CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In November 2019

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2019-19468 434 Exec Code 2019-11-30 2019-12-13
6.8
None Remote Medium Not required Partial Partial Partial
Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry.
2 CVE-2019-19464 311 2019-11-30 2019-12-09
5.0
None Remote Low Not required Partial None None
The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics.
3 CVE-2019-19463 311 2019-11-30 2021-07-21
5.0
None Remote Low Not required None Partial None
The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check.
4 CVE-2019-19462 476 DoS 2019-11-30 2021-01-29
4.9
None Local Low Not required None None Complete
relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.
5 CVE-2019-19451 835 2019-11-29 2021-01-15
4.9
None Local Low Not required None None Complete
When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an endless loop, thus endlessly writing text to stdout. If this launch is from a thumbnailer service, this output will usually be written to disk via the system's logging facility (potentially with elevated privileges), thus filling up the disk and eventually rendering the system unusable. (The filename can be for a nonexistent file.) NOTE: this does not affect an upstream release, but affects certain Linux distribution packages with version numbers such as 0.97.3.
6 CVE-2019-19396 20 2019-11-29 2019-12-16
7.8
None Remote Low Not required None None Complete
illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg concurrently over a single socket, because uts/common/inet/ip/ip_attr.c mishandles conn_ixa dereferences.
7 CVE-2019-19391 843 2019-11-29 2019-12-19
6.4
None Remote Low Not required Partial Partial None
** DISPUTED ** In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that this is not a vulnerability. When LuaJIT was originally developed, the expectation was that the entire debug library had no security guarantees and thus it made no sense to assign CVEs. However, not all users of later LuaJIT derivatives share this perspective.
8 CVE-2019-19388 79 XSS 2019-11-29 2019-12-02
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the dialplan_uuid parameter.
9 CVE-2019-19387 79 XSS 2019-11-29 2019-12-02
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the c parameter.
10 CVE-2019-19386 79 XSS 2019-11-29 2019-12-02
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id and/or voicemail_id parameter.
11 CVE-2019-19385 79 XSS 2019-11-29 2019-12-02
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the app_uuid parameter.
12 CVE-2019-19384 79 XSS 2019-11-29 2019-12-02
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the fax_uuid parameter.
13 CVE-2019-19379 Bypass 2019-11-28 2020-08-24
5.0
None Remote Low Not required None Partial None
In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.
14 CVE-2019-19378 787 2019-11-29 2020-01-03
6.8
None Remote Medium Not required Partial Partial Partial
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/btrfs/raid56.c.
15 CVE-2019-19377 416 2019-11-29 2020-12-11
6.8
None Remote Medium Not required Partial Partial Partial
In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
16 CVE-2019-19376 20 DoS Bypass 2019-11-28 2021-07-21
4.0
None Remote Low ??? None None Partial
In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)
17 CVE-2019-19375 352 CSRF 2019-11-28 2020-08-24
4.3
None Remote Medium Not required Partial None None
In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8.)
18 CVE-2019-19372 22 Dir. Trav. 2019-11-28 2019-12-17
5.0
None Remote Low Not required Partial None None
** DISPUTED ** A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later reported that there was not a "fully working exploit."
19 CVE-2019-19367 79 XSS 2019-11-27 2019-12-04
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/fax/fax_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
20 CVE-2019-19366 79 XSS 2019-11-27 2019-12-04
4.3
None Remote Medium Not required None Partial None
A cross-site scripting (XSS) vulnerability in app/xml_cdr/xml_cdr_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter.
21 CVE-2019-19330 74 2019-11-27 2020-04-01
7.5
None Remote Low Not required Partial Partial Partial
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.
22 CVE-2019-19329 79 Exec Code XSS 2019-11-27 2019-12-18
4.3
None Remote Medium Not required None Partial None
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
23 CVE-2019-19328 79 XSS 2019-11-27 2020-08-24
4.3
None Remote Medium Not required None Partial None
ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entities. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
24 CVE-2019-19327 79 XSS 2019-11-27 2019-12-18
4.3
None Remote Medium Not required None Partial None
ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.
25 CVE-2019-19319 787 2019-11-27 2021-02-09
4.4
None Local Medium Not required Partial Partial Partial
In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30.
26 CVE-2019-19318 416 2019-11-28 2021-03-15
2.1
None Local Low Not required None None Partial
In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
27 CVE-2019-19308 476 2019-11-27 2019-12-12
4.3
None Remote Medium Not required None None Partial
In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to a g_strconcat call that returns NULL).
28 CVE-2019-19307 125 Overflow 2019-11-26 2020-08-24
7.5
None Remote Low Not required Partial Partial Partial
An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.
29 CVE-2019-19306 79 XSS 2019-11-26 2020-10-29
3.5
None Remote Medium ??? None Partial None
The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.
30 CVE-2019-19275 125 Exec Code 2019-11-26 2020-03-14
5.0
None Remote Low Not required None None Partial
typed_ast 1.3.0 and 1.3.1 has an ast_for_arguments out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
31 CVE-2019-19274 125 Exec Code 2019-11-26 2020-03-14
5.0
None Remote Low Not required None None Partial
typed_ast 1.3.0 and 1.3.1 has a handle_keywordonly_args out-of-bounds read. An attacker with the ability to cause a Python interpreter to parse Python source (but not necessarily execute it) may be able to crash the interpreter process. This could be a concern, for example, in a web-based service that parses (but does not execute) Python code. (This issue also affected certain Python 3.8.0-alpha prereleases.)
32 CVE-2019-19272 476 2019-11-26 2019-12-11
5.0
None Remote Low Not required None None Partial
An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
33 CVE-2019-19271 295 2019-11-26 2019-12-11
5.0
None Remote Low Not required None Partial None
An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
34 CVE-2019-19270 295 2019-11-26 2020-01-13
5.0
None Remote Low Not required None Partial None
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
35 CVE-2019-19269 476 2019-11-30 2020-01-13
4.0
None Remote Low ??? None None Partial
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
36 CVE-2019-19252 125 2019-11-25 2020-01-03
4.6
None Local Low Not required Partial Partial Partial
vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.
37 CVE-2019-19250 89 Sql 2019-11-25 2019-12-04
7.5
None Remote Low Not required Partial Partial Partial
OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js.
38 CVE-2019-19249 20 2019-11-25 2019-12-11
7.5
None Remote Low Not required Partial Partial Partial
Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.
39 CVE-2019-19246 125 2019-11-25 2020-08-24
5.0
None Remote Low Not required None None Partial
Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
40 CVE-2019-19244 2019-11-25 2020-08-24
5.0
None Remote Low Not required None None Partial
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
41 CVE-2019-19242 476 2019-11-27 2020-04-15
4.3
None Remote Medium Not required None None Partial
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
42 CVE-2019-19240 787 Overflow 2019-11-22 2020-08-24
5.0
None Remote Low Not required Partial None None
Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.
43 CVE-2019-19227 476 DoS 2019-11-22 2019-12-12
2.1
None Local Low Not required None None Partial
In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
44 CVE-2019-19221 125 2019-11-21 2020-03-20
2.1
None Local Low Not required None None Partial
In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.
45 CVE-2019-19207 89 Sql 2019-11-21 2019-11-26
6.5
None Remote Low ??? Partial Partial Partial
rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.
46 CVE-2019-19206 79 XSS 2019-11-26 2019-12-10
3.5
None Remote Medium ??? None Partial None
Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.
47 CVE-2019-19204 125 2019-11-21 2020-08-24
5.0
None Remote Low Not required None None Partial
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
48 CVE-2019-19203 125 2019-11-21 2020-02-18
5.0
None Remote Low Not required None None Partial
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.
49 CVE-2019-19202 276 2019-11-21 2019-12-04
6.5
None Remote Low ??? Partial Partial Partial
In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role by adding roleid=H2 to a POST request.
50 CVE-2019-19197 732 Exec Code 2019-11-21 2019-12-04
7.2
None Local Low Not required Complete Complete Complete
IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHOD_NEITHER results in a read primitive.
Total number of vulnerabilities : 1678   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.