CVE-2019-20494

LowCVSS 3.3/10Last modified Jun 17, 2026

Related CVEs from 2019

CVE-2019-204956.5cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531).CVE-2019-204965.5cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532).CVE-2019-204975.4cPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533).CVE-2019-204989.8cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).CVE-2019-204997.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionalitCVE-2019-20507.8In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escCVE-2019-205007.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality iCVE-2019-205017.8D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in CVE-2019-205027.5An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter.CVE-2019-205036.5usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.CVE-2019-205049.8service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code vCVE-2019-20517.5In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosu
CVE-2019-20494: Low severity, CVSS 3.3 | Vulnix