CVE-2019-5725
Published Jan 8, 2019qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql f…
Year archive
CVEs published in 2019
Archive summary17,305 CVEs published in 2019 — 2,593 Critical, 7,142 High, 7,228 Medium, 342 Low, 0 Unrated.
CVE-2019-5721
Published Jan 8, 2019In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-fr…
CVE-2019-5719
Published Jan 8, 2019In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing…
CVE-2019-5718
Published Jan 8, 2019In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length…
CVE-2019-5717
Published Jan 8, 2019In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of…
CVE-2019-5716
Published Jan 8, 2019In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.
CVE-2019-0622
Published Jan 8, 2019An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vuln…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2019-0588
Published Jan 8, 2019An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0586
Published Jan 8, 2019A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2019-0585
Published Jan 8, 2019A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0584
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0583
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0582
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0581
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0580
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0579
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 3
- Buzz score
- 21.9
CVE-2019-0578
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0577
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0576
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0575
Published Jan 8, 2019A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerabilit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0574
Published Jan 8, 2019An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0573
Published Jan 8, 2019An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0572
Published Jan 8, 2019An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0571
Published Jan 8, 2019An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2019-0570
Published Jan 8, 2019An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affe…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 17,126-17,150 of 17,305 CVEsPage 686 of 693