2019 CVEs (page 55)
Page 55 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11171 | Critical | 9.8 | 2019-11-14 | Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation… |
CVE-2019-11170 | High | 7.8 | 2019-11-14 | Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, esca… |
CVE-2019-11168 | Critical | 9.1 | 2019-11-14 | Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclo… |
CVE-2019-11156 | High | 7.8 | 2019-11-14 | Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, deni… |
CVE-2019-11155 | High | 7.1 | 2019-11-14 | Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of s… |
CVE-2019-11154 | High | 7.1 | 2019-11-14 | Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of s… |
CVE-2019-11153 | High | 7.8 | 2019-11-14 | Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to potentially enable esc… |
CVE-2019-11152 | High | 8.8 | 2019-11-14 | Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of ser… |
CVE-2019-11151 | High | 7.8 | 2019-11-14 | Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of ser… |
CVE-2019-11137 | High | 8.2 | 2019-11-14 | Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5… |
CVE-2019-11136 | Medium | 6.7 | 2019-11-14 | Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(… |
CVE-2019-8248 | Critical | 9.8 | 2019-11-14 | Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2019-8247 | Critical | 9.8 | 2019-11-14 | Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2019-8246 | Critical | 9.8 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2019-8244 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8243 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8242 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8241 | Medium | 4.3 | 2019-11-14 | Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8240 | High | 7.5 | 2019-11-14 | Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-8239 | High | 7.5 | 2019-11-14 | Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to information disclosure. |
CVE-2019-7962 | High | 7.8 | 2019-11-14 | Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege… |
CVE-2019-7960 | High | 7.8 | 2019-11-14 | Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege es… |
CVE-2019-18649 | Medium | 4.8 | 2019-11-14 | When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS. |
CVE-2019-18648 | Medium | 4.8 | 2019-11-14 | When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields. |
CVE-2019-18647 | High | 7.2 | 2019-11-14 | The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user. |
CVE-2019-18646 | High | 7.2 | 2019-11-14 | The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin… |
CVE-2019-18957 | Medium | 6.1 | 2019-11-14 | Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS. |
CVE-2019-18895 | High | 7.8 | 2019-11-14 | Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable… |
CVE-2019-18885 | Medium | 5.5 | 2019-11-14 | fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devi… |
CVE-2019-18949 | High | 7.5 | 2019-11-14 | SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webp… |
CVE-2019-16863 | Medium | 5.9 | 2019-11-14 | STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA… |
CVE-2019-3663 | Critical | 9.8 | 2019-11-14 | Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password… |
CVE-2019-3662 | Medium | 6.5 | 2019-11-14 | Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unint… |
CVE-2019-3661 | High | 8.1 | 2019-11-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authent… |
CVE-2019-3640 | Medium | 4.8 | 2019-11-14 | Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to… |
CVE-2019-18954 | Medium | 5.3 | 2019-11-14 | Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/s… |
CVE-2019-5029 | Critical | 9.8 | 2019-11-13 | An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. Arbitrary shell commands surrounded… |
CVE-2019-3660 | High | 8.4 | 2019-11-13 | Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the s… |
CVE-2019-3651 | High | 8.8 | 2019-11-13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an admi… |
CVE-2019-3650 | Medium | 5.3 | 2019-11-13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser cr… |
CVE-2019-3649 | Medium | 5.3 | 2019-11-13 | Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed creden… |
CVE-2019-3420 | Medium | 6.5 | 2019-11-13 | All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to… |
CVE-2019-18952 | Critical | 9.8 | 2019-11-13 | SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a… |
CVE-2019-18951 | High | 7.5 | 2019-11-13 | SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files. |
CVE-2019-18240 | Critical | 9.8 | 2019-11-13 | In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary… |
CVE-2019-13555 | Medium | 5.9 | 2019-11-13 | In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU… |
CVE-2019-0396 | High | 7.1 | 2019-11-13 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML… |
CVE-2019-0388 | Medium | 5.3 | 2019-11-13 | SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insu… |
CVE-2019-0386 | Medium | 6.3 | 2019-11-13 | Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01… |
CVE-2019-18923 | Medium | 6.1 | 2019-11-13 | Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from go-camo's origin. |
CVE-2019-0393 | Medium | 4.3 | 2019-11-13 | An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database… |
CVE-2019-0391 | Medium | 4.3 | 2019-11-13 | Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise… |
CVE-2019-0390 | Medium | 4.3 | 2019-11-13 | Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Conn… |
CVE-2019-0389 | High | 8.8 | 2019-11-13 | An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for al… |
CVE-2019-0385 | Medium | 6.5 | 2019-11-13 | SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. |
CVE-2019-0382 | Medium | 5.4 | 2019-11-13 | A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in ve… |
CVE-2019-17550 | Medium | 6.1 | 2019-11-13 | The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and J… |
CVE-2019-17515 | Medium | 6.1 | 2019-11-13 | The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execu… |
CVE-2019-9467 | Medium | 6.7 | 2019-11-13 | In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with Sys… |
CVE-2019-2210 | High | 7.8 | 2019-11-13 | In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priv… |
CVE-2019-18884 | High | 8.8 | 2019-11-13 | index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users. |
CVE-2019-18883 | Medium | 6.1 | 2019-11-13 | XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field. |
CVE-2019-18844 | High | 7.5 | 2019-11-13 | The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mech… |
CVE-2019-18837 | High | 8.6 | 2019-11-13 | An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files out… |
CVE-2019-18793 | Medium | 6.1 | 2019-11-13 | Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter. |
CVE-2019-16951 | Medium | 5.3 | 2019-11-13 | A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own domain name. When the… |
CVE-2019-16950 | Medium | 6.1 | 2019-11-13 | An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied Java… |
CVE-2019-2233 | Medium | 6.8 | 2019-11-13 | In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of p… |
CVE-2019-2214 | High | 7.8 | 2019-11-13 | In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2019-2213 | High | 7.4 | 2019-11-13 | In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no ad… |
CVE-2019-2212 | Medium | 5.5 | 2019-11-13 | In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privileges need… |
CVE-2019-2211 | High | 7.5 | 2019-11-13 | In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. This could lead to local information disclosure with no additional executio… |
CVE-2019-2209 | Medium | 5.5 | 2019-11-13 | In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wi… |
CVE-2019-2208 | High | 7.5 | 2019-11-13 | In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code generation… |
CVE-2019-2207 | High | 7.8 | 2019-11-13 | In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local escalation of… |
CVE-2019-2206 | High | 8.8 | 2019-11-13 | In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over N… |
CVE-2019-2205 | Critical | 9.8 | 2019-11-13 | In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote code executi… |
CVE-2019-2204 | Critical | 9.8 | 2019-11-13 | In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code execution in… |
CVE-2019-2203 | High | 7.8 | 2019-11-13 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2019-2202 | High | 7.8 | 2019-11-13 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2019-2201 | High | 7.8 | 2019-11-13 | In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote… |
CVE-2019-2199 | Medium | 6.7 | 2019-11-13 | In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with System… |
CVE-2019-2198 | Medium | 5.5 | 2019-11-13 | In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges… |
CVE-2019-2197 | Medium | 5.5 | 2019-11-13 | In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to local infor… |
CVE-2019-2196 | Medium | 5.5 | 2019-11-13 | In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User int… |
CVE-2019-2195 | High | 7.8 | 2019-11-13 | In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. This could lead to local escalat… |
CVE-2019-2193 | High | 7.8 | 2019-11-13 | In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local… |
CVE-2019-2192 | High | 7.8 | 2019-11-13 | In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with n… |
CVE-2019-2036 | Critical | 9.8 | 2019-11-13 | In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege… |
CVE-2019-18279 | High | 8.8 | 2019-11-13 | In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated privileges. Adverse i… |
CVE-2019-16949 | Medium | 6.5 | 2019-11-13 | An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email address specified at… |
CVE-2019-5294 | High | 7.5 | 2019-11-13 | There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected p… |
CVE-2019-5293 | Medium | 6.5 | 2019-11-13 | Some Huawei products have a memory leak vulnerability when handling some messages. A remote attacker with operation privilege could exploit the vulnerability b… |
CVE-2019-5289 | High | 7.5 | 2019-11-13 | Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the specific packet lengt… |
CVE-2019-16948 | Critical | 9.8 | 2019-11-13 | An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/… |
CVE-2019-5292 | Low | 3.3 | 2019-11-13 | Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), the versions befor… |
CVE-2019-18931 | High | 8.8 | 2019-11-13 | Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters. |
CVE-2019-18930 | High | 8.8 | 2019-11-13 | Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer ove… |
CVE-2019-18929 | High | 8.8 | 2019-11-13 | Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stac… |
CVE-2019-15948 | High | 8.8 | 2019-11-13 | Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via… |