2019 CVEs (page 82)
Page 82 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1300 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-1299 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
CVE-2019-1298 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-1297 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem… |
CVE-2019-1296 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem… |
CVE-2019-1295 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Rem… |
CVE-2019-1294 | Medium | 4.6 | 2019-09-11 | A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot Security Feature Byp… |
CVE-2019-1293 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windo… |
CVE-2019-1292 | Medium | 4.9 | 2019-09-11 | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. |
CVE-2019-1291 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote… |
CVE-2019-1290 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote… |
CVE-2019-1289 | Medium | 5.5 | 2019-09-11 | An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions, aka 'Windows Upd… |
CVE-2019-1287 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Conne… |
CVE-2019-1286 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-1285 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2019-1284 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. |
CVE-2019-1283 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Infor… |
CVE-2019-1282 | Medium | 5.5 | 2019-09-11 | An information disclosure exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle sandbox checks, aka 'Windows Common Log F… |
CVE-2019-1280 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successful… |
CVE-2019-1278 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'… |
CVE-2019-1277 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in Windows Audio Service when a malformed parameter is processed, aka 'Windows Audio Service Elevation of Privil… |
CVE-2019-1274 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2019-1273 | Medium | 5.4 | 2019-09-11 | A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Acti… |
CVE-2019-1272 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully explo… |
CVE-2019-1271 | High | 7.8 | 2019-09-11 | An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'. |
CVE-2019-1270 | Medium | 5.5 | 2019-09-11 | An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Win… |
CVE-2019-1269 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully explo… |
CVE-2019-1268 | High | 7.8 | 2019-09-11 | An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'. |
CVE-2019-1267 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symboli… |
CVE-2019-1266 | Medium | 6.1 | 2019-09-11 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoofing… |
CVE-2019-1265 | High | 7.5 | 2019-09-11 | A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker… |
CVE-2019-1264 | High | 7.8 | 2019-09-11 | A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'. |
CVE-2019-1263 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosur… |
CVE-2019-1262 | Medium | 5.4 | 2019-09-11 | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh… |
CVE-2019-1261 | High | 8.8 | 2019-09-11 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery… |
CVE-2019-1260 | Medium | 6.5 | 2019-09-11 | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. |
CVE-2019-1259 | High | 8.8 | 2019-09-11 | A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery… |
CVE-2019-1257 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microso… |
CVE-2019-1256 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil… |
CVE-2019-1254 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerabil… |
CVE-2019-1253 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker… |
CVE-2019-1252 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Dis… |
CVE-2019-1251 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner… |
CVE-2019-1250 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1249 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1248 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1247 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1246 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1245 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner… |
CVE-2019-1244 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulner… |
CVE-2019-1243 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1242 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1241 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1240 | High | 7.8 | 2019-09-11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex… |
CVE-2019-1237 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-1236 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2019-1235 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server process does not validate the source of input or com… |
CVE-2019-1233 | High | 7.5 | 2019-09-11 | A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exc… |
CVE-2019-1232 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagno… |
CVE-2019-1231 | Medium | 5.9 | 2019-09-11 | An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerab… |
CVE-2019-1221 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory… |
CVE-2019-1220 | Medium | 4.3 | 2019-09-11 | A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft… |
CVE-2019-1219 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Info… |
CVE-2019-1217 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-1216 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'. |
CVE-2019-1215 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerabili… |
CVE-2019-1214 | High | 7.8 | 2019-09-11 | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common… |
CVE-2019-1209 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'. |
CVE-2019-1208 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'… |
CVE-2019-1142 | Medium | 5.5 | 2019-09-11 | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Fra… |
CVE-2019-1138 | High | 7.5 | 2019-09-11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Eng… |
CVE-2019-16247 | High | 7.8 | 2019-09-11 | Delta DCISoft 1.21 has a User Mode Write AV starting at CommLib!CCommLib::SetSerializeData+0x000000000000001b. |
CVE-2019-0928 | Medium | 6.2 | 2019-09-11 | A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating s… |
CVE-2019-0788 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote… |
CVE-2019-0787 | High | 8.8 | 2019-09-11 | A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote… |
CVE-2019-15302 | Medium | 6.5 | 2019-09-11 | The pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has access to a Rich Text pad with editing rights for the URL) to co… |
CVE-2019-13544 | High | 7.8 | 2019-09-11 | Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project file… |
CVE-2019-13540 | High | 7.8 | 2019-09-11 | Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted proj… |
CVE-2019-13536 | High | 7.8 | 2019-09-11 | Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted proje… |
CVE-2019-10074 | Critical | 9.8 | 2019-09-11 | An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the ca… |
CVE-2019-10073 | Medium | 6.1 | 2019-09-11 | The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade t… |
CVE-2019-0189 | Critical | 9.8 | 2019-09-11 | The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java… |
CVE-2019-3763 | High | 8.8 | 2019-09-11 | The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerabili… |
CVE-2019-3761 | Medium | 5.4 | 2019-09-11 | The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a stored cross-site scripting vulne… |
CVE-2019-3760 | Medium | 6.4 | 2019-09-11 | The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Wo… |
CVE-2019-3759 | Medium | 6.4 | 2019-09-11 | The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A r… |
CVE-2019-11769 | High | 7.8 | 2019-09-11 | An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. S… |
CVE-2019-16237 | High | 7.5 | 2019-09-11 | Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala. |
CVE-2019-16236 | High | 7.5 | 2019-09-11 | Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala. |
CVE-2019-16235 | High | 7.5 | 2019-09-11 | Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala. |
CVE-2019-14936 | Medium | 5.3 | 2019-09-11 | Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash). |
CVE-2019-13473 | Critical | 9.8 | 2019-09-11 | TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial… |
CVE-2019-9488 | Medium | 4.9 | 2019-09-11 | Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be… |
CVE-2019-11777 | High | 7.5 | 2019-09-11 | In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verific… |
CVE-2019-16098 | High | 7.8 | 2019-09-11 | The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I… |
CVE-2019-16234 | Medium | 4.7 | 2019-09-11 | drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereferen… |
CVE-2019-16233 | Medium | 4.1 | 2019-09-11 | drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
CVE-2019-16232 | Medium | 4.1 | 2019-09-11 | drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereferen… |
CVE-2019-16231 | Medium | 4.1 | 2019-09-11 | drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. |
CVE-2019-16230 | Medium | 4.7 | 2019-09-11 | drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE… |