CVE-2019-25065

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
unspecified	OpenNetAdmin	18.1.1

References

https://0day.today/exploit/33544Exploit, Third Party Advisory
https://vuldb.com/?id.146798Exploit, Third Party Advisory
https://0day.today/exploit/33544Exploit, Third Party Advisory
https://vuldb.com/?id.146798Exploit, Third Party Advisory

Timeline

Published: Jun 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-250668.8A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. Th CVE-2019-250678.8A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API.CVE-2019-250688.8A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file R CVE-2019-250697.5A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown p CVE-2019-25074.9Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.CVE-2019-250706.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in WolfCMS up to 0.8.3.1. It has been rated as problematic. This issue affects som CVE-2019-250718.8A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an CVE-2019-250727.5Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server can cause a clie CVE-2019-250737.5Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the CVE-2019-250756.1HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arb CVE-2019-250765.8The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote attackers to cause a denial of service (de CVE-2019-250787.8A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_