CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
101 CVE-2019-16891 502 Exec Code 2019-10-04 2019-10-10
6.5
None Remote Low Single system Partial Partial Partial
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
102 CVE-2019-16887 120 2019-09-25 2019-09-26
6.8
None Remote Medium Not required Partial Partial Partial
In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc.
103 CVE-2019-16745 89 Sql 2019-09-30 2019-10-03
6.5
None Remote Low Single system Partial Partial Partial
eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
104 CVE-2019-16744 89 Sql 2019-09-30 2019-10-03
6.5
None Remote Low Single system Partial Partial Partial
eBrigade before 5.0 has evenements.php cid SQL Injection.
105 CVE-2019-16743 89 Sql 2019-09-30 2019-10-02
6.5
None Remote Low Single system Partial Partial Partial
eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
106 CVE-2019-16718 78 Exec Code 2019-09-23 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fix for CVE-2019-14745 and improper handling of symbol names embedded in executables.
107 CVE-2019-16706 352 CSRF 2019-09-23 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.
108 CVE-2019-16705 125 2019-09-23 2019-09-23
6.4
None Remote Low Not required Partial None Partial
Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.
109 CVE-2019-16667 352 CSRF 2019-09-26 2019-09-27
6.8
None Remote Medium Not required Partial Partial Partial
diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrf_callback() produces a "CSRF token expired" error and a Try Again button when a CSRF token is missing.
110 CVE-2019-16660 352 CSRF 2019-09-21 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.
111 CVE-2019-16659 352 CSRF 2019-09-21 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
TuziCMS 2.0.6 has index.php/manage/link/do_add CSRF.
112 CVE-2019-16658 352 CSRF 2019-09-21 2019-09-23
6.8
None Remote Medium Not required Partial Partial Partial
TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
113 CVE-2019-16655 20 2019-09-21 2019-09-23
6.4
None Remote Low Not required None Partial Partial
joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.
114 CVE-2019-16531 352 CSRF 2019-09-19 2019-09-20
6.8
None Remote Medium Not required Partial Partial Partial
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.
115 CVE-2019-16410 125 2019-09-24 2019-09-25
6.4
None Remote Low Not required Partial None Partial
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of header_len checking.
116 CVE-2019-16403 863 2019-09-18 2019-09-19
6.5
None Remote Low Single system Partial Partial Partial
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers.
117 CVE-2019-16396 416 2019-09-17 2019-09-18
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a use-after-free in the end_scope_of_program_name() function in cobc/parser.y via crafted COBOL source code.
118 CVE-2019-16395 120 Overflow 2019-09-17 2019-09-18
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a stack-based buffer overflow in the cb_name() function in cobc/tree.c via crafted COBOL source code.
119 CVE-2019-16383 89 Sql 2019-09-24 2019-09-25
6.4
None Remote Low Not required Partial Partial None
MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, or may be able to alter the database via the REST API, aka SQL Injection.
120 CVE-2019-16347 119 Overflow 2019-09-16 2019-09-16
6.8
None Remote Medium Not required Partial Partial Partial
ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
121 CVE-2019-16346 119 Overflow 2019-09-16 2019-09-16
6.8
None Remote Medium Not required Partial Partial Partial
ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.
122 CVE-2019-16318 434 Bypass 2019-09-14 2019-09-17
6.5
None Remote Low Single system Partial Partial Partial
In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renaming of .php to .php.txt for long filenames, a different vulnerability than CVE-2019-10867 and CVE-2019-16317.
123 CVE-2019-16317 502 2019-09-14 2019-09-17
6.5
None Remote Low Single system Partial Partial Partial
In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uploads are not blocked and are reachable within the phar://../../../../../../../../var/www/html/web/var/assets/ directory, a different vulnerability than CVE-2019-10867 and CVE-2019-16318.
124 CVE-2019-16311 352 CSRF 2019-09-14 2019-09-16
6.8
None Remote Medium Not required Partial Partial Partial
NIUSHOP V1.11 has CSRF via search_info to index.php.
125 CVE-2019-16305 74 Exec Code 2019-09-14 2019-09-16
6.8
None Remote Medium Not required Partial Partial Partial
In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.
126 CVE-2019-16294 20 DoS Exec Code 2019-09-14 2019-10-02
6.8
None Remote Medium Not required Partial Partial Partial
SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allows remote code execution or denial of service via Unicode characters in a crafted .ml file.
127 CVE-2019-16293 78 Exec Code 2019-09-13 2019-09-13
6.5
None Remote Low Single system Partial Partial Partial
The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.
128 CVE-2019-16277 119 Overflow 2019-09-13 2019-09-16
6.8
None Remote Medium Not required Partial Partial Partial
PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
129 CVE-2019-16186 276 2019-09-09 2019-09-10
6.5
None Remote Low Single system Partial Partial Partial
In Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.
130 CVE-2019-16185 276 2019-09-09 2019-09-10
6.5
None Remote Low Single system Partial Partial Partial
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions.
131 CVE-2019-16174 611 Exec Code 2019-09-09 2019-09-10
6.8
None Remote Medium Not required Partial Partial Partial
An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity.
132 CVE-2019-16131 434 2019-09-08 2019-09-10
6.5
None Remote Low Single system Partial Partial Partial
framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.
133 CVE-2019-16120 74 2019-09-08 2019-09-09
6.5
None Remote Low Single system Partial Partial Partial
CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.
134 CVE-2019-16115 119 DoS Overflow 2019-09-08 2019-09-09
6.8
None Remote Medium Not required Partial Partial Partial
In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.
135 CVE-2019-16113 94 Exec Code 2019-09-08 2019-09-09
6.5
None Remote Low Single system Partial Partial Partial
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.
136 CVE-2019-16099 352 CSRF 2019-09-08 2019-09-09
6.8
None Remote Medium Not required Partial Partial Partial
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
137 CVE-2019-16059 352 CSRF 2019-09-06 2019-09-08
6.8
None Remote Medium Not required Partial Partial Partial
Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.
138 CVE-2019-15953 264 2019-09-05 2019-09-06
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertical and horizontal privilege escalation.
139 CVE-2019-15952 22 Exec Code +Priv Dir. Trav. 2019-09-05 2019-09-06
6.5
None Remote Low Single system Partial Partial Partial
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed. Thus, if a user can control the content of a .html file, then they can inject a payload with a malicious template directive to gain Remote Command Execution. The exploit will work only with the .html extension.
140 CVE-2019-15943 20 DoS Exec Code 2019-09-19 2019-10-02
6.8
None Remote Medium Not required Partial Partial Partial
vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call.
141 CVE-2019-15942 119 Overflow 2019-09-05 2019-09-06
6.8
None Remote Medium Not required Partial Partial Partial
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.
142 CVE-2019-15873 94 Exec Code 2019-09-03 2019-09-05
6.5
None Remote Low Single system Partial Partial Partial
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.
143 CVE-2019-15868 352 CSRF 2019-09-03 2019-09-03
6.8
None Remote Medium Not required Partial Partial Partial
The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
144 CVE-2019-15867 798 2019-09-03 2019-09-06
6.5
None Remote Low Single system Partial Partial Partial
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.
145 CVE-2019-15866 434 2019-09-03 2019-09-05
6.5
None Remote Low Single system Partial Partial Partial
The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.
146 CVE-2019-15865 352 CSRF 2019-09-03 2019-09-03
6.8
None Remote Medium Not required Partial Partial Partial
The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
147 CVE-2019-15858 20 Exec Code XSS 2019-09-03 2019-09-19
6.8
None Remote Medium Not required Partial Partial Partial
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
148 CVE-2019-15841 352 CSRF 2019-08-30 2019-09-03
6.8
None Remote Medium Not required Partial Partial Partial
The facebook-for-woocommerce plugin before 1.9.15 for WordPress has CSRF via ajax_woo_infobanner_post_click, ajax_woo_infobanner_post_xout, or ajax_fb_toggle_visibility.
149 CVE-2019-15840 352 CSRF 2019-08-30 2019-09-03
6.8
None Remote Medium Not required Partial Partial Partial
The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.
150 CVE-2019-15835 352 CSRF 2019-08-30 2019-09-04
6.8
None Remote Medium Not required Partial Partial Partial
The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.