# CVEs published 2019-06-13

38 CVEs were published on June 13, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-12813](https://cve.now/CVE-2019-12813.md): An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. (no CVSS)
- [CVE-2019-12802](https://cve.now/CVE-2019-12802.md): In radare2 through 3.5.1, the rcc\_context function of libr/egg/egg\_lang.c mishandles changing context. (no CVSS)
- [CVE-2019-10959](https://cve.now/CVE-2019-10959.md): BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not… (no CVSS, BD Alaris Gateway Workstation)
- [CVE-2019-10962](https://cve.now/CVE-2019-10962.md): BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway… (no CVSS, BD Alaris Gateway Workstation)
- [CVE-2019-12799](https://cve.now/CVE-2019-12799.md): In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability… (CVSS 6.5, shopware/shopware)
- [CVE-2018-10947](https://cve.now/CVE-2018-10947.md): An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut… (no CVSS)
- [CVE-2018-10946](https://cve.now/CVE-2018-10946.md): An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the… (no CVSS)
- [CVE-2019-7321](https://cve.now/CVE-2019-7321.md): Usage of an uninitialized variable in the function fz\_load\_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that… (no CVSS)
- [CVE-2019-12798](https://cve.now/CVE-2019-12798.md): An issue was discovered in Artifex MuJS 1.0.5. (no CVSS)
- [CVE-2019-5245](https://cve.now/CVE-2019-5245.md): HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. (no CVSS, HiSuite)
- [CVE-2019-5286](https://cve.now/CVE-2019-5286.md): There is a reflection XSS vulnerability in the HedEx products. (no CVSS, HedEx Lite)
- [CVE-2019-5439](https://cve.now/CVE-2019-5439.md): A Buffer Overflow in VLC Media Player \< 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. (no CVSS, VLC Media Player)
- [CVE-2019-0128](https://cve.now/CVE-2019-0128.md): Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an… (no CVSS, Intel(R) Chipset Device Software (INF Update Utility) Advis…)
- [CVE-2019-0130](https://cve.now/CVE-2019-0130.md): Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an… (no CVSS, Intel(R) Accelerated Storage Manager in Intel® Rapid Storag…)
- [CVE-2019-0136](https://cve.now/CVE-2019-0136.md): Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to… (no CVSS, Intel® PROSet/Wireless WiFi Software)
- [CVE-2019-0157](https://cve.now/CVE-2019-0157.md): Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of… (no CVSS, Intel(R) SGX for Linux)
- [CVE-2019-0164](https://cve.now/CVE-2019-0164.md): Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an… (no CVSS, Intel(R) Turbo Boost Max Technology)
- [CVE-2019-0174](https://cve.now/CVE-2019-0174.md): Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information… (no CVSS, Central Processing Units)
- [CVE-2019-0175](https://cve.now/CVE-2019-0175.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0177](https://cve.now/CVE-2019-0177.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0178](https://cve.now/CVE-2019-0178.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0179](https://cve.now/CVE-2019-0179.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0180](https://cve.now/CVE-2019-0180.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0181](https://cve.now/CVE-2019-0181.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0182](https://cve.now/CVE-2019-0182.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0183](https://cve.now/CVE-2019-0183.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-11092](https://cve.now/CVE-2019-11092.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable… (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-11117](https://cve.now/CVE-2019-11117.md): Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user… (no CVSS, Intel(R) Omni-Path Fabric Manager GUI)
- [CVE-2019-11119](https://cve.now/CVE-2019-11119.md): Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to… (no CVSS, Intel(R) RAID Web Console 3 for Windows\*)
- [CVE-2019-11123](https://cve.now/CVE-2019-11123.md): Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11124](https://cve.now/CVE-2019-11124.md): Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11125](https://cve.now/CVE-2019-11125.md): Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11126](https://cve.now/CVE-2019-11126.md): Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11127](https://cve.now/CVE-2019-11127.md): Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11128](https://cve.now/CVE-2019-11128.md): Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11129](https://cve.now/CVE-2019-11129.md): Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2018-12147](https://cve.now/CVE-2018-12147.md): Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version… (no CVSS, Intel(R) CSME Assets Advisory)
- [CVE-2018-3702](https://cve.now/CVE-2018-3702.md): Improper permissions in the installer for the ITE Tech Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an… (no CVSS, ITE Tech Consumer Infrared Driver for Windows 10 Advisory)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.