CVEs published July 1, 2019
60 CVEs were published on July 1, 2019: 0 critical, 6 high. Browse them by severity, product and exploitation status.
- Published
- 60
- Critical
- 0
- High
- 6
- Medium
- 13
- Low
- 0
- Unrated
- 41
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- IBM Robotic Process Automation with Automation Anywhere
- 7
- IBM DB2 for Linux, UNIX and Windows
- 6
- IBM Spectrum Protect Plus
- 2
- nokogiri
- 2
- Symantec Endpoint Encryption
- 2
- django
- 1
- F5 BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager
- 1
- IBM Business Automation Workflow
- 1
- IBM InfoSphere Information Server
- 1
- mxgraph
- 1
High 6
- CVE-2019-4383When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may…IBM Spectrum Protect Plus
- CVE-2019-4357When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore…IBM Spectrum Protect Plus
- CVE-2019-4336IBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote attacker…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4322IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which…IBM DB2 for Linux, UNIX and Windows
- CVE-2019-4298IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4154IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which…IBM DB2 for Linux, UNIX and Windows
Medium, low and unrated 54
- CVE-2019-9703Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue…Symantec Endpoint Encryption
- CVE-2019-9702Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue…Symantec Endpoint Encryption
- CVE-2019-6642In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow…F5 BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager
- CVE-2019-5497NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that…NetApp AFF A700s Baseboard Management Controller
- CVE-2019-7271Nortek Linear eMerge 50P/5000P devices have Default Credentials.
- CVE-2019-7272Optergy Proton/Enterprise devices allow Username Disclosure.
- CVE-2019-7273Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).
- CVE-2019-10979SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.SICK MSC800
- CVE-2019-7274Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.
- CVE-2019-7275Optergy Proton/Enterprise devices allow Open Redirect.
- CVE-2019-7277Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.
- CVE-2019-7278Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.
- CVE-2019-3962Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability…Tenable Nessus
- CVE-2019-13137ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
- CVE-2019-13136ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.
- CVE-2019-13135ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
- CVE-2019-13134ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
- CVE-2019-13133ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
- CVE-2019-7279Optergy Proton/Enterprise devices have Hard-coded Credentials.
- CVE-2019-7280Prima Systems FlexAir, Versions 2.3.38 and prior.
- CVE-2019-1578Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince…Palo Alto Networks MineMeld
- CVE-2019-1577Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary…Palo Alto Networks Traps
- CVE-2019-7281Prima Systems FlexAir, Versions 2.3.38 and prior.
- CVE-2019-7666Prima Systems FlexAir, Versions 2.3.38 and prior.
- CVE-2019-7667Prima Systems FlexAir, Versions 2.3.38 and prior.
Show all 54 entriesShow fewer entries
- CVE-2019-7668Prima Systems FlexAir devices have Default Credentials.
- CVE-2019-7669Prima Systems FlexAir, Versions 2.3.38 and prior.
- CVE-2019-13024Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitrary system commands…
- CVE-2019-7670Prima Systems FlexAir, Versions 2.3.38 and prior.
- CVE-2019-12826A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress…
- CVE-2016-5236Cross-Site-Scripting (XSS) vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged…
- CVE-2016-5235A Cross Site Scripting (XSS) vulnerability in versions of F5 WebSafe Dashboard 3.9.x and earlier, aka F5 WebSafe Alert Server, allows an…
- CVE-2019-13131Super Micro SuperDoctor 5, when restrictions are not implemented in agent.cfg, allows remote attackers to execute arbitrary commands via…
- CVE-2019-4410IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting.IBM Business Automation Workflow
- CVE-2019-4386IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would…IBM DB2 for Linux, UNIX and Windows
- CVE-2019-4337IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4299IBM Robotic Process Automation with Automation Anywhere 11 could allow a local user to obtain highly sensitive information from log files…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4297IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection.IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4296IBM Robotic Process Automation with Automation Anywhere 11 information disclosure could allow a local user to obtain e-mail contents from…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4295IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker with specialized access to obtain highly sensitive from…IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-4237A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the…IBM InfoSphere Information Server
- CVE-2019-4102IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic…IBM DB2 for Linux, UNIX and Windows
- CVE-2019-4101IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 is vulnerable to a denial of service.IBM DB2 for Linux, UNIX and Windows
- CVE-2019-4057IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow malicious user with access to the…IBM DB2 for Linux, UNIX and Windows
- CVE-2019-13129On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port…
- CVE-2019-13128An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03.
- CVE-2019-13127An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products.mxgraph
- CVE-2019-12781An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3.django
- CVE-2019-13125HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation.
- CVE-2019-12970XSS was discovered in SquirrelMail through 1.4.22 and 1.5.x through 1.5.2.
- CVE-2019-13118In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid…nokogiri
- CVE-2019-13117In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in…nokogiri
- CVE-2019-13147In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a…
- CVE-2019-7276Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.