2019 CVEs (page 60)
Page 60 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16675 | High | 7.8 | 2019-10-31 | An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ proje… |
CVE-2019-5043 | High | 7.5 | 2019-10-31 | An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can cause unrest… |
CVE-2019-5030 | High | 8.8 | 2019-10-31 | A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,02… |
CVE-2019-5023 | Medium | 5.9 | 2019-10-31 | An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecuri… |
CVE-2019-5010 | High | 7.5 | 2019-10-31 | An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate… |
CVE-2019-16295 | Medium | 4.6 | 2019-10-31 | Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.885 exists via the cmd_arg parameter. This can be exploited by a local a… |
CVE-2019-13551 | Critical | 9.8 | 2019-10-31 | Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to u… |
CVE-2019-13547 | Critical | 9.8 | 2019-10-31 | Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without… |
CVE-2019-13508 | Critical | 9.8 | 2019-10-31 | FreeTDS through 1.1.11 has a Buffer Overflow. |
CVE-2019-5151 | Critical | 10.0 | 2019-10-31 | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. A specially crafted unauthenticated HTTP request can cause a SQL injection, possibly leadin… |
CVE-2019-5150 | High | 8.9 | 2019-10-31 | An exploitable SQL injection vulnerability exist in YouPHPTube 7.7. When the "VideoTags" plugin is enabled, a specially crafted unauthenticated HTTP request ca… |
CVE-2019-5095 | Medium | 4.3 | 2019-10-31 | An issue summary information disclosure vulnerability exists in Atlassian Jira Tempo plugin, version 4.10.0. Authenticated users can obtain the summary for iss… |
CVE-2019-5049 | Critical | 10.0 | 2019-10-31 | An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel sha… |
CVE-2019-18396 | High | 7.2 | 2019-10-31 | An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the… |
CVE-2019-15710 | High | 7.2 | 2019-10-31 | An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arb… |
CVE-2019-18657 | Medium | 5.3 | 2019-10-31 | ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. |
CVE-2019-14356 | Medium | 5.3 | 2019-10-31 | On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the… |
CVE-2019-18656 | Medium | 6.1 | 2019-10-31 | Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML element… |
CVE-2019-18465 | Critical | 9.8 | 2019-10-31 | In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SF… |
CVE-2019-18464 | Critical | 9.8 | 2019-10-31 | In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabiliti… |
CVE-2019-16251 | Medium | 4.3 | 2019-10-31 | plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes. |
CVE-2019-12612 | High | 7.8 | 2019-10-31 | An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the we… |
CVE-2019-3421 | High | 8.0 | 2019-10-31 | The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can ex… |
CVE-2019-3419 | Medium | 5.7 | 2019-10-31 | A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build… |
CVE-2019-18369 | Medium | 5.3 | 2019-10-31 | In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible. |
CVE-2019-18368 | High | 7.3 | 2019-10-31 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. |
CVE-2019-18367 | Medium | 5.3 | 2019-10-31 | In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions. |
CVE-2019-18366 | Medium | 5.3 | 2019-10-31 | In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission. |
CVE-2019-18365 | Medium | 4.3 | 2019-10-31 | In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages. |
CVE-2019-18364 | Critical | 9.8 | 2019-10-31 | In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. |
CVE-2019-18363 | Medium | 5.3 | 2019-10-31 | In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances. |
CVE-2019-18362 | Medium | 5.3 | 2019-10-31 | JetBrains MPS before 2019.2.2 exposed listening ports to the network. |
CVE-2019-18361 | Medium | 5.3 | 2019-10-31 | JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution. |
CVE-2019-18360 | Medium | 5.3 | 2019-10-31 | In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery. |
CVE-2019-18425 | Critical | 9.8 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missi… |
CVE-2019-18424 | Medium | 6.8 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a ph… |
CVE-2019-18423 | High | 8.8 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_g… |
CVE-2019-18422 | High | 8.8 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling… |
CVE-2019-18421 | High | 7.5 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion an… |
CVE-2019-18420 | Medium | 6.5 | 2019-10-31 | An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall. hypercall_create_c… |
CVE-2019-17551 | Medium | 6.1 | 2019-10-31 | In Apak Wholesale Floorplanning Finance 6.31.8.3 and 6.31.8.5, an attacker can send an authenticated POST request with a malicious payload to /WFS/agreementVie… |
CVE-2019-18645 | Medium | 5.5 | 2019-10-31 | The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged di… |
CVE-2019-18644 | Medium | 5.9 | 2019-10-31 | The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be… |
CVE-2019-18635 | High | 7.5 | 2019-10-30 | An issue was discovered in Mooltipass Moolticute through v0.42.1 and v0.42.x-testing through v0.42.5-testing. There is a NULL pointer dereference in MPDevice_w… |
CVE-2019-18633 | Critical | 9.8 | 2019-10-30 | European Commission eIDAS-Node Integration Package before 2.3.1 has Missing Certificate Validation because a certain ExplicitKeyTrustEvaluator return value is… |
CVE-2019-18632 | Critical | 9.8 | 2019-10-30 | European Commission eIDAS-Node Integration Package before 2.3.1 allows Certificate Faking because an attacker can sign a manipulated SAML response with a forge… |
CVE-2019-12417 | Medium | 4.8 | 2019-10-30 | A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presen… |
CVE-2019-10762 | Critical | 9.8 | 2019-10-30 | columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping. |
CVE-2019-17326 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to arbitrary file deletion by issuing a HTTP GET request with a specially crafted paramet… |
CVE-2019-17325 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could… |
CVE-2019-17324 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This could lead to create… |
CVE-2019-17323 | High | 8.8 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML docum… |
CVE-2019-17322 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This ca… |
CVE-2019-17321 | Medium | 5.3 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure issue. When requesting web page associated with session, could leak username via… |
CVE-2019-18207 | Medium | 5.4 | 2019-10-30 | In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the In… |
CVE-2019-18206 | High | 8.8 | 2019-10-30 | A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload. |
CVE-2019-18205 | Medium | 6.1 | 2019-10-30 | Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1. The browsing component did not proper… |
CVE-2019-18204 | High | 8.8 | 2019-10-30 | Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution. |
CVE-2019-15682 | High | 7.5 | 2019-10-30 | RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attac… |
CVE-2019-7620 | High | 7.5 | 2019-10-30 | Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to… |
CVE-2019-7619 | Medium | 5.3 | 2019-10-30 | Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send… |
CVE-2019-8235 | Medium | 6.5 | 2019-10-30 | An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authent… |
CVE-2019-9926 | High | 8.8 | 2019-10-29 | An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScriptReport.view CSR… |
CVE-2019-9758 | Medium | 5.4 | 2019-10-29 | An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators from security/permis… |
CVE-2019-9757 | High | 7.5 | 2019-10-29 | An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-expor… |
CVE-2019-8287 | Critical | 9.8 | 2019-10-29 | TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. This attack appear… |
CVE-2019-6851 | High | 7.5 | 2019-10-29 | A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions… |
CVE-2019-6850 | High | 7.5 | 2019-10-29 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensiti… |
CVE-2019-6849 | High | 7.5 | 2019-10-29 | A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensiti… |
CVE-2019-6848 | High | 8.6 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BM… |
CVE-2019-6847 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6846 | Medium | 6.5 | 2019-10-29 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware… |
CVE-2019-6845 | High | 7.5 | 2019-10-29 | A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware… |
CVE-2019-6844 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6843 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware… |
CVE-2019-6842 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware vers… |
CVE-2019-6841 | Medium | 4.9 | 2019-10-29 | A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware… |
CVE-2019-5533 | Medium | 4.3 | 2019-10-29 | In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterprise users to obtai… |
CVE-2019-3979 | High | 7.5 | 2019-10-29 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even… |
CVE-2019-3978 | High | 7.5 | 2019-10-29 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent… |
CVE-2019-3977 | High | 7.5 | 2019-10-29 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade featur… |
CVE-2019-3976 | High | 8.8 | 2019-10-29 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name fie… |
CVE-2019-18624 | Critical | 9.8 | 2019-10-29 | Opera Mini for Android allows attackers to bypass intended restrictions on .apk file download/installation via an RTLO (aka Right to Left Override) approach, a… |
CVE-2019-18612 | Medium | 5.3 | 2019-10-29 | An issue was discovered in the AbuseFilter extension through 1.34 for MediaWiki. Previously hidden (restricted) AbuseFilter filters were viewable (or their dif… |
CVE-2019-18611 | Medium | 6.5 | 2019-10-29 | An issue was discovered in the CheckUser extension through 1.34 for MediaWiki. Certain sensitive information within oversighted edit summaries made available v… |
CVE-2019-18608 | High | 7.5 | 2019-10-29 | Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processin… |
CVE-2019-18604 | Critical | 9.8 | 2019-10-29 | In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled. |
CVE-2019-18603 | Medium | 5.9 | 2019-10-29 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent… |
CVE-2019-18602 | High | 7.5 | 2019-10-29 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a p… |
CVE-2019-18601 | High | 7.5 | 2019-10-29 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Deb… |
CVE-2019-16647 | High | 7.2 | 2019-10-29 | Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for Windows. |
CVE-2019-15683 | Critical | 9.8 | 2019-10-29 | TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into… |
CVE-2019-15681 | High | 7.5 | 2019-10-29 | LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory… |
CVE-2019-15680 | High | 7.5 | 2019-10-29 | TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploi… |
CVE-2019-15679 | Critical | 9.8 | 2019-10-29 | TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear… |
CVE-2019-15678 | Critical | 9.8 | 2019-10-29 | TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be… |
CVE-2019-13066 | Medium | 6.1 | 2019-10-29 | Sahi Pro 8.0.0 has a script manager arena located at _s_/dyn/pro/DBReports with many different areas that are vulnerable to reflected XSS, by updating a script… |
CVE-2019-10749 | Critical | 9.8 | 2019-10-29 | sequelize before version 3.35.1 allows attackers to perform a SQL Injection due to the JSON path keys not being properly sanitized in the Postgres dialect. |
CVE-2019-10748 | Critical | 9.8 | 2019-10-29 | Sequelize all versions prior to 3.35.1, 4.44.3, and 5.8.11 are vulnerable to SQL Injection due to JSON path keys not being properly escaped for the MySQL/Maria… |
CVE-2019-10743 | Medium | 5.5 | 2019-10-29 | All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that… |