2019 CVEs (page 62)
Page 62 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11021 | High | 7.2 | 2019-10-24 | admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: "While inadvertently allowi… |
CVE-2019-18201 | High | 7.5 | 2019-10-24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, an attacker is… |
CVE-2019-18200 | Critical | 9.8 | 2019-10-24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, they are prone… |
CVE-2019-13653 | Critical | 9.8 | 2019-10-24 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow triggerPort OS Command Injection (issue 5 of 5). |
CVE-2019-13652 | Critical | 9.8 | 2019-10-24 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow serviceName OS Command Injection (issue 4 of 5). |
CVE-2019-13651 | Critical | 9.8 | 2019-10-24 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow portMappingProtocol OS Command Injection (issue 3 of 5). |
CVE-2019-13650 | Critical | 9.8 | 2019-10-24 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow internalPort OS Command Injection (issue 2 of 5). |
CVE-2019-13649 | Critical | 9.8 | 2019-10-24 | TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n allow externalPort OS Command Injection (issue 1 of 5). |
CVE-2019-12017 | Critical | 9.8 | 2019-10-24 | A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login and ticket… |
CVE-2019-6692 | High | 7.8 | 2019-10-24 | A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via… |
CVE-2019-18409 | High | 7.8 | 2019-10-24 | The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (whi… |
CVE-2019-18408 | High | 7.5 | 2019-10-24 | archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free in a certain ARCHIVE_FAILED situation, r… |
CVE-2019-18199 | Medium | 6.6 | 2019-10-24 | An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of… |
CVE-2019-17581 | Medium | 6.1 | 2019-10-24 | tonyy dormsystem through 1.3 allows DOM XSS. |
CVE-2019-15703 | High | 7.5 | 2019-10-24 | An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not suppor… |
CVE-2019-4486 | Medium | 5.4 | 2019-10-24 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… |
CVE-2019-4459 | Medium | 5.4 | 2019-10-24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerabil… |
CVE-2019-4398 | Low | 3.3 | 2019-10-24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive informati… |
CVE-2019-4397 | Medium | 6.5 | 2019-10-24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters. This m… |
CVE-2019-18394 | Critical | 9.8 | 2019-10-24 | A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET… |
CVE-2019-18393 | Medium | 5.3 | 2019-10-24 | PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a director… |
CVE-2019-18387 | Critical | 9.8 | 2019-10-23 | Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL com… |
CVE-2019-18213 | High | 8.8 | 2019-10-23 | XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Studio and other products, all… |
CVE-2019-18212 | Medium | 6.5 | 2019-10-23 | XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Stu… |
CVE-2019-8238 | High | 7.5 | 2019-10-23 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier; 2019.010.20099 and earlier versions; 2017.011.30140 and earlier version; 2017.011.30138 and earli… |
CVE-2019-8237 | Critical | 9.8 | 2019-10-23 | Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.3049… |
CVE-2019-8236 | Critical | 9.8 | 2019-10-23 | Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escal… |
CVE-2019-18385 | High | 7.5 | 2019-10-23 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring. |
CVE-2019-18384 | Medium | 6.5 | 2019-10-23 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrat… |
CVE-2019-18383 | High | 7.5 | 2019-10-23 | An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramaster_TNAS-00E43A_config_backup.bin without per… |
CVE-2019-18382 | High | 7.5 | 2019-10-23 | An issue was discovered on AVStar PE204 3.10.70 IP camera devices. A denial of service can occur on open TCP port 23456. After a TELNET connection, no TCP port… |
CVE-2019-18371 | High | 7.5 | 2019-10-23 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconf… |
CVE-2019-18370 | Critical | 9.8 | 2019-10-23 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar… |
CVE-2019-18359 | Medium | 5.5 | 2019-10-23 | A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of… |
CVE-2019-12415 | Medium | 5.5 | 2019-10-23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an at… |
CVE-2019-9597 | Medium | 6.5 | 2019-10-23 | Darktrace Enterprise Immune System before 3.1 allows CSRF via the /config endpoint. |
CVE-2019-9596 | Medium | 6.5 | 2019-10-23 | Darktrace Enterprise Immune System before 3.1 allows CSRF via the /whitelisteddomains endpoint. |
CVE-2019-6144 | Medium | 6.5 | 2019-10-23 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint (versions 19.04 through 19.08) and bypass DLP and Web protection. |
CVE-2019-3982 | Medium | 6.5 | 2019-10-23 | Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation of specific imported scan types. An authen… |
CVE-2019-18357 | Medium | 6.1 | 2019-10-23 | An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2). |
CVE-2019-18356 | Medium | 6.1 | 2019-10-23 | An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 1 of 2). |
CVE-2019-18355 | Critical | 9.8 | 2019-10-23 | An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7. |
CVE-2019-18350 | Medium | 6.1 | 2019-10-23 | In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in… |
CVE-2019-18348 | Medium | 6.1 | 2019-10-23 | An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a u… |
CVE-2019-17606 | Medium | 6.1 | 2019-10-23 | The Post editor functionality in the hexo-admin plugin versions 2.3.0 and earlier for Node.js is vulnerable to stored XSS via the content of a post. |
CVE-2019-17093 | High | 7.8 | 2019-10-23 | An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\sys… |
CVE-2019-16977 | Medium | 6.1 | 2019-10-23 | In FusionPBX up to 4.5.7, the file app\extensions\extension_imports.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in… |
CVE-2019-16975 | Medium | 6.1 | 2019-10-23 | In FusionPBX up to 4.5.7, the file app\contacts\contact_notes.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to… |
CVE-2019-11933 | Critical | 9.8 | 2019-10-23 | A heap buffer overflow bug in libpl_droidsonroids_gif before 1.2.19, as used in WhatsApp for Android before version 2.19.291 could allow remote attackers to ex… |
CVE-2019-11283 | High | 8.8 | 2019-10-23 | Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs ca… |
CVE-2019-11282 | Medium | 4.3 | 2019-10-23 | Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim… |
CVE-2019-18344 | Critical | 9.8 | 2019-10-23 | Sourcecodester Online Grading System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via th… |
CVE-2019-18281 | Medium | 4.3 | 2019-10-23 | An out-of-bounds memory access in the generateDirectionalRuns() function in qtextengine.cpp in Qt qtbase 5.11.x and 5.12.x before 5.12.5 allows attackers to ca… |
CVE-2019-16976 | Medium | 6.1 | 2019-10-23 | In FusionPBX up to 4.5.7, the file app\destinations\destination_imports.php uses an unsanitized "query_string" variable coming from the URL, which is reflected… |
CVE-2019-18280 | High | 8.8 | 2019-10-23 | Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an atta… |
CVE-2019-18278 | High | 7.8 | 2019-10-23 | When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqt_plugin!vlc_entry_licens… |
CVE-2019-18277 | High | 7.5 | 2019-10-23 | A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "chunked" value were not being correctly re… |
CVE-2019-18220 | High | 8.8 | 2019-10-23 | Sitemagic CMS 4.4.1 is affected by a Cross-Site-Request-Forgery (CSRF) issue as it doesn't implement any method to validate incoming requests, allowing the exe… |
CVE-2019-18219 | Medium | 6.1 | 2019-10-23 | Sitemagic CMS 4.4.1 is affected by a Cross-Site-Scripting (XSS) vulnerability, as it fails to validate user input. The affected components (index.php, upgrade… |
CVE-2019-10476 | High | 7.8 | 2019-10-23 | Jenkins Zulip Plugin 1.1.0 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by user… |
CVE-2019-10475 | Medium | 6.1 | 2019-10-23 | A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided… |
CVE-2019-10474 | Medium | 4.3 | 2019-10-23 | A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on… |
CVE-2019-10473 | Medium | 4.3 | 2019-10-23 | A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of crede… |
CVE-2019-10472 | Medium | 6.5 | 2019-10-23 | A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using… |
CVE-2019-10471 | High | 8.8 | 2019-10-23 | A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-spec… |
CVE-2019-10470 | Medium | 6.5 | 2019-10-23 | A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate cr… |
CVE-2019-10469 | Medium | 6.5 | 2019-10-23 | A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specif… |
CVE-2019-10468 | High | 8.8 | 2019-10-23 | A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to connect to an attacker-specified URL using… |
CVE-2019-10467 | Medium | 6.5 | 2019-10-23 | Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read p… |
CVE-2019-10466 | High | 8.1 | 2019-10-23 | An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities… |
CVE-2019-10465 | Medium | 4.3 | 2019-10-23 | A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attack… |
CVE-2019-10464 | High | 8.8 | 2019-10-23 | A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified… |
CVE-2019-10463 | Medium | 6.5 | 2019-10-23 | A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified… |
CVE-2019-10462 | High | 8.1 | 2019-10-23 | A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-spe… |
CVE-2019-10461 | High | 7.8 | 2019-10-23 | Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where t… |
CVE-2019-10460 | High | 7.8 | 2019-10-23 | Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they coul… |
CVE-2019-10459 | Medium | 6.5 | 2019-10-23 | Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job con… |
CVE-2019-14276 | Medium | 6.5 | 2019-10-23 | WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request body. |
CVE-2019-16973 | Medium | 6.1 | 2019-10-22 | In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in HTML, l… |
CVE-2019-16972 | Medium | 6.1 | 2019-10-22 | In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leadin… |
CVE-2019-16971 | Medium | 6.1 | 2019-10-22 | In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized "contact_uuid" variable coming from the URL, which is reflected on 3 oc… |
CVE-2019-8089 | Medium | 6.1 | 2019-10-22 | Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive informatio… |
CVE-2019-15587 | Medium | 5.4 | 2019-10-22 | In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. |
CVE-2019-12290 | High | 7.5 | 2019-10-22 | GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in… |
CVE-2019-12148 | Critical | 9.8 | 2019-10-22 | The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability invol… |
CVE-2019-12147 | Critical | 9.8 | 2019-10-22 | The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon… |
CVE-2019-10079 | High | 7.5 | 2019-10-22 | Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't limit the number of setting frames sent f… |
CVE-2019-4523 | High | 7.8 | 2019-10-22 | IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attac… |
CVE-2019-17189 | Medium | 5.4 | 2019-10-22 | totemodata 3.0.0_b936 has XSS via a folder name. |
CVE-2019-12967 | Medium | 6.5 | 2019-10-22 | Stephan Mooltipass Moolticute through 0.42.1 (and possibly earlier versions) has Incorrect Access Control. |
CVE-2019-11674 | Medium | 5.9 | 2019-10-22 | Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid ce… |
CVE-2019-17424 | High | 7.8 | 2019-10-22 | A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall config… |
CVE-2019-17400 | High | 7.5 | 2019-10-21 | The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. |
CVE-2019-16404 | High | 8.8 | 2019-10-21 | Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr databa… |
CVE-2019-17498 | High | 8.1 | 2019-10-21 | In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an… |
CVE-2019-17220 | Medium | 6.1 | 2019-10-21 | Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line. |
CVE-2019-16974 | Medium | 6.1 | 2019-10-21 | In FusionPBX up to 4.5.7, the file app\contacts\contact_times.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to… |
CVE-2019-16969 | Medium | 6.1 | 2019-10-21 | In FusionPBX up to 4.5.7, the file app\fifo_list\fifo_interactive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading… |
CVE-2019-16970 | Medium | 6.1 | 2019-10-21 | In FusionPBX up to 4.5.7, the file app\sip_status\sip_status.php uses an unsanitized "savemsg" variable coming from the URL, which is reflected in HTML, leadin… |
CVE-2019-16968 | Medium | 6.1 | 2019-10-21 | An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable coming from th… |