2019 CVEs (page 83)
Page 83 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16229 | Medium | 4.1 | 2019-09-11 | drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. N… |
CVE-2019-3644 | High | 7.5 | 2019-09-11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This af… |
CVE-2019-3643 | Medium | 5.3 | 2019-09-11 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This af… |
CVE-2019-16228 | High | 7.5 | 2019-09-11 | An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certai… |
CVE-2019-16227 | Critical | 9.8 | 2019-09-11 | An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_in… |
CVE-2019-16226 | High | 7.5 | 2019-09-11 | An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operati… |
CVE-2019-16225 | Critical | 9.8 | 2019-09-11 | An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid writ… |
CVE-2019-16224 | Critical | 9.8 | 2019-09-11 | An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid writ… |
CVE-2019-8451 | Medium | 6.5 | 2019-09-11 | The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via… |
CVE-2019-8450 | Medium | 4.8 | 2019-09-11 | Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permiss… |
CVE-2019-8449 | Medium | 5.3 | 2019-09-11 | The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnera… |
CVE-2019-16223 | Medium | 5.4 | 2019-09-11 | WordPress before 5.2.3 allows XSS in post previews by authenticated users. |
CVE-2019-16222 | Medium | 6.1 | 2019-09-11 | WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) atta… |
CVE-2019-16221 | Medium | 6.1 | 2019-09-11 | WordPress before 5.2.3 allows reflected XSS in the dashboard. |
CVE-2019-16220 | Medium | 6.1 | 2019-09-11 | In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provid… |
CVE-2019-16219 | Medium | 6.1 | 2019-09-11 | WordPress before 5.2.3 allows XSS in shortcode previews. |
CVE-2019-16218 | Medium | 6.1 | 2019-09-11 | WordPress before 5.2.3 allows XSS in stored comments. |
CVE-2019-16217 | Medium | 6.1 | 2019-09-11 | WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. |
CVE-2019-14998 | Medium | 6.5 | 2019-09-11 | The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection vi… |
CVE-2019-14997 | Medium | 4.3 | 2019-09-11 | The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an i… |
CVE-2019-14996 | Medium | 6.1 | 2019-09-11 | The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML… |
CVE-2019-14995 | Medium | 5.3 | 2019-09-11 | The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and… |
CVE-2019-16193 | Medium | 5.4 | 2019-09-11 | In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature. |
CVE-2019-14725 | Medium | 4.3 | 2019-09-11 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim accou… |
CVE-2019-14724 | High | 7.5 | 2019-09-11 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a vict… |
CVE-2019-16214 | Medium | 5.7 | 2019-09-11 | Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by us… |
CVE-2019-12943 | High | 8.1 | 2019-09-10 | TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid accoun… |
CVE-2019-12942 | Medium | 6.5 | 2019-09-10 | TTLock devices do not properly block guest access in certain situations where the network connection to the cloud is unavailable. |
CVE-2019-11669 | High | 7.5 | 2019-09-10 | Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modific… |
CVE-2019-11668 | High | 7.5 | 2019-09-10 | HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Servic… |
CVE-2019-12996 | Medium | 5.3 | 2019-09-10 | In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe. |
CVE-2019-10256 | Critical | 9.8 | 2019-09-10 | An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. |
CVE-2019-14457 | Critical | 9.8 | 2019-09-10 | VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. |
CVE-2019-11497 | High | 7.5 | 2019-09-10 | In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certifica… |
CVE-2019-11496 | Critical | 9.1 | 2019-09-10 | In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication. As par… |
CVE-2019-11495 | Critical | 9.8 | 2019-09-10 | In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which r… |
CVE-2019-11467 | High | 7.5 | 2019-09-10 | In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like… |
CVE-2019-11466 | Medium | 5.3 | 2019-09-10 | In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port ea… |
CVE-2019-1563 | Low | 3.7 | 2019-09-10 | In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large numbe… |
CVE-2019-1549 | Medium | 5.3 | 2019-09-10 | OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to en… |
CVE-2019-1547 | Medium | 4.7 | 2019-09-10 | Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to… |
CVE-2019-12105 | High | 8.2 | 2019-09-10 | In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_… |
CVE-2019-11465 | Medium | 5.3 | 2019-09-10 | An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached "connections" stat block command emits a non-redacted username. The sy… |
CVE-2019-11464 | Medium | 6.1 | 2019-09-10 | Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options… |
CVE-2019-0365 | High | 7.5 | 2019-09-10 | SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49… |
CVE-2019-0364 | Medium | 4.3 | 2019-09-10 | Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports. |
CVE-2019-0363 | High | 7.1 | 2019-09-10 | Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrie… |
CVE-2019-0361 | Medium | 6.1 | 2019-09-10 | SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-control… |
CVE-2019-0357 | Medium | 6.7 | 2019-09-10 | The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges. |
CVE-2019-0356 | Medium | 4.3 | 2019-09-10 | Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to… |
CVE-2019-0355 | High | 7.2 | 2019-09-10 | SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0… |
CVE-2019-0353 | Low | 3.3 | 2019-09-10 | Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would othe… |
CVE-2019-0352 | High | 7.5 | 2019-09-10 | In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker… |
CVE-2019-5503 | Medium | 5.3 | 2019-09-10 | OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive… |
CVE-2019-3975 | Critical | 9.8 | 2019-09-10 | Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RP… |
CVE-2019-16106 | High | 7.5 | 2019-09-10 | The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment… |
CVE-2019-15896 | Critical | 9.8 | 2019-09-10 | An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to… |
CVE-2019-14730 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an… |
CVE-2019-14729 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via… |
CVE-2019-14728 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victi… |
CVE-2019-14727 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account… |
CVE-2019-14726 | Medium | 5.4 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's acc… |
CVE-2019-14723 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail account via an attacke… |
CVE-2019-14722 | Medium | 4.3 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a… |
CVE-2019-14721 | Medium | 6.5 | 2019-09-10 | In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an att… |
CVE-2019-12401 | High | 7.5 | 2019-09-10 | Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler… |
CVE-2019-16202 | Medium | 6.5 | 2019-09-10 | MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions f… |
CVE-2019-7176 | Low | 3.7 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x b… |
CVE-2019-6791 | Medium | 6.5 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Contr… |
CVE-2019-16192 | Critical | 9.8 | 2019-09-09 | upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management… |
CVE-2019-16187 | High | 7.5 | 2019-09-09 | Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script. |
CVE-2019-16186 | High | 7.2 | 2019-09-09 | In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions. |
CVE-2019-16185 | High | 7.2 | 2019-09-09 | In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions. |
CVE-2019-16184 | Critical | 9.8 | 2019-09-09 | A CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey participants to inject commands via their survey responses that will be… |
CVE-2019-16183 | Low | 2.7 | 2019-09-09 | In Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions. |
CVE-2019-16182 | Medium | 6.1 | 2019-09-09 | A reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to inject arbitrary web script or HTML… |
CVE-2019-16181 | Low | 2.7 | 2019-09-09 | In Limesurvey before 3.17.14, admin users can mark other users' notifications as read. |
CVE-2019-16180 | Medium | 5.3 | 2019-09-09 | Limesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate usernames when the LDAP authentication method is used. |
CVE-2019-16179 | Medium | 5.3 | 2019-09-09 | Limesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration. |
CVE-2019-16178 | Medium | 5.4 | 2019-09-09 | A stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that allows authenticated users with correct permissions to inject arb… |
CVE-2019-16177 | High | 7.5 | 2019-09-09 | In Limesurvey before 3.17.14, the entire database is exposed through browser caching. |
CVE-2019-16176 | Medium | 5.3 | 2019-09-09 | A path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote attacker to discover the path to the application in the filesystem. |
CVE-2019-16175 | Medium | 4.3 | 2019-09-09 | A clickjacking vulnerability was found in Limesurvey before 3.17.14. |
CVE-2019-16174 | High | 8.8 | 2019-09-09 | An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or co… |
CVE-2019-16147 | Medium | 6.1 | 2019-09-09 | Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib. |
CVE-2019-16145 | Medium | 6.1 | 2019-09-09 | The breadcrumbs contributed module through 0.2.0 for Padrino Framework allows XSS via a caption. |
CVE-2019-15297 | Medium | 6.5 | 2019-09-09 | res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to… |
CVE-2019-10253 | Medium | 6.5 | 2019-09-09 | A Cross-Site Request Forgery (CSRF) vulnerability exists in TeamMate+ 21.0.0.0 that allows a remote attacker to modify application data (upload malicious/forge… |
CVE-2019-6997 | Medium | 4.3 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7… |
CVE-2019-6996 | Medium | 4.3 | 2019-09-09 | An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Inc… |
CVE-2019-6995 | Medium | 6.5 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It h… |
CVE-2019-6960 | Critical | 9.8 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has In… |
CVE-2019-6795 | Medium | 5.4 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Di… |
CVE-2019-6794 | Medium | 4.3 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclos… |
CVE-2019-6793 | High | 7.0 | 2019-09-09 | An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable… |
CVE-2019-6792 | Medium | 5.3 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. Wh… |
CVE-2019-6789 | Medium | 4.3 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclos… |
CVE-2019-6788 | High | 7.5 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclos… |
CVE-2019-6786 | Medium | 6.5 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Contr… |
CVE-2019-6785 | Medium | 6.5 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of Service… |