-20 | iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory. |
CVE-2019-16200 | High | 7.5 | 2019-11-20 | GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-le… |
CVE-2019-15073 | Medium | 6.1 | 2019-11-20 | An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This v… |
CVE-2019-15072 | Medium | 6.1 | 2019-11-20 | The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary… |
CVE-2019-15071 | Medium | 6.1 | 2019-11-20 | The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION… |
CVE-2019-6191 | High | 7.8 | 2019-11-20 | A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation. |
CVE-2019-6189 | High | 7.8 | 2019-11-20 | A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsig… |
CVE-2019-6187 | Medium | 6.5 | 2019-11-20 | A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned us… |
CVE-2019-6186 | High | 8.8 | 2019-11-20 | A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code a… |
CVE-2019-6184 | High | 7.8 | 2019-11-20 | A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation. |
CVE-2019-6176 | High | 7.5 | 2019-11-20 | A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service. |
CVE-2019-19126 | Low | 3.3 | 2019-11-19 | On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program executio… |
CVE-2019-12421 | High | 8.8 | 2019-11-19 | When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token… |
CVE-2019-10083 | Medium | 5.3 | 2019-11-19 | When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not… |
CVE-2019-10080 | Medium | 6.5 | 2019-11-19 | The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has th… |
CVE-2019-10768 | High | 7.5 | 2019-11-19 | In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload. |
CVE-2019-10766 | Critical | 9.8 | 2019-11-19 | Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization. |
CVE-2019-11289 | High | 8.6 | 2019-11-19 | Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route s… |
CVE-2019-18934 | High | 7.3 | 2019-11-19 | Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This is… |
CVE-2019-16861 | High | 7.3 | 2019-11-19 | Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or… |
CVE-2019-16860 | High | 7.3 | 2019-11-19 | Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could crea… |
CVE-2019-12422 | High | 7.5 | 2019-11-18 | Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack. |
CVE-2019-19117 | High | 8.8 | 2019-11-18 | /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shel… |