CVE-2019-14939

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-149406.5In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.CVE-2019-149417.5SHAREit through 4.0.6.177 does not check the body length from the received packet header (which is used to allocate memory for the next set CVE-2019-149425.9An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitCVE-2019-149439.8An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.CVE-2019-149446.5An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows iCVE-2019-149455.4The ultimate-member plugin before 2.0.54 for WordPress has XSS.CVE-2019-149465.4The ultimate-member plugin before 2.0.52 for WordPress has XSS related to UM Roles create and edit operations.CVE-2019-149475.4The ultimate-member plugin before 2.0.52 for WordPress has XSS during an account upgrade.CVE-2019-149485.4The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.CVE-2019-149496.1The wp-database-backup plugin before 5.1.2 for WordPress has XSS.CVE-2019-149506.1The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.CVE-2019-149517.5The Telenav Scout GPS Link app 1.x for iOS, as used with Toyota and Lexus vehicles, has an incorrect protection mechanism against brute-forc
CVE-2019-14939: Medium severity, CVSS 5.5 | Vulnix