CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2019-17312 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.
52 CVE-2019-17311 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.
53 CVE-2019-17310 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
54 CVE-2019-17309 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
55 CVE-2019-17308 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
56 CVE-2019-17307 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
57 CVE-2019-17306 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
58 CVE-2019-17305 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
59 CVE-2019-17304 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.
60 CVE-2019-17303 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
61 CVE-2019-17302 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
62 CVE-2019-17301 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.
63 CVE-2019-17300 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.
64 CVE-2019-17299 20 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.
65 CVE-2019-17298 89 Sql 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.
66 CVE-2019-17297 89 Sql 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user.
67 CVE-2019-17296 89 Sql 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user.
68 CVE-2019-17295 89 Sql 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.
69 CVE-2019-17294 89 Sql 2019-10-07 2019-10-09
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.
70 CVE-2019-17293 89 Sql 2019-10-07 2019-10-10
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.
71 CVE-2019-17292 89 Sql 2019-10-07 2019-10-10
6.5
None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin user.
72 CVE-2019-17264 125 2019-10-06 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue.
73 CVE-2019-17258 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x000000000000839c.
74 CVE-2019-17256 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at DPX!ReadDPX_W+0x0000000000001203.
75 CVE-2019-17255 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836.
76 CVE-2019-17254 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!Read_BadPNG+0x0000000000000101.
77 CVE-2019-17253 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at JPEG_LS+0x000000000000a6b8.
78 CVE-2019-17252 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!Read_BadPNG+0x0000000000000115.
79 CVE-2019-17251 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at FORMATS!GetPlugInInfo+0x0000000000007d43.
80 CVE-2019-17250 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000042f5.
81 CVE-2019-17249 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000d57b.
82 CVE-2019-17248 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x00000000000025b6.
83 CVE-2019-17247 120 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at JPEG_LS+0x0000000000007da8.
84 CVE-2019-17246 787 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows a User Mode Write AV starting at WSQ!ReadWSQ+0x000000000000258c.
85 CVE-2019-17244 120 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000001d8a.
86 CVE-2019-17243 120 2019-10-08 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
IrfanView 4.53 allows Data from a Faulting Address to control Code Flow starting at JPEG_LS+0x0000000000003155.
87 CVE-2019-17217 352 CSRF 2019-10-06 2019-10-10
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no CSRF protection established on the web service.
88 CVE-2019-17188 434 Bypass 2019-10-04 2019-10-10
6.5
None Remote Low Single system Partial Partial Partial
An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass a front-end restriction and upload PHP code to the webserver, by providing image data and the image/jpeg content type, with a .php extension. This occurs because the code relies on the getimagesize function.
89 CVE-2019-17134 287 Bypass 2019-10-08 2019-10-15
6.4
None Remote Low Not required Partial Partial None
Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.
90 CVE-2019-17132 20 2019-10-04 2019-10-11
6.8
None Remote Medium Not required Partial Partial Partial
vBulletin through 5.5.4 mishandles custom avatars.
91 CVE-2019-17130 552 2019-10-04 2019-10-10
6.4
None Remote Low Not required Partial Partial None
vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.
92 CVE-2019-17107 94 Exec Code 2019-10-08 2019-10-15
6.5
None Remote Low Single system Partial Partial Partial
minPlayCommand.php in Centreon Web before 2.8.27 allows authenticated attackers to execute arbitrary code via the command_hostaddress parameter. NOTE: some sources have listed CVE-2019-17017 for this, but that is incorrect.
93 CVE-2019-17080 502 Exec Code 2019-10-02 2019-10-08
6.8
None Remote Medium Not required Partial Partial Partial
mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.
94 CVE-2019-17051 20 Exec Code 2019-09-30 2019-10-04
6.8
None Remote Medium Not required Partial Partial Partial
Evernote before 7.13 GA on macOS allows code execution because the com.apple.quarantine attribute is not used for attachment files, as demonstrated by a one-click attack involving a drag-and-drop operation on a crafted Terminal file.
95 CVE-2019-17050 639 2019-09-30 2019-10-04
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.
96 CVE-2019-16997 89 Sql 2019-09-30 2019-10-04
6.5
None Remote Low Single system Partial Partial Partial
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
97 CVE-2019-16996 89 Sql 2019-09-30 2019-10-04
6.5
None Remote Low Single system Partial Partial Partial
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.
98 CVE-2019-16993 352 CSRF 2019-09-30 2019-10-07
6.8
None Remote Medium Not required Partial Partial Partial
In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting them.
99 CVE-2019-16941 91 Exec Code 2019-09-28 2019-10-04
6.8
None Remote Medium Not required Partial Partial Partial
NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call).
100 CVE-2019-16902 20 2019-09-27 2019-09-27
6.4
None Remote Low Not required None Partial Partial
In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.