CVEs published February 18, 2019
43 CVEs were published on February 18, 2019: 0 critical, 0 high.
- Published
- 43
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- total.js
- 1
Medium, low and unrated 43
- CVE-2019-7629Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbi
- CVE-2019-8919The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher
- CVE-2019-8917SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service.
- CVE-2019-8908An issue was discovered in WTCMS 1.0.
- CVE-2019-8909An issue was discovered in WTCMS 1.0.
- CVE-2019-8910An issue was discovered in WTCMS 1.0.
- CVE-2019-8911An issue was discovered in WTCMS 1.0.
- CVE-2019-8912In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which
- CVE-2018-12159Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially
- CVE-2018-3700Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version
- CVE-2019-0101Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escala
- CVE-2019-0102Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated use
- CVE-2019-0103Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to
- CVE-2019-0104Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user
- CVE-2019-0105Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated
- CVE-2019-0106Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to pote
- CVE-2019-0107Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potenti
- CVE-2019-0108Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable di
- CVE-2019-0109Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable e
- CVE-2019-0110Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable
- CVE-2019-0111Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable in
- CVE-2019-0112Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentiall
- CVE-2019-0127Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable inform
- CVE-2019-8904do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.
- CVE-2019-8905do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerabilit
- CVE-2019-8906do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
- CVE-2019-8907do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application
- CVE-2019-8903index.js in Total.js Platform before 3.2.3 allows path traversal.total.js
- CVE-2019-6453mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.
- CVE-2019-8372The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitr
- CVE-2019-8902An issue was discovered in idreamsoft iCMS through 7.0.14.
- CVE-2019-8423ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.
- CVE-2019-8424ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.
- CVE-2019-8425includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.
- CVE-2019-8426skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRa
- CVE-2019-8427daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.
- CVE-2019-8428ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[Monitor
- CVE-2019-8429ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.
- CVE-2019-8432In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.
- CVE-2019-8433JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.
- CVE-2019-8434In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.
- CVE-2019-8435admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.
- CVE-2019-8436imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.