CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
4351 CVE-2019-14843 863 2020-01-07 2020-01-15
6.5
None Remote Low ??? Partial Partial Partial
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.
4352 CVE-2019-14837 798 2020-01-07 2020-01-15
6.4
None Remote Low Not required Partial Partial None
A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be '[email protected]'.
4353 CVE-2019-14836 352 CSRF 2021-05-26 2021-06-02
6.8
None Remote Medium Not required Partial Partial Partial
A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks.
4354 CVE-2019-14832 863 2019-10-15 2019-12-11
6.0
None Remote Medium ??? Partial Partial Partial
A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.
4355 CVE-2019-14819 269 2020-01-07 2020-01-10
6.5
None Remote Low ??? Partial Partial Partial
A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints.
4356 CVE-2019-14817 863 Exec Code Bypass 2019-09-03 2020-10-16
6.8
None Remote Medium Not required Partial Partial Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
4357 CVE-2019-14812 732 Exec Code Bypass 2019-11-27 2020-10-09
6.8
None Remote Medium Not required Partial Partial Partial
A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
4358 CVE-2019-14811 863 Exec Code Bypass 2019-09-03 2020-10-16
6.8
None Remote Medium Not required Partial Partial Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
4359 CVE-2019-14788 22 Exec Code Dir. Trav. 2019-08-15 2019-08-22
6.5
None Remote Low ??? Partial Partial Partial
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
4360 CVE-2019-14778 416 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
4361 CVE-2019-14777 416 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
4362 CVE-2019-14776 125 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
4363 CVE-2019-14773 2019-08-08 2020-08-24
6.4
None Remote Low Not required None Partial Partial
admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion.
4364 CVE-2019-14765 2020-01-21 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers.
4365 CVE-2019-14755 434 2019-08-15 2019-08-20
6.5
None Remote Low ??? Partial Partial Partial
The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type.
4366 CVE-2019-14749 1236 2019-08-07 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Calc, resulting in a situation where cells in the spreadsheets can contain input from an untrusted source. As a result, the end user who is accessing the exported spreadsheet can be affected.
4367 CVE-2019-14745 77 Exec Code 2019-08-07 2019-10-08
6.8
None Remote Medium Not required Partial Partial Partial
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.
4368 CVE-2019-14734 787 Overflow 2019-08-07 2021-01-14
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
4369 CVE-2019-14733 787 Overflow 2019-08-07 2021-02-22
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
4370 CVE-2019-14732 787 Overflow 2019-08-07 2021-02-26
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
4371 CVE-2019-14726 2019-09-10 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account.
4372 CVE-2019-14707 Exec Code 2019-08-06 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI.
4373 CVE-2019-14705 287 2019-08-06 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin.
4374 CVE-2019-14703 352 CSRF 2019-08-06 2019-08-13
6.8
None Remote Medium Not required Partial Partial Partial
A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account.
4375 CVE-2019-14692 787 Overflow 2019-08-06 2021-02-22
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
4376 CVE-2019-14691 787 Overflow 2019-08-06 2021-01-14
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
4377 CVE-2019-14690 787 Overflow 2019-08-06 2021-01-14
6.8
None Remote Medium Not required Partial Partial Partial
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
4378 CVE-2019-14687 426 2019-08-20 2019-08-27
6.8
None Remote Medium Not required Partial Partial Partial
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684.
4379 CVE-2019-14686 426 2019-08-21 2019-08-30
6.8
None Remote Medium Not required Partial Partial Partial
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.
4380 CVE-2019-14681 352 CSRF 2019-08-08 2019-08-20
6.8
None Remote Medium Not required Partial Partial Partial
The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF.
4381 CVE-2019-14666 200 +Info 2019-09-25 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.
4382 CVE-2019-14654 Exec Code 2019-08-05 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9.
4383 CVE-2019-14541 787 Overflow 2019-08-02 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_program_id in cobc/typeck.c via crafted COBOL source code.
4384 CVE-2019-14535 369 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
4385 CVE-2019-14533 416 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
4386 CVE-2019-14528 787 Overflow 2019-08-02 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a heap-based buffer overflow in read_literal in cobc/scanner.l via crafted COBOL source code.
4387 CVE-2019-14524 787 Overflow 2019-08-02 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmt_mtm_load_song in fmt/mtm.c, a different vulnerability than CVE-2019-14465.
4388 CVE-2019-14523 191 2019-08-02 2019-08-23
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_load_song in the Amiga Oktalyzer parser in fmt/okt.c.
4389 CVE-2019-14498 369 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
4390 CVE-2019-14497 787 Overflow 2019-08-01 2020-09-17
6.8
None Remote Medium Not required Partial Partial Partial
ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.
4391 CVE-2019-14496 787 Overflow 2019-08-01 2020-09-17
6.8
None Remote Medium Not required Partial Partial Partial
LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.
4392 CVE-2019-14491 125 DoS 2019-08-01 2019-12-02
6.4
None Remote Low Not required Partial None Partial
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
4393 CVE-2019-14486 119 Overflow 2019-08-01 2019-08-13
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a buffer overflow in cb_evaluate_expr in cobc/field.c via crafted COBOL source code.
4394 CVE-2019-14473 862 2019-08-06 2020-08-24
6.5
None Remote Low ??? Partial Partial Partial
eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. Consequently, a valid guest level or user level account can create a new admin level account, read the service messages, clear the system protocol or modify/delete internal programs, etc. pp.
4395 CVE-2019-14468 119 Overflow 2019-08-01 2019-08-07
6.8
None Remote Medium Not required Partial Partial Partial
GnuCOBOL 2.2 has a buffer overflow in cb_push_op in cobc/field.c via crafted COBOL source code.
4396 CVE-2019-14465 787 Overflow 2019-07-31 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.
4397 CVE-2019-14438 125 2019-08-29 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
4398 CVE-2019-14437 125 2019-08-29 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
4399 CVE-2019-14432 287 Exec Code 2019-08-07 2019-08-19
6.8
None Remote Medium Not required Partial Partial Partial
Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack vector can be used to crash the application at any time.
4400 CVE-2019-14422 Exec Code 2019-08-15 2020-08-24
6.8
None Remote Medium Not required Partial Partial Partial
An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbitrary code. A tsvncmd:command:diff?path:[file1]?path2:[file2] URI will execute a customised diff on [file1] and [file2] based on the file extension. For xls files, it will execute the script diff-xls.js using wscript, which will open the two files for analysis without any macro security warning. An attacker can exploit this by putting a macro virus in a network drive, and force the victim to open the workbooks and execute the macro inside.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.