2019 CVEs (page 89)
Page 89 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15543 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases. |
CVE-2019-15542 | High | 7.5 | 2019-08-26 | An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization. |
CVE-2019-15533 | Critical | 9.8 | 2019-08-26 | XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php. |
CVE-2019-15515 | Medium | 6.5 | 2019-08-26 | Discourse 2.3.2 sends the CSRF token in the query string. |
CVE-2019-15503 | Critical | 9.8 | 2019-08-26 | cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Comman… |
CVE-2019-13020 | Critical | 10.0 | 2019-08-26 | The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted U… |
CVE-2019-12532 | High | 7.8 | 2019-08-26 | Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information disclosure v… |
CVE-2019-15640 | High | 7.5 | 2019-08-26 | Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image. |
CVE-2019-15637 | High | 8.1 | 2019-08-26 | Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects T… |
CVE-2019-15558 | Critical | 9.8 | 2019-08-26 | XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. |
CVE-2019-15557 | Critical | 9.8 | 2019-08-26 | XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key. |
CVE-2019-15555 | Critical | 9.8 | 2019-08-26 | FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and server.php. |
CVE-2019-15549 | High | 7.5 | 2019-08-26 | An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field. |
CVE-2019-15560 | Critical | 9.8 | 2019-08-26 | The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js. |
CVE-2019-15559 | Critical | 9.8 | 2019-08-26 | DianoxDragon Hawn before 2019-07-10 allows SQL injection. |
CVE-2019-4513 | High | 8.2 | 2019-08-26 | IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo… |
CVE-2019-4448 | High | 7.8 | 2019-08-26 | IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum_debug binaries are setuid roo… |
CVE-2019-4447 | High | 7.8 | 2019-08-26 | IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trust… |
CVE-2019-4169 | Critical | 9.1 | 2019-08-26 | IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the def… |
CVE-2019-15574 | Critical | 9.8 | 2019-08-26 | Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php. |
CVE-2019-15573 | Critical | 9.8 | 2019-08-26 | Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php. |
CVE-2019-15572 | Critical | 9.8 | 2019-08-26 | Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php. |
CVE-2019-15571 | Critical | 9.8 | 2019-08-26 | The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php. |
CVE-2019-15570 | Critical | 9.8 | 2019-08-26 | BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters. |
CVE-2019-15569 | Critical | 9.8 | 2019-08-26 | HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java. |
CVE-2019-15568 | Critical | 9.8 | 2019-08-26 | idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax_levels. |
CVE-2019-15567 | Critical | 9.8 | 2019-08-26 | OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature. |
CVE-2019-15566 | Critical | 9.8 | 2019-08-26 | The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java. |
CVE-2019-15565 | Critical | 9.8 | 2019-08-26 | The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php. |
CVE-2019-15564 | Critical | 9.8 | 2019-08-26 | The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py. |
CVE-2019-15563 | Critical | 9.8 | 2019-08-26 | Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java. |
CVE-2019-15554 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity. |
CVE-2019-15553 | High | 7.5 | 2019-08-26 | An issue was discovered in the memoffset crate before 0.5.0 for Rust. offset_of and span_of can cause exposure of uninitialized memory. |
CVE-2019-15552 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution. |
CVE-2019-15551 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity. |
CVE-2019-15550 | High | 7.5 | 2019-08-26 | An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary. |
CVE-2019-14307 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code ex… |
CVE-2019-14305 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an atta… |
CVE-2019-14300 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via c… |
CVE-2019-15501 | Medium | 6.1 | 2019-08-26 | Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter. |
CVE-2019-15479 | Medium | 6.1 | 2019-08-26 | Status Board 1.1.81 has reflected XSS via dashboard.ts. |
CVE-2019-14308 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted r… |
CVE-2019-15562 | Critical | 9.8 | 2019-08-26 | GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragment… |
CVE-2019-15561 | Critical | 9.8 | 2019-08-26 | FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js. |
CVE-2019-15556 | Critical | 9.8 | 2019-08-26 | Pvanloon1983 social_network before 2019-07-03 allows SQL injection in includes/form_handlers/register_handler.php. |
CVE-2019-15524 | Critical | 9.8 | 2019-08-26 | CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execu… |
CVE-2019-15521 | Critical | 9.8 | 2019-08-26 | Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object. |
CVE-2019-15304 | Critical | 9.1 | 2019-08-26 | Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account, which allows an attacker to cause a Denial of Service or In… |
CVE-2019-15541 | High | 7.5 | 2019-08-26 | rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arr… |
CVE-2019-15534 | Critical | 9.8 | 2019-08-26 | Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update. |
CVE-2019-15532 | Medium | 6.1 | 2019-08-26 | CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs. |
CVE-2019-15506 | High | 7.5 | 2019-08-26 | An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticat… |
CVE-2019-15489 | Medium | 6.1 | 2019-08-26 | laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS. |
CVE-2019-15478 | Medium | 6.1 | 2019-08-26 | Status Board 1.1.81 has reflected XSS via logic.ts. |
CVE-2019-15540 | High | 7.8 | 2019-08-25 | filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that… |
CVE-2019-15538 | High | 7.5 | 2019-08-25 | An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of be… |
CVE-2019-6695 | Critical | 9.8 | 2019-08-23 | Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-par… |
CVE-2019-5594 | Medium | 6.1 | 2019-08-23 | An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an… |
CVE-2019-15092 | High | 7.3 | 2019-08-23 | The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name… |
CVE-2019-12400 | Medium | 5.5 | 2019-08-23 | In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of Docum… |
CVE-2019-7364 | High | 7.8 | 2019-08-23 | DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD El… |
CVE-2019-7363 | High | 7.8 | 2019-08-23 | Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that… |
CVE-2019-7362 | High | 7.8 | 2019-08-23 | DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that… |
CVE-2019-6698 | Critical | 9.8 | 2019-08-23 | Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementione… |
CVE-2019-5592 | Medium | 5.9 | 2019-08-23 | Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 t… |
CVE-2019-1583 | High | 8.0 | 2019-08-23 | Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to e… |
CVE-2019-1582 | High | 7.2 | 2019-08-23 | Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying… |
CVE-2019-1581 | Critical | 9.8 | 2019-08-23 | A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SS… |
CVE-2019-1580 | Critical | 9.8 | 2019-08-23 | Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthen… |
CVE-2019-15537 | Critical | 9.8 | 2019-08-23 | The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php. |
CVE-2019-15536 | Critical | 9.8 | 2019-08-23 | The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records. |
CVE-2019-15535 | Critical | 9.8 | 2019-08-23 | Tasking Manager before 3.4.0 allows SQL Injection via custom SQL. |
CVE-2019-11654 | High | 7.5 | 2019-08-23 | Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated att… |
CVE-2019-15531 | Medium | 6.5 | 2019-08-23 | GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c. |
CVE-2019-15530 | High | 8.8 | 2019-08-23 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell m… |
CVE-2019-15529 | High | 8.8 | 2019-08-23 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell m… |
CVE-2019-15528 | High | 8.8 | 2019-08-23 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell m… |
CVE-2019-15527 | High | 8.8 | 2019-08-23 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell m… |
CVE-2019-15526 | High | 8.8 | 2019-08-23 | An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell m… |
CVE-2019-13014 | Medium | 5.5 | 2019-08-23 | Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper whi… |
CVE-2019-13013 | Medium | 5.5 | 2019-08-23 | Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an… |
CVE-2019-10751 | High | 8.8 | 2019-08-23 | All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied file… |
CVE-2019-10750 | Critical | 9.8 | 2019-08-23 | deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.p… |
CVE-2019-10747 | Critical | 9.8 | 2019-08-23 | set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Ob… |
CVE-2019-10746 | Critical | 9.8 | 2019-08-23 | mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying p… |
CVE-2019-15525 | High | 8.1 | 2019-08-23 | There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1. |
CVE-2019-15520 | Medium | 5.3 | 2019-08-23 | comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. |
CVE-2019-15519 | Critical | 9.8 | 2019-08-23 | Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. |
CVE-2019-15518 | Medium | 5.3 | 2019-08-23 | Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. |
CVE-2019-15517 | Medium | 5.5 | 2019-08-23 | jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. |
CVE-2019-15516 | High | 7.5 | 2019-08-23 | Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. |
CVE-2019-8447 | Medium | 4.3 | 2019-08-23 | The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSR… |
CVE-2019-8446 | Medium | 5.3 | 2019-08-23 | The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. |
CVE-2019-8445 | Medium | 5.3 | 2019-08-23 | Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time informati… |
CVE-2019-8444 | Medium | 5.4 | 2019-08-23 | The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaS… |
CVE-2019-14999 | Medium | 4.3 | 2019-08-23 | The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before… |
CVE-2019-13423 | High | 8.8 | 2019-08-23 | Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user wh… |
CVE-2019-13422 | Medium | 6.1 | 2019-08-23 | Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon… |
CVE-2019-13421 | Medium | 4.9 | 2019-08-23 | Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal… |
CVE-2019-11589 | Medium | 6.1 | 2019-08-23 | The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows… |