2019 CVEs (page 85)
Page 85 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9436 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileg… |
CVE-2019-9426 | Medium | 6.7 | 2019-09-06 | In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2019-9345 | High | 7.8 | 2019-09-06 | In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead… |
CVE-2019-9276 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local e… |
CVE-2019-9275 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution pri… |
CVE-2019-9274 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2019-9273 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalati… |
CVE-2019-9271 | Medium | 6.4 | 2019-09-06 | In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalati… |
CVE-2019-9270 | High | 7.8 | 2019-09-06 | In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio… |
CVE-2019-9248 | Medium | 6.7 | 2019-09-06 | In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local esca… |
CVE-2019-9245 | Medium | 4.4 | 2019-09-06 | In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2019-2182 | High | 7.8 | 2019-09-06 | In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local es… |
CVE-2019-16088 | Medium | 5.5 | 2019-09-06 | Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. |
CVE-2019-15128 | Medium | 6.5 | 2019-09-06 | iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user. |
CVE-2019-10892 | Critical | 9.8 | 2019-09-06 | An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call sprin… |
CVE-2019-10891 | Critical | 9.8 | 2019-09-06 | An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that… |
CVE-2019-9855 | Critical | 9.8 | 2019-09-06 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the d… |
CVE-2019-9854 | High | 7.8 | 2019-09-06 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc… |
CVE-2019-16060 | Critical | 9.8 | 2019-09-06 | The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors… |
CVE-2019-16059 | High | 8.8 | 2019-09-06 | Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofil… |
CVE-2019-11926 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously… |
CVE-2019-11925 | Critical | 9.8 | 2019-09-06 | Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously const… |
CVE-2019-16058 | High | 7.5 | 2019-09-06 | An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this trig… |
CVE-2019-16056 | High | 7.5 | 2019-09-06 | An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addres… |
CVE-2019-15890 | High | 7.5 | 2019-09-06 | libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. |
CVE-2019-15102 | Critical | 9.8 | 2019-09-06 | An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) does not have any authentication mechanism… |
CVE-2019-14223 | Medium | 6.1 | 2019-09-06 | An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect a… |
CVE-2019-13953 | High | 8.8 | 2019-09-06 | An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attack… |
CVE-2019-13656 | Critical | 9.8 | 2019-09-06 | An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to… |
CVE-2019-14813 | Critical | 9.8 | 2019-09-06 | A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scr… |
CVE-2019-13517 | High | 8.8 | 2019-09-06 | In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified whe… |
CVE-2019-15846 | Critical | 9.8 | 2019-09-06 | Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. |
CVE-2019-9254 | High | 7.8 | 2019-09-05 | In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation. This could lead to local escalation o… |
CVE-2019-2181 | High | 7.8 | 2019-09-05 | In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatio… |
CVE-2019-2180 | Medium | 5.5 | 2019-09-05 | In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation. This could lead to local informa… |
CVE-2019-2179 | Medium | 5.5 | 2019-09-05 | In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflow. This could lead t… |
CVE-2019-2178 | High | 7.8 | 2019-09-05 | In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check. This could lea… |
CVE-2019-2177 | High | 8.8 | 2019-09-05 | In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions bypass. This could le… |
CVE-2019-2176 | High | 7.8 | 2019-09-05 | In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds check… |
CVE-2019-2175 | High | 7.8 | 2019-09-05 | In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to l… |
CVE-2019-2174 | High | 7.8 | 2019-09-05 | In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper locking… |
CVE-2019-2124 | Medium | 5.5 | 2019-09-05 | In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files… |
CVE-2019-2123 | High | 7.8 | 2019-09-05 | In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privileged process due to a… |
CVE-2019-2115 | High | 7.8 | 2019-09-05 | In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could le… |
CVE-2019-2108 | High | 7.8 | 2019-09-05 | In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex… |
CVE-2019-2103 | Medium | 5.5 | 2019-09-05 | In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SECURE. This could le… |
CVE-2019-14224 | High | 7.2 | 2019-09-05 | An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was… |
CVE-2019-14222 | Critical | 9.8 | 2019-09-05 | An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Adm… |
CVE-2019-15029 | High | 8.8 | 2019-09-05 | FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the m… |
CVE-2019-11380 | High | 7.5 | 2019-09-05 | The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShor… |
CVE-2019-15944 | Medium | 5.3 | 2019-09-05 | In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message. |
CVE-2019-15848 | Medium | 6.1 | 2019-09-05 | JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request to a TeamCity server… |
CVE-2019-14339 | Medium | 5.5 | 2019-09-05 | The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data… |
CVE-2019-10753 | Medium | 5.9 | 2019-09-05 | In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclips… |
CVE-2019-15955 | Medium | 6.5 | 2019-09-05 | An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If… |
CVE-2019-15954 | Critical | 9.9 | 2019-09-05 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote… |
CVE-2019-15953 | High | 8.8 | 2019-09-05 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the… |
CVE-2019-15952 | High | 8.8 | 2019-09-05 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files… |
CVE-2019-14278 | Medium | 5.3 | 2019-09-05 | In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page. |
CVE-2019-13349 | Medium | 4.9 | 2019-09-05 | In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes. |
CVE-2019-13191 | High | 7.5 | 2019-09-05 | A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page. |
CVE-2019-13188 | Critical | 9.8 | 2019-09-05 | In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. |
CVE-2019-13187 | Critical | 9.8 | 2019-09-05 | The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.p… |
CVE-2019-5070 | Medium | 6.5 | 2019-09-05 | An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier. Specially crafted web request to… |
CVE-2019-5069 | High | 8.8 | 2019-09-05 | A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting i… |
CVE-2019-5065 | Medium | 5.3 | 2019-09-05 | An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an… |
CVE-2019-15949 | High | 8.8 | 2019-09-05 | Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via t… |
CVE-2019-15947 | High | 7.5 | 2019-09-05 | In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file… |
CVE-2019-15946 | Medium | 6.4 | 2019-09-05 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c. |
CVE-2019-15945 | Medium | 6.4 | 2019-09-05 | OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c. |
CVE-2019-13361 | Medium | 6.5 | 2019-09-05 | Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network. |
CVE-2019-13190 | Medium | 5.3 | 2019-09-05 | In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. |
CVE-2019-15942 | High | 8.8 | 2019-09-05 | FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c m… |
CVE-2019-15939 | Medium | 5.9 | 2019-09-05 | An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. |
CVE-2019-4321 | High | 7.5 | 2019-09-05 | IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for W… |
CVE-2019-4186 | Medium | 6.1 | 2019-09-05 | IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a sp… |
CVE-2019-4149 | Medium | 5.4 | 2019-09-05 | IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0 throug… |
CVE-2019-15938 | Critical | 9.8 | 2019-09-05 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. |
CVE-2019-15937 | Critical | 9.8 | 2019-09-05 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. |
CVE-2019-12223 | High | 7.5 | 2019-09-05 | An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot c… |
CVE-2019-10677 | Medium | 6.1 | 2019-09-05 | Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute a… |
CVE-2019-1976 | Critical | 9.8 | 2019-09-05 | A vulnerability in the “plug-and-play” services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacke… |
CVE-2019-1939 | High | 8.8 | 2019-09-05 | A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system… |
CVE-2019-12645 | High | 7.8 | 2019-09-05 | A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, lo… |
CVE-2019-12644 | Medium | 6.1 | 2019-09-05 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to condu… |
CVE-2019-12635 | Medium | 4.3 | 2019-09-05 | A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain… |
CVE-2019-12633 | High | 7.5 | 2019-09-05 | A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a s… |
CVE-2019-12632 | High | 7.5 | 2019-09-05 | A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) att… |
CVE-2019-15927 | High | 7.8 | 2019-09-04 | An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. |
CVE-2019-15926 | Critical | 9.1 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_e… |
CVE-2019-15925 | High | 7.8 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/n… |
CVE-2019-14470 | Medium | 6.1 | 2019-09-04 | cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_de… |
CVE-2019-14319 | Medium | 6.5 | 2019-09-04 | The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker… |
CVE-2019-12586 | Medium | 6.5 | 2019-09-04 | The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP me… |
CVE-2019-15924 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference be… |
CVE-2019-15923 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/pari… |
CVE-2019-15922 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/pari… |
CVE-2019-15921 | Medium | 4.7 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlin… |
CVE-2019-15920 | Medium | 4.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; s… |
CVE-2019-15919 | Low | 3.3 | 2019-09-04 | An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free. |