CVE-2019-19277

MEDIUM Year: 2019
CVSS v3 Score
6.5
Medium
CVSS v2 Score
5.5
Medium
Weakness Type
CWE-778
View all →

Vulnerability Description

A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.

Related Vulnerabilities

CVE-2019-7613

HIGH
CVSS:7.5(High)

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.

CWE-7782019

CVE-2021-43419

HIGH
CVSS:7.5(High)

An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app.

CWE-7782021

CVE-2022-30305

HIGH
CVSS:7.5(High)

An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3...

CWE-7782022

CVE-2023-1995

HIGH
CVSS:7.5(High)

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-2...

CWE-7782023

CVE-2025-2562

MEDIUM
CVSS:5.4(Medium)

Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via ...

CWE-7782025

CVE-2025-32967

MEDIUM
CVSS:5.4(Medium)

OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allows password change events to go unrecorded...

CWE-7782025