CVE-2019-1959

MediumCVSS 4.4/10Last modified Aug 24, 2026

Description

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitrary files on the underlying operating system (OS) of an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20 CWE-78

Affected software

Vendor	Product	Versions
Cisco	Cisco Enterprise NFV Infrastructure Software	>= unspecified, < n/a

References

Timeline

Published: Aug 8, 2019
Last modified: Aug 24, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-195907.8In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This CVE-2019-195926.1Jama Connect 8.44.0 is vulnerable to stored Cross-Site Scripting CVE-2019-195949.8reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers t CVE-2019-195959.8reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote CVE-2019-195965.4GitBook through 2.6.9 allows XSS via a local .md file.CVE-2019-195978.8D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters w CVE-2019-195988.8D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timesta CVE-2019-19604.4Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to read arbitr CVE-2019-196017.8OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf.CVE-2019-196026.1fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows context-dependent att CVE-2019-196037.5SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.CVE-2019-196047.8Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x b