2019 CVEs (page 93)
Page 93 of 161 — CVEs published in 2019, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11146 | High | 7.8 | 2019-08-19 | Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2019-11145 | High | 7.8 | 2019-08-19 | Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2019-11143 | Medium | 6.7 | 2019-08-19 | Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privile… |
CVE-2019-11140 | Medium | 6.7 | 2019-08-19 | Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of servic… |
CVE-2019-0173 | High | 7.6 | 2019-08-19 | Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of… |
CVE-2019-6178 | Medium | 5.3 | 2019-08-19 | An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device… |
CVE-2019-6171 | Medium | 6.8 | 2019-08-19 | A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the a… |
CVE-2019-6165 | High | 7.8 | 2019-08-19 | A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for… |
CVE-2019-6159 | Medium | 6.1 | 2019-08-19 | A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IMM v1) embedded Baseboard Management Con… |
CVE-2019-5631 | High | 7.8 | 2019-08-19 | The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the sys… |
CVE-2019-11276 | Medium | 5.4 | 2019-08-19 | Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2… |
CVE-2019-15160 | High | 7.5 | 2019-08-19 | The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity… |
CVE-2019-15150 | High | 8.8 | 2019-08-19 | In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback functi… |
CVE-2019-15151 | Critical | 9.8 | 2019-08-18 | AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. |
CVE-2019-15149 | Critical | 9.8 | 2019-08-18 | core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child… |
CVE-2019-15148 | Medium | 6.5 | 2019-08-18 | GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF_mp4reader.c. |
CVE-2019-15147 | Medium | 6.5 | 2019-08-18 | GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF_Next in GPMF_parser.c. |
CVE-2019-15146 | Medium | 6.5 | 2019-08-18 | GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF_Next in GPMF_parser.c. |
CVE-2019-15145 | Medium | 5.5 | 2019-08-18 | DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that… |
CVE-2019-15144 | Medium | 5.5 | 2019-08-18 | In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Unco… |
CVE-2019-15143 | Medium | 5.5 | 2019-08-18 | In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw inf… |
CVE-2019-15142 | Medium | 5.5 | 2019-08-18 | In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu… |
CVE-2019-15141 | Medium | 6.5 | 2019-08-18 | WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer… |
CVE-2019-15140 | High | 8.8 | 2019-08-18 | coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecifi… |
CVE-2019-15139 | Medium | 6.5 | 2019-08-18 | The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application cr… |
CVE-2019-15130 | Critical | 9.8 | 2019-08-18 | The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile pictu… |
CVE-2019-15129 | Medium | 5.3 | 2019-08-18 | The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on… |
CVE-2019-15137 | High | 7.5 | 2019-08-18 | The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions the… |
CVE-2019-15136 | High | 7.5 | 2019-08-18 | The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to polic… |
CVE-2019-15135 | High | 7.5 | 2019-08-18 | The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a participant (including… |
CVE-2019-15134 | High | 7.5 | 2019-08-17 | RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and… |
CVE-2019-15133 | Medium | 6.5 | 2019-08-17 | In GIFLIB before 2019-02-16, a malformed GIF file triggers a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of th… |
CVE-2019-15132 | Medium | 5.3 | 2019-08-17 | Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server r… |
CVE-2019-14937 | High | 7.5 | 2019-08-17 | REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=55 and sleep(3) to Calendar/calendar_po… |
CVE-2019-13069 | High | 7.8 | 2019-08-17 | extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.conf… |
CVE-2019-15116 | Medium | 6.1 | 2019-08-16 | The easy-digital-downloads plugin before 2.9.16 for WordPress has XSS related to IP address logging. |
CVE-2019-15115 | High | 8.8 | 2019-08-16 | The peters-login-redirect plugin before 2.9.2 for WordPress has CSRF. |
CVE-2019-15114 | High | 8.8 | 2019-08-16 | The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF. |
CVE-2019-15113 | High | 8.8 | 2019-08-16 | The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF. |
CVE-2019-8063 | High | 7.5 | 2019-08-16 | Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerability. Successful exploitation could lead… |
CVE-2019-7964 | Critical | 9.8 | 2019-08-16 | Adobe Experience Manager versions 6.5, and 6.4 have an authentication bypass vulnerability. Successful exploitation could lead to remote code execution. |
CVE-2019-7959 | Critical | 9.8 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could l… |
CVE-2019-7958 | Critical | 9.8 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lead to privi… |
CVE-2019-7957 | High | 7.5 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitation could lead to denial of service. |
CVE-2019-5477 | Critical | 9.8 | 2019-08-16 | A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are… |
CVE-2019-15120 | Medium | 5.4 | 2019-08-16 | The Kunena extension before 5.1.14 for Joomla! allows XSS via BBCode. |
CVE-2019-15119 | Medium | 5.5 | 2019-08-16 | lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user. |
CVE-2019-15118 | Medium | 5.5 | 2019-08-16 | check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion. |
CVE-2019-15117 | High | 7.8 | 2019-08-16 | parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access. |
CVE-2019-15091 | Critical | 9.8 | 2019-08-16 | filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload. |
CVE-2019-14923 | High | 8.8 | 2019-08-16 | EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field. |
CVE-2019-15108 | Medium | 4.8 | 2019-08-16 | An issue was discovered in WSO2 API Manager 2.6.0 before WSO2-CARBON-PATCH-4.4.0-4457. There is XSS via a crafted filename to the file-upload feature of the ev… |
CVE-2019-15107 | Critical | 9.8 | 2019-08-16 | An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability. |
CVE-2019-15106 | Critical | 9.8 | 2019-08-16 | An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server… |
CVE-2019-15105 | High | 8.8 | 2019-08-16 | An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via… |
CVE-2019-15104 | High | 8.8 | 2019-08-16 | An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resou… |
CVE-2019-15099 | High | 7.5 | 2019-08-16 | drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. |
CVE-2019-15098 | Medium | 4.6 | 2019-08-16 | drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor. |
CVE-2019-15095 | Medium | 6.1 | 2019-08-16 | DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter. |
CVE-2019-15090 | Medium | 6.7 | 2019-08-16 | An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds rea… |
CVE-2019-15084 | High | 7.8 | 2019-08-16 | Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM. |
CVE-2019-9852 | High | 7.8 | 2019-08-15 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc… |
CVE-2019-9851 | Critical | 9.8 | 2019-08-15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the d… |
CVE-2019-9850 | Critical | 9.8 | 2019-08-15 | LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the d… |
CVE-2019-10081 | High | 7.5 | 2019-08-15 | HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's p… |
CVE-2019-12792 | High | 8.8 | 2019-08-15 | A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to roo… |
CVE-2019-12791 | High | 8.8 | 2019-08-15 | A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users… |
CVE-2019-3974 | High | 8.1 | 2019-08-15 | Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily, potentially creating… |
CVE-2019-13516 | High | 8.8 | 2019-08-15 | In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not take… |
CVE-2019-13515 | Medium | 6.5 | 2019-08-15 | OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information. |
CVE-2019-13514 | High | 7.8 | 2019-08-15 | In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, w… |
CVE-2019-13513 | High | 7.8 | 2019-08-15 | In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulne… |
CVE-2019-13512 | Low | 3.3 | 2019-08-15 | Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information fro… |
CVE-2019-13511 | Low | 3.3 | 2019-08-15 | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by… |
CVE-2019-13510 | High | 7.8 | 2019-08-15 | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an uns… |
CVE-2019-12809 | High | 8.8 | 2019-08-15 | Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary fi… |
CVE-2019-9012 | High | 7.5 | 2019-08-15 | An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS prod… |
CVE-2019-9010 | Critical | 9.8 | 2019-08-15 | An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants o… |
CVE-2019-9013 | High | 8.8 | 2019-08-15 | An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insuffic… |
CVE-2019-14422 | High | 8.8 | 2019-08-15 | An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open r… |
CVE-2019-13377 | Medium | 5.9 | 2019-08-15 | The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing di… |
CVE-2019-13223 | Medium | 5.5 | 2019-08-15 | A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg… |
CVE-2019-13222 | High | 7.1 | 2019-08-15 | An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose… |
CVE-2019-13221 | High | 7.8 | 2019-08-15 | A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary… |
CVE-2019-13220 | High | 7.1 | 2019-08-15 | Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose… |
CVE-2019-13219 | Medium | 5.5 | 2019-08-15 | A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg… |
CVE-2019-13218 | Medium | 5.5 | 2019-08-15 | Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis… |
CVE-2019-13217 | High | 7.8 | 2019-08-15 | A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code… |
CVE-2019-12854 | High | 7.5 | 2019-08-15 | Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can caus… |
CVE-2019-11187 | Critical | 9.8 | 2019-08-15 | Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-in… |
CVE-2019-10140 | Medium | 5.5 | 2019-08-15 | A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service sit… |
CVE-2019-14789 | Medium | 6.1 | 2019-08-15 | The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter. |
CVE-2019-14788 | High | 8.8 | 2019-08-15 | wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resul… |
CVE-2019-14786 | Medium | 6.5 | 2019-08-15 | The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter. |
CVE-2019-14784 | Medium | 6.1 | 2019-08-15 | The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition. |
CVE-2019-14518 | Medium | 5.4 | 2019-08-15 | Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is consistent with the "acc… |
CVE-2019-13578 | Critical | 9.8 | 2019-08-15 | A SQL injection vulnerability exists in the Impress GiveWP Give plugin through 2.5.0 for WordPress. Successful exploitation of this vulnerability would allow a… |
CVE-2019-3418 | Medium | 5.4 | 2019-08-15 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an autho… |
CVE-2019-3417 | High | 8.8 | 2019-08-15 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an au… |
CVE-2019-15081 | Medium | 4.8 | 2019-08-15 | OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and I… |