2019 CVEs (page 67)
Page 67 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-17601 | Critical | 9.8 | 2019-10-15 | In MiniShare 1.4.1, there is a stack-based buffer overflow via an HTTP CONNECT request, which allows an attacker to achieve arbitrary code execution, a similar… |
CVE-2019-17398 | Critical | 9.8 | 2019-10-15 | In the Dark Horse Comics application 1.3.21 for Android, token information (equivalent to the username and password) is stored in the log during authentication… |
CVE-2019-17396 | Critical | 9.8 | 2019-10-15 | In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attacke… |
CVE-2019-17394 | Critical | 9.8 | 2019-10-15 | In the Seesaw Parent and Family application 6.2.5 for Android, the username and password are stored in the log during authentication, and may be available to a… |
CVE-2019-17356 | Medium | 6.5 | 2019-10-15 | The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a… |
CVE-2019-17355 | Critical | 9.8 | 2019-10-15 | In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via log… |
CVE-2019-14832 | High | 7.5 | 2019-10-15 | A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated att… |
CVE-2019-17397 | Critical | 9.8 | 2019-10-15 | In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attacker… |
CVE-2019-10760 | Critical | 9.9 | 2019-10-15 | safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. |
CVE-2019-10759 | Critical | 9.9 | 2019-10-15 | safer-eval before 1.3.4 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. |
CVE-2019-17600 | Critical | 9.8 | 2019-10-15 | Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled. |
CVE-2019-17195 | Critical | 9.8 | 2019-10-15 | Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential informa… |
CVE-2019-12944 | High | 7.5 | 2019-10-15 | Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable. |
CVE-2019-17223 | Medium | 6.1 | 2019-10-15 | There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php. |
CVE-2019-17595 | Medium | 5.4 | 2019-10-14 | There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. |
CVE-2019-17594 | Medium | 5.3 | 2019-10-14 | There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. |
CVE-2019-17593 | High | 8.8 | 2019-10-14 | JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator. |
CVE-2019-17592 | High | 7.5 | 2019-10-14 | The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expres… |
CVE-2019-14823 | High | 7.4 | 2019-10-14 | A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the r… |
CVE-2019-14737 | High | 7.8 | 2019-10-14 | Ubisoft Uplay 92.0.0.6280 has Insecure Permissions. |
CVE-2019-3767 | High | 8.2 | 2019-10-14 | Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the… |
CVE-2019-16282 | Medium | 5.4 | 2019-10-14 | In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field. An authenticated unprivileged u… |
CVE-2019-12941 | Critical | 9.8 | 2019-10-14 | AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network… |
CVE-2019-17044 | High | 7.8 | 2019-10-14 | An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges… |
CVE-2019-17043 | High | 7.8 | 2019-10-14 | An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her… |
CVE-2019-16279 | High | 7.5 | 2019-10-14 | A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request. |
CVE-2019-16278 | Critical | 9.8 | 2019-10-14 | Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. |
CVE-2019-14227 | Medium | 6.1 | 2019-10-14 | OX App Suite 7.10.1 and 7.10.2 allows XSS. |
CVE-2019-14226 | High | 8.1 | 2019-10-14 | OX App Suite through 7.10.2 has Insecure Permissions. |
CVE-2019-14225 | Medium | 5.4 | 2019-10-14 | OX App Suite 7.10.1 and 7.10.2 allows SSRF. |
CVE-2019-17583 | High | 7.5 | 2019-10-14 | idreamsoft iCMS 7.0.15 allows remote attackers to cause a denial of service (resource consumption) via a query for many comments, as demonstrated by the adminc… |
CVE-2019-17580 | Critical | 9.8 | 2019-10-14 | tonyy dormsystem through 1.3 allows SQL Injection in admin.php. |
CVE-2019-17511 | High | 7.5 | 2019-10-14 | There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via log_get.ph… |
CVE-2019-16519 | High | 7.8 | 2019-10-14 | ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks. |
CVE-2019-9745 | High | 7.8 | 2019-10-14 | CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service (Recognit… |
CVE-2019-17579 | Medium | 6.1 | 2019-10-14 | SonarSource SonarQube before 7.8 has XSS in project links on account/projects. |
CVE-2019-17575 | High | 7.2 | 2019-10-14 | A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privilege… |
CVE-2019-16344 | Medium | 6.1 | 2019-10-14 | A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or H… |
CVE-2019-14858 | Medium | 5.5 | 2019-10-14 | A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_… |
CVE-2019-14838 | Medium | 4.9 | 2019-10-14 | A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime sta… |
CVE-2019-4572 | Medium | 4.4 | 2019-10-14 | IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an… |
CVE-2019-17574 | Critical | 9.1 | 2019-10-14 | An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the do_action… |
CVE-2019-17553 | Critical | 9.8 | 2019-10-14 | An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the admin/?n=tags&c=index&a=doSaveTags URI. |
CVE-2019-17552 | Critical | 9.8 | 2019-10-14 | An issue was discovered in idreamsoft iCMS v7.0.14. There is a spider_project.admincp.php SQL injection vulnerability in the 'upload spider project scheme' fea… |
CVE-2019-17408 | Critical | 9.8 | 2019-10-14 | parserIfLabel in inc/zzz_template.php in ZZZCMS zzzphp 1.7.3 allows remote attackers to execute arbitrary code because the danger_key function can be bypassed… |
CVE-2019-17547 | High | 8.8 | 2019-10-14 | In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free. |
CVE-2019-17546 | High | 8.8 | 2019-10-14 | tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer… |
CVE-2019-17545 | Critical | 9.8 | 2019-10-14 | GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. |
CVE-2019-17544 | Critical | 9.1 | 2019-10-14 | libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character. |
CVE-2019-17543 | High | 8.1 | 2019-10-14 | LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a… |
CVE-2019-17542 | Critical | 9.8 | 2019-10-14 | FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. |
CVE-2019-17541 | High | 8.8 | 2019-10-14 | ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c. |
CVE-2019-17540 | High | 8.8 | 2019-10-14 | ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. |
CVE-2019-17539 | Critical | 9.8 | 2019-10-14 | In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close… |
CVE-2019-17501 | High | 8.8 | 2019-10-14 | Centreon 19.04 allows attackers to execute arbitrary OS commands via the Command Line field of main.php?p=60807&type=4 (aka the Configuration > Commands > Disc… |
CVE-2019-17538 | High | 7.5 | 2019-10-13 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring. |
CVE-2019-17537 | High | 7.5 | 2019-10-13 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring. |
CVE-2019-17536 | Medium | 4.9 | 2019-10-13 | Gila CMS through 1.11.4 allows Unrestricted Upload of a File with a Dangerous Type via the moveAction function in core/controllers/fm.php. The attacker needs t… |
CVE-2019-17535 | Medium | 6.1 | 2019-10-13 | Gila CMS through 1.11.4 allows blog-list.php XSS, in both the gila-blog and gila-mag themes, via the search parameter, a related issue to CVE-2019-9647. |
CVE-2019-17534 | High | 8.8 | 2019-10-13 | vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-afte… |
CVE-2019-17533 | High | 8.2 | 2019-10-13 | Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized me… |
CVE-2019-17532 | High | 7.5 | 2019-10-12 | An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rule… |
CVE-2019-17531 | Critical | 9.8 | 2019-10-12 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific… |
CVE-2019-17530 | High | 7.8 | 2019-10-12 | An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4_Cenc… |
CVE-2019-17529 | High | 7.8 | 2019-10-12 | An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4_CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp… |
CVE-2019-17528 | High | 7.5 | 2019-10-12 | An issue was discovered in Bento4 1.5.1.0. There is a SEGV in the function AP4_TfhdAtom::SetDefaultSampleSize at Core/Ap4TfhdAtom.h when called from AP4_Proces… |
CVE-2019-17502 | High | 7.5 | 2019-10-12 | Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-Length header. read.c, request.c, and uti… |
CVE-2019-17522 | Medium | 4.8 | 2019-10-12 | A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the admin_index.php?page=settings SITE NAME field (aka SITE_NAME), a related issue to CVE-20… |
CVE-2019-17521 | Medium | 6.5 | 2019-10-12 | An issue was discovered in Landing-CMS 0.0.6. There is a CSRF vulnerability that can change the admin's password via the password/ URI, |
CVE-2019-17514 | High | 7.5 | 2019-10-12 | library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irrep… |
CVE-2019-17176 | Medium | 6.1 | 2019-10-11 | Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email… |
CVE-2019-17510 | Critical | 9.8 | 2019-10-11 | D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ re… |
CVE-2019-17509 | Critical | 9.8 | 2019-10-11 | D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ re… |
CVE-2019-17508 | Critical | 9.8 | 2019-10-11 | On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable. |
CVE-2019-17507 | High | 7.5 | 2019-10-11 | An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location… |
CVE-2019-17506 | Critical | 9.8 | 2019-10-11 | There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's us… |
CVE-2019-17505 | High | 7.5 | 2019-10-11 | D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml. An attacker can remotely obt… |
CVE-2019-2215 | High | 7.8 | 2019-10-11 | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerab… |
CVE-2019-2187 | Medium | 5.5 | 2019-10-11 | In nfc_ncif_decode_rf_params of nfc_ncif.cc, there is a possible out of bounds read due to an integer underflow. This could lead to local information disclosur… |
CVE-2019-2186 | High | 8.8 | 2019-10-11 | In GetMBheader of combined_decode.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2019-2185 | High | 8.8 | 2019-10-11 | In VlcDequantH263IntraBlock_SH of vlc_dequant.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… |
CVE-2019-2184 | High | 8.8 | 2019-10-11 | In PV_DecodePredictedIntraDC of dec_pred_intra_dc.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex… |
CVE-2019-2183 | Medium | 5.5 | 2019-10-11 | In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local i… |
CVE-2019-2173 | High | 7.8 | 2019-10-11 | In startActivityMayWait of ActivityStarter.java, there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local e… |
CVE-2019-2114 | High | 7.8 | 2019-10-11 | In the default privileges of NFC, there is a possible local bypass of user interaction requirements on package installation due to a default permission. This c… |
CVE-2019-2110 | Medium | 5.5 | 2019-10-11 | In ScreenRotationAnimation of ScreenRotationAnimation.java, there is a possible capture of a secure screen due to a missing permission check. This could lead t… |
CVE-2019-6335 | High | 7.5 | 2019-10-11 | A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a denial of ser… |
CVE-2019-14570 | High | 7.8 | 2019-10-11 | Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or infor… |
CVE-2019-14569 | High | 7.8 | 2019-10-11 | Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of service and/or info… |
CVE-2019-11167 | High | 7.8 | 2019-10-11 | Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable esc… |
CVE-2019-11120 | High | 7.8 | 2019-10-11 | Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enabl… |
CVE-2019-6333 | Medium | 6.7 | 2019-10-11 | A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vulnerability may all… |
CVE-2019-17504 | Medium | 6.1 | 2019-10-11 | An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remote attackers to in… |
CVE-2019-17503 | Medium | 5.3 | 2019-10-11 | An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd)… |
CVE-2019-17059 | Critical | 9.8 | 2019-10-11 | A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary comma… |
CVE-2019-14510 | Medium | 6.7 | 2019-10-11 | An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxx… |
CVE-2019-17499 | High | 8.8 | 2019-10-11 | The setter.xml component of the Common Gateway Interface on Compal CH7465LG 6.12.18.25-2p4 devices does not properly validate ping command arguments, which all… |
CVE-2019-17497 | Medium | 6.5 | 2019-10-11 | Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For ex… |
CVE-2019-17496 | Medium | 6.1 | 2019-10-11 | Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion. |
CVE-2019-17495 | Critical | 9.8 | 2019-10-10 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perf… |