2019 CVEs (page 77)
Page 77 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16902 | High | 7.5 | 2019-09-27 | In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full p… |
CVE-2019-11279 | High | 8.8 | 2019-09-26 | CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user c… |
CVE-2019-15891 | Medium | 5.3 | 2019-09-26 | An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that th… |
CVE-2019-15862 | High | 7.5 | 2019-09-26 | An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension (even if the a… |
CVE-2019-11278 | High | 8.8 | 2019-09-26 | CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft… |
CVE-2019-12562 | Medium | 6.1 | 2019-09-26 | Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notificatio… |
CVE-2019-16667 | High | 8.8 | 2019-09-26 | diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csr… |
CVE-2019-16915 | Critical | 9.8 | 2019-09-26 | An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a bas… |
CVE-2019-16914 | Medium | 6.1 | 2019-09-26 | An XSS issue was discovered in pfSense through 2.4.4-p3. In services_captiveportal_mac.php, the username and delmac parameters are displayed without sanitizati… |
CVE-2019-6175 | High | 7.5 | 2019-09-26 | A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-st… |
CVE-2019-6161 | High | 7.5 | 2019-09-26 | An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware version… |
CVE-2019-16894 | Critical | 9.8 | 2019-09-26 | download.php in inoERP 4.15 allows SQL injection through insecure deserialization. |
CVE-2019-16869 | High | 7.5 | 2019-09-26 | Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request sm… |
CVE-2019-16755 | Critical | 9.8 | 2019-09-26 | BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticate… |
CVE-2019-16532 | Medium | 6.1 | 2019-09-26 | An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. |
CVE-2019-16524 | Medium | 4.8 | 2019-09-26 | The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to im… |
CVE-2019-16409 | Medium | 5.3 | 2019-09-26 | In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This gu… |
CVE-2019-13523 | Medium | 5.3 | 2019-09-26 | In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configur… |
CVE-2019-12091 | High | 7.8 | 2019-09-26 | The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The… |
CVE-2019-10882 | High | 7.8 | 2019-09-26 | The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The… |
CVE-2019-10097 | High | 7.2 | 2019-09-26 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafte… |
CVE-2019-10092 | Medium | 6.1 | 2019-09-26 | In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on t… |
CVE-2019-10082 | Critical | 9.1 | 2019-09-26 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection… |
CVE-2019-0203 | High | 7.5 | 2019-09-26 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences o… |
CVE-2019-4378 | Medium | 6.5 | 2019-09-26 | IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a deni… |
CVE-2019-4262 | Medium | 5.3 | 2019-09-26 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from… |
CVE-2019-16910 | Medium | 5.3 | 2019-09-26 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which migh… |
CVE-2019-16904 | Medium | 5.4 | 2019-09-26 | TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted pas… |
CVE-2019-14844 | High | 7.5 | 2019-09-26 | A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556… |
CVE-2019-14273 | Medium | 5.3 | 2019-09-26 | In SilverStripe assets 4.0, there is broken access control on files. |
CVE-2019-14272 | Medium | 5.4 | 2019-09-26 | In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. |
CVE-2019-12617 | Low | 2.7 | 2019-09-26 | In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution. |
CVE-2019-16903 | Medium | 5.3 | 2019-09-26 | Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead. |
CVE-2019-16738 | Medium | 5.3 | 2019-09-26 | In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup. |
CVE-2019-16901 | High | 7.5 | 2019-09-26 | Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStat… |
CVE-2019-16900 | High | 7.5 | 2019-09-26 | Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c. |
CVE-2019-16899 | High | 7.5 | 2019-09-26 | In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x00000000005129… |
CVE-2019-16253 | High | 7.8 | 2019-09-25 | The Text-to-speech Engine (aka SamsungTTS) application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to syst… |
CVE-2019-16892 | Medium | 5.5 | 2019-09-25 | In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allo… |
CVE-2019-16890 | Medium | 5.4 | 2019-09-25 | Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments. |
CVE-2019-12717 | High | 7.8 | 2019-09-25 | A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute a… |
CVE-2019-12709 | Medium | 6.7 | 2019-09-25 | A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers c… |
CVE-2019-12672 | Medium | 6.8 | 2019-09-25 | A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute a… |
CVE-2019-12671 | High | 7.8 | 2019-09-25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute command… |
CVE-2019-12670 | Medium | 6.7 | 2019-09-25 | A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker within the IOx Guest Shell to modify the namespace cont… |
CVE-2019-12669 | High | 7.5 | 2019-09-25 | A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, rem… |
CVE-2019-12668 | Medium | 4.8 | 2019-09-25 | A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site s… |
CVE-2019-12667 | Medium | 4.8 | 2019-09-25 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS)… |
CVE-2019-12666 | Medium | 6.7 | 2019-09-25 | A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux opera… |
CVE-2019-12665 | High | 7.4 | 2019-09-25 | A vulnerability in the HTTP client feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to read and modify data that should… |
CVE-2019-12664 | High | 7.5 | 2019-09-25 | A vulnerability in the Dialer interface feature for ISDN connections in Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers (ISRs) could al… |
CVE-2019-12663 | High | 8.6 | 2019-09-25 | A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remo… |
CVE-2019-12662 | Medium | 6.7 | 2019-09-25 | A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 c… |
CVE-2019-12661 | Medium | 6.7 | 2019-09-25 | A vulnerability in a Virtualization Manager (VMAN) related CLI command of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitra… |
CVE-2019-12660 | Medium | 5.5 | 2019-09-25 | A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to write values to the underlying memory of an affected device… |
CVE-2019-12659 | High | 7.5 | 2019-09-25 | A vulnerability in the HTTP server code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the HTTP server to crash. The vulnera… |
CVE-2019-12658 | High | 7.5 | 2019-09-25 | A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resou… |
CVE-2019-12657 | High | 7.5 | 2019-09-25 | A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload… |
CVE-2019-12656 | High | 7.5 | 2019-09-25 | A vulnerability in the IOx application environment of multiple Cisco platforms could allow an unauthenticated, remote attacker to cause the IOx web server to s… |
CVE-2019-12655 | High | 7.5 | 2019-09-25 | A vulnerability in the FTP application layer gateway (ALG) functionality used by Network Address Translation (NAT), NAT IPv6 to IPv4 (NAT64), and the Zone-Base… |
CVE-2019-12654 | High | 7.5 | 2019-09-25 | A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to tri… |
CVE-2019-12653 | High | 7.5 | 2019-09-25 | A vulnerability in the Raw Socket Transport feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected… |
CVE-2019-12652 | High | 7.5 | 2019-09-25 | A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches could allow an unauthenticated, remote… |
CVE-2019-6656 | High | 7.5 | 2019-09-25 | BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerable versions of the client are bundled wi… |
CVE-2019-4571 | Medium | 5.4 | 2019-09-25 | IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri… |
CVE-2019-16889 | High | 7.5 | 2019-09-25 | Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container… |
CVE-2019-15941 | Critical | 9.8 | 2019-09-25 | OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization reques… |
CVE-2019-14666 | High | 8.8 | 2019-09-25 | GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery… |
CVE-2019-12651 | High | 8.8 | 2019-09-25 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands wi… |
CVE-2019-12650 | High | 8.8 | 2019-09-25 | Multiple vulnerabilities in the web-based user interface (Web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands wi… |
CVE-2019-12649 | Medium | 6.7 | 2019-09-25 | A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install and boot a malicious softwar… |
CVE-2019-12648 | High | 8.8 | 2019-09-25 | A vulnerability in the IOx application environment for Cisco IOS Software could allow an authenticated, remote attacker to gain unauthorized access to the Gues… |
CVE-2019-12647 | High | 7.5 | 2019-09-25 | A vulnerability in the Ident protocol handler of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to r… |
CVE-2019-12646 | High | 7.5 | 2019-09-25 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow… |
CVE-2019-6655 | Medium | 5.3 | 2019-09-25 | On versions 13.0.0-13.1.0.1, 12.1.0-12.1.4.1, 11.6.1-11.6.4, and 11.5.1-11.5.9, BIG-IP platforms where AVR, ASM, APM, PEM, AFM, and/or AAM is provisioned may l… |
CVE-2019-6654 | Medium | 4.3 | 2019-09-25 | On versions 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, and 11.5.1-11.6.5, the BIG-IP system fails to perform Martian Address Filtering (As defined in RFC 181… |
CVE-2019-15069 | Critical | 9.8 | 2019-09-25 | An unsafe authentication interface was discovered in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 . An attacker can bypass… |
CVE-2019-15068 | Critical | 9.8 | 2019-09-25 | A broken access control vulnerability in Smart Battery A4, a multifunctional portable charger, firmware version ?<= r1.7.9 allows an attacker to get/reset admi… |
CVE-2019-15067 | Critical | 9.8 | 2019-09-25 | An authentication bypass vulnerability discovered in Smart Battery A2-25DE, a multifunctional portable charger, firmware version ?<= SECFS-2013-10-16-13:42:58-… |
CVE-2019-12245 | Medium | 5.3 | 2019-09-25 | SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in… |
CVE-2019-12205 | Medium | 6.1 | 2019-09-25 | SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS. |
CVE-2019-12204 | Critical | 9.8 | 2019-09-25 | In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access. |
CVE-2019-12203 | Medium | 6.3 | 2019-09-25 | SilverStripe through 4.3.3 allows session fixation in the "change password" form. |
CVE-2019-6653 | Medium | 5.4 | 2019-09-25 | There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users g… |
CVE-2019-6652 | Medium | 6.5 | 2019-09-25 | In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS). |
CVE-2019-6651 | Medium | 5.3 | 2019-09-25 | In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, an… |
CVE-2019-16887 | High | 7.8 | 2019-09-25 | In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc. |
CVE-2019-16884 | High | 7.5 | 2019-09-25 | runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorr… |
CVE-2019-16882 | High | 7.5 | 2019-09-25 | An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers… |
CVE-2019-16881 | Critical | 9.8 | 2019-09-25 | An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack o… |
CVE-2019-16880 | Critical | 9.8 | 2019-09-25 | An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method. |
CVE-2019-16188 | High | 7.1 | 2019-09-25 | HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially cr… |
CVE-2019-10098 | Medium | 6.1 | 2019-09-25 | In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and… |
CVE-2019-16701 | High | 8.8 | 2019-09-25 | pfSense through 2.3.4 through 2.4.4-p3 allows Remote Code Injection via a methodCall XML document with a pfsense.exec_php call containing shell metacharacters… |
CVE-2019-16194 | Critical | 9.8 | 2019-09-25 | SQL injection vulnerabilities in Centreon through 19.04 allow attacks via the svc_id parameter in include/monitoring/status/Services/xml/makeXMLForOneService.p… |
CVE-2019-10430 | Medium | 5.5 | 2019-09-25 | Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they… |
CVE-2019-10429 | Medium | 5.5 | 2019-09-25 | Jenkins GitLab Logo Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access… |
CVE-2019-10428 | High | 7.5 | 2019-09-25 | Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, pote… |
CVE-2019-10427 | Medium | 5.3 | 2019-09-25 | Jenkins Aqua MicroScanner Plugin 1.0.7 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potential… |
CVE-2019-10426 | Medium | 5.5 | 2019-09-25 | Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with acces… |