CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 4 and 4.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
351 CVE-2019-14274 119 Overflow 2019-07-26 2019-08-01
4.3
None Remote Medium Not required None None Partial
MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.
352 CVE-2019-14270 254 2019-07-25 2019-08-06
4.6
None Local Low Not required Partial Partial Partial
Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through 12.0.0.6870, with the Comodo Container feature, are vulnerable to Sandbox Escape.
353 CVE-2019-14268 532 2019-07-25 2019-08-02
4.0
None Remote Low Single system Partial None None
In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.3. The fix was back-ported to LTS 2019.6.5 as well as LTS 2019.3.7.
354 CVE-2019-14250 190 Overflow 2019-07-24 2019-08-22
4.3
None Remote Medium Not required None None Partial
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.
355 CVE-2019-14249 369 DoS 2019-07-24 2019-08-05
4.3
None Remote Medium Not required None None Partial
dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.
356 CVE-2019-14248 476 2019-07-24 2019-08-07
4.3
None Remote Medium Not required None None Partial
In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled.
357 CVE-2019-14247 787 2019-07-24 2019-07-26
4.3
None Remote Medium Not required None None Partial
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.
358 CVE-2019-14246 255 2019-08-21 2019-09-04
4.0
None Remote Low Single system Partial None None
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account.
359 CVE-2019-14228 79 XSS CSRF 2019-07-26 2019-08-06
4.3
None Remote Medium Not required None Partial None
Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF protection on the admin/includes/adminprocess.php endpoint, an attacker is able to chain the XSS with CSRF in order to cause remote exploitation.
360 CVE-2019-13975 74 2019-09-04 2019-09-05
4.3
None Remote Medium Not required None Partial None
eGain Chat 15.0.3 allows HTML Injection.
361 CVE-2019-13972 79 XSS 2019-07-19 2019-07-19
4.3
None Remote Medium Not required None Partial None
LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.
362 CVE-2019-13971 79 XSS 2019-07-19 2019-07-22
4.3
None Remote Medium Not required None Partial None
OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request.
363 CVE-2019-13970 79 Exec Code XSS 2019-07-19 2019-07-22
4.3
None Remote Medium Not required None Partial None
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.
364 CVE-2019-13960 400 DoS 2019-07-18 2019-07-31
4.3
None Remote Medium Not required None None Partial
** DISPUTED ** In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes.
365 CVE-2019-13959 476 2019-07-18 2019-07-19
4.3
None Remote Medium Not required None None Partial
In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186.
366 CVE-2019-13955 400 2019-07-26 2019-08-07
4.0
None Remote Low Single system None None Partial
Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected.
367 CVE-2019-13923 79 XSS 2019-09-13 2019-09-16
4.3
None Remote Medium Not required None Partial None
A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
368 CVE-2019-13922 916 2019-09-13 2019-09-16
4.0
None Remote Low Single system Partial None None
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.
369 CVE-2019-13920 352 CSRF 2019-09-13 2019-09-16
4.3
None Remote Medium Not required None Partial None
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a logged-in user to the application. The vulnerability could allow switching the connectivity state of a user or a device. At the time of advisory publication no public exploitation of this security vulnerability was known.
370 CVE-2019-13919 200 +Info 2019-09-13 2019-09-16
4.0
None Remote Low Single system Partial None None
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid credentials for the web interface. No user interaction is required. The vulnerability could allow an attacker to access information that he should not be able to read. The affected information does not include passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.
371 CVE-2019-13655 400 DoS 2019-07-29 2019-08-07
4.3
None Remote Medium Not required None None Partial
Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory.
372 CVE-2019-13648 399 DoS 2019-07-19 2019-07-30
4.9
None Local Low Not required None None Complete
In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c.
373 CVE-2019-13643 79 Exec Code XSS 2019-07-17 2019-07-23
4.3
None Remote Medium Not required None Partial None
Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The attack begins by storing a new stream message containing an XSS payload. The stored payload can then be triggered by clicking a malicious link on the Notifications page.
374 CVE-2019-13631 787 2019-07-17 2019-07-25
4.6
None Local Low Not required Partial Partial Partial
In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.
375 CVE-2019-13626 190 Overflow 2019-07-17 2019-09-09
4.3
None Remote Medium Not required None None Partial
SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
376 CVE-2019-13617 119 Overflow 2019-07-16 2019-07-18
4.3
None Remote Medium Not required None None Partial
njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call.
377 CVE-2019-13615 119 Overflow 2019-07-16 2019-07-25
4.3
None Remote Medium Not required None None Partial
libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
378 CVE-2019-13607 79 XSS 2019-07-18 2019-08-01
4.3
None Remote Medium Not required None Partial None
The Opera Mini application through 16.0.14 for iOS has a UXSS vulnerability that can be triggered by performing navigation to a javascript: URL.
379 CVE-2019-13604 200 +Info 2019-07-15 2019-07-29
4.3
None Remote Medium Not required Partial None None
There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak.
380 CVE-2019-13603 310 2019-07-16 2019-07-29
4.3
None Remote Medium Not required Partial None None
An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows an attacker to obtain a user's fingerprint image.
381 CVE-2019-13588 79 XSS 2019-07-26 2019-08-22
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter.
382 CVE-2019-13564 79 XSS 2019-07-11 2019-08-29
4.3
None Remote Medium Not required None Partial None
XSS exists in Ping Identity Agentless Integration Kit before 1.5.
383 CVE-2019-13562 79 XSS 2019-07-11 2019-07-12
4.3
None Remote Medium Not required None Partial None
D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, and the /www/apply_sec.cgi html_response_return_page parameter.
384 CVE-2019-13542 476 2019-09-17 2019-09-18
4.0
None Remote Low Single system None None Partial
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.
385 CVE-2019-13515 532 2019-08-15 2019-08-26
4.0
None Remote Low Single system Partial None None
OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.
386 CVE-2019-13512 125 2019-08-15 2019-08-26
4.3
None Remote Medium Not required Partial None None
Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information from the device.
387 CVE-2019-13511 200 +Info 2019-08-15 2019-08-26
4.3
None Remote Medium Not required Partial None None
Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.
388 CVE-2019-13506 79 XSS 2019-07-11 2019-07-18
4.3
None Remote Medium Not required None Partial None
@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS.
389 CVE-2019-13505 79 XSS 2019-07-11 2019-07-16
4.3
None Remote Medium Not required None Partial None
The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1.
390 CVE-2019-13504 125 2019-07-10 2019-07-12
4.3
None Remote Medium Not required None None Partial
There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
391 CVE-2019-13488 79 XSS 2019-07-10 2019-07-14
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used.
392 CVE-2019-13477 352 CSRF 2019-08-21 2019-08-27
4.3
None Remote Medium Not required None Partial None
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.837, CSRF in the forgot password function allows an attacker to change the password for the root account.
393 CVE-2019-13472 79 XSS 2019-07-09 2019-07-10
4.3
None Remote Medium Not required None Partial None
PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.
394 CVE-2019-13458 255 2019-08-21 2019-08-29
4.0
None Remote Low Single system Partial None None
An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19. An attacker who is logged into OTRS as an agent user with appropriate permissions can leverage OTRS notification tags in templates in order to disclose hashed user passwords.
395 CVE-2019-13454 369 2019-07-09 2019-08-21
4.3
None Remote Medium Not required None None Partial
ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
396 CVE-2019-13453 400 DoS 2019-07-17 2019-07-18
4.3
None Remote Medium Not required None None Partial
Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32() and zipfile.cpp:Zipfile::Zipfile().
397 CVE-2019-13450 284 2019-07-09 2019-07-16
4.3
None Remote Medium Not required Partial None None
In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file.
398 CVE-2019-13449 20 DoS 2019-07-09 2019-07-16
4.3
None Remote Medium Not required None None Partial
In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421.
399 CVE-2019-13448 79 XSS 2019-07-17 2019-07-18
4.3
None Remote Medium Not required None Partial None
An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload to send to the product's clients.
400 CVE-2019-13421 200 +Info 2019-08-23 2019-08-27
4.0
None Remote Low Single system Partial None None
Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
Total number of vulnerabilities : 26778   Page : 1 2 3 4 5 6 7 8 (This Page)9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.