# CVEs published 2019-08-14

173 CVEs were published on August 14, 2019: 10 critical, 43 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-15062](https://cve.now/CVE-2019-15062.md): An issue was discovered in Dolibarr 11.0.0-alpha. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-14427](https://cve.now/CVE-2019-14427.md): XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted… (no CVSS)
- [CVE-2019-1228](https://cve.now/CVE-2019-1228.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1229](https://cve.now/CVE-2019-1229.md): Dynamics On-Premise Elevation of Privilege Vulnerability (no CVSS, Microsoft Dynamics 365 (on-premises))
- [CVE-2019-1258](https://cve.now/CVE-2019-1258.md): Azure Active Directory Authentication Library Elevation of Privilege Vulnerability (no CVSS, Microsoft ADAL.NET · Microsoft Nuget +1)
- [CVE-2019-1196](https://cve.now/CVE-2019-1196.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1197](https://cve.now/CVE-2019-1197.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1198](https://cve.now/CVE-2019-1198.md): Microsoft Windows Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2019-1199](https://cve.now/CVE-2019-1199.md): Microsoft Outlook Memory Corruption Vulnerability (no CVSS, Microsoft Office)
- [CVE-2019-1200](https://cve.now/CVE-2019-1200.md): Microsoft Outlook Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft Outlook)
- [CVE-2019-1201](https://cve.now/CVE-2019-1201.md): Microsoft Word Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1202](https://cve.now/CVE-2019-1202.md): SharePoint Information Disclosure Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1203](https://cve.now/CVE-2019-1203.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2019-1204](https://cve.now/CVE-2019-1204.md): Microsoft Outlook Elevation of Privilege Vulnerability (no CVSS, Microsoft Office · Microsoft Outlook)
- [CVE-2019-1205](https://cve.now/CVE-2019-1205.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 9.8, Microsoft SharePoint Server · Microsoft Office)
- [CVE-2019-1206](https://cve.now/CVE-2019-1206.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server, · Microsoft Windows Server)
- [CVE-2019-1211](https://cve.now/CVE-2019-1211.md): Git for Visual Studio Elevation of Privilege Vulnerability (no CVSS, Microsoft Visual Studio)
- [CVE-2019-1212](https://cve.now/CVE-2019-1212.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1213](https://cve.now/CVE-2019-1213.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 Service Pack · Microsoft Wind…)
- [CVE-2019-1218](https://cve.now/CVE-2019-1218.md): Outlook iOS Spoofing Vulnerability (no CVSS, Microsoft Outlook for iOS)
- [CVE-2019-1222](https://cve.now/CVE-2019-1222.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1223](https://cve.now/CVE-2019-1223.md): Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1224](https://cve.now/CVE-2019-1224.md): Remote Desktop Protocol Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1225](https://cve.now/CVE-2019-1225.md): Remote Desktop Protocol Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1226](https://cve.now/CVE-2019-1226.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1227](https://cve.now/CVE-2019-1227.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1175](https://cve.now/CVE-2019-1175.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1176](https://cve.now/CVE-2019-1176.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1177](https://cve.now/CVE-2019-1177.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1178](https://cve.now/CVE-2019-1178.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1179](https://cve.now/CVE-2019-1179.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1180](https://cve.now/CVE-2019-1180.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1181](https://cve.now/CVE-2019-1181.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows · Microsoft Remote Desktop for Android +2)
- [CVE-2019-1182](https://cve.now/CVE-2019-1182.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows · Microsoft Remote Desktop for Android +2)
- [CVE-2019-1183](https://cve.now/CVE-2019-1183.md): Windows VBScript Engine Remote Code Execution Vulnerability (no CVSS, Microsoft None Available)
- [CVE-2019-1184](https://cve.now/CVE-2019-1184.md): Windows Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2019-1185](https://cve.now/CVE-2019-1185.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2019-1186](https://cve.now/CVE-2019-1186.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1187](https://cve.now/CVE-2019-1187.md): XmlLite Runtime Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1188](https://cve.now/CVE-2019-1188.md): LNK Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1190](https://cve.now/CVE-2019-1190.md): Windows Image Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1192](https://cve.now/CVE-2019-1192.md): Microsoft Browsers Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1193](https://cve.now/CVE-2019-1193.md): Microsoft Browser Memory Corruption Vulnerability (CVSS 6.4, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1194](https://cve.now/CVE-2019-1194.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1195](https://cve.now/CVE-2019-1195.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1151](https://cve.now/CVE-2019-1151.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1152](https://cve.now/CVE-2019-1152.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1153](https://cve.now/CVE-2019-1153.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1154](https://cve.now/CVE-2019-1154.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1155](https://cve.now/CVE-2019-1155.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows · Microsoft Office)
- [CVE-2019-1156](https://cve.now/CVE-2019-1156.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1157](https://cve.now/CVE-2019-1157.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1158](https://cve.now/CVE-2019-1158.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1159](https://cve.now/CVE-2019-1159.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1161](https://cve.now/CVE-2019-1161.md): Microsoft Defender Elevation of Privilege Vulnerability (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +4)
- [CVE-2019-1162](https://cve.now/CVE-2019-1162.md): Windows ALPC Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1163](https://cve.now/CVE-2019-1163.md): Windows File Signature Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1164](https://cve.now/CVE-2019-1164.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1168](https://cve.now/CVE-2019-1168.md): Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1169](https://cve.now/CVE-2019-1169.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1170](https://cve.now/CVE-2019-1170.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2019-1171](https://cve.now/CVE-2019-1171.md): SymCrypt Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2019-1172](https://cve.now/CVE-2019-1172.md): Windows Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2019-1173](https://cve.now/CVE-2019-1173.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1174](https://cve.now/CVE-2019-1174.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-0720](https://cve.now/CVE-2019-0720.md): Hyper-V Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2019-0723](https://cve.now/CVE-2019-0723.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0736](https://cve.now/CVE-2019-0736.md): Windows DHCP Client Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-0965](https://cve.now/CVE-2019-0965.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.6, Microsoft Windows)
- [CVE-2019-1030](https://cve.now/CVE-2019-1030.md): Microsoft Edge based on Edge HTML Information Disclosure Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2019-1057](https://cve.now/CVE-2019-1057.md): MS XML Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1078](https://cve.now/CVE-2019-1078.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1131](https://cve.now/CVE-2019-1131.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1133](https://cve.now/CVE-2019-1133.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1139](https://cve.now/CVE-2019-1139.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1140](https://cve.now/CVE-2019-1140.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 8.8, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1141](https://cve.now/CVE-2019-1141.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1143](https://cve.now/CVE-2019-1143.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1144](https://cve.now/CVE-2019-1144.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1145](https://cve.now/CVE-2019-1145.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1146](https://cve.now/CVE-2019-1146.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1147](https://cve.now/CVE-2019-1147.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1148](https://cve.now/CVE-2019-1148.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1149](https://cve.now/CVE-2019-1149.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1150](https://cve.now/CVE-2019-1150.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-0714](https://cve.now/CVE-2019-0714.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0715](https://cve.now/CVE-2019-0715.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0716](https://cve.now/CVE-2019-0716.md): Windows Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0717](https://cve.now/CVE-2019-0717.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0718](https://cve.now/CVE-2019-0718.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-14527](https://cve.now/CVE-2019-14527.md): An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. (no CVSS)
- [CVE-2019-14526](https://cve.now/CVE-2019-14526.md): An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. (no CVSS)
- [CVE-2019-12104](https://cve.now/CVE-2019-12104.md): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication… (no CVSS)
- [CVE-2019-15058](https://cve.now/CVE-2019-15058.md): stb\_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi\_\_tga\_load, leading to Information Disclosure or… (no CVSS)
- [CVE-2019-12103](https://cve.now/CVE-2019-12103.md): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command… (no CVSS)
- [CVE-2019-13030](https://cve.now/CVE-2019-13030.md): eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the… (no CVSS)
- [CVE-2019-9585](https://cve.now/CVE-2019-9585.md): eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.\*\*\*Metadata related… (no CVSS)
- [CVE-2019-9584](https://cve.now/CVE-2019-9584.md): eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile… (no CVSS)
- [CVE-2019-14216](https://cve.now/CVE-2019-14216.md): An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. (no CVSS)
- [CVE-2019-9582](https://cve.now/CVE-2019-9582.md): eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. (no CVSS)
- [CVE-2019-9583](https://cve.now/CVE-2019-9583.md): eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. (no CVSS)
- [CVE-2019-15052](https://cve.now/CVE-2019-15052.md): The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. (CVSS 9.8)
- [CVE-2018-19386](https://cve.now/CVE-2018-19386.md): SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page… (no CVSS)
- [CVE-2019-12262](https://cve.now/CVE-2019-12262.md): Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. (no CVSS)
- [CVE-2019-9506](https://cve.now/CVE-2019-9506.md): Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation (CVSS 7.6, Bluetooth BR/EDR)
- [CVE-2019-3637](https://cve.now/CVE-2019-3637.md): Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209 (CVSS 4.1, McAfee FRP)
- [CVE-2019-3639](https://cve.now/CVE-2019-3639.md): MWG UI: Cross-Frame Scripting vulnerability (CVSS 7.1, McAfee Web Gateway)
- [CVE-2019-3635](https://cve.now/CVE-2019-3635.md): MWG Proxy: Cross-Frame Scripting vulnerability (CVSS 4.3, McAfee Web Gateway)
- [CVE-2019-10201](https://cve.now/CVE-2019-10201.md): It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. (CVSS 8.1, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2019-10199](https://cve.now/CVE-2019-10199.md): It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. (CVSS 4.6, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2019-15053](https://cve.now/CVE-2019-15053.md): The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection… (no CVSS)
- [CVE-2019-11652](https://cve.now/CVE-2019-11652.md): A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6… (no CVSS, Micro Focus Self Service Password Reset)
- [CVE-2019-14974](https://cve.now/CVE-2019-14974.md): SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop\_url= XSS. (no CVSS)
- [CVE-2017-18510](https://cve.now/CVE-2017-18510.md): The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions. (no CVSS)
- [CVE-2017-18511](https://cve.now/CVE-2017-18511.md): The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10880](https://cve.now/CVE-2016-10880.md): The google-document-embedder plugin before 2.6.1 for WordPress has XSS. (no CVSS)
- [CVE-2016-10881](https://cve.now/CVE-2016-10881.md): The google-document-embedder plugin before 2.6.2 for WordPress has XSS. (no CVSS)
- [CVE-2016-10882](https://cve.now/CVE-2016-10882.md): The google-document-embedder plugin before 2.6.2 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18512](https://cve.now/CVE-2017-18512.md): The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18513](https://cve.now/CVE-2017-18513.md): The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface. (no CVSS)
- [CVE-2016-10883](https://cve.now/CVE-2016-10883.md): The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users. (no CVSS)
- [CVE-2013-7476](https://cve.now/CVE-2013-7476.md): The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. (no CVSS)
- [CVE-2016-10884](https://cve.now/CVE-2016-10884.md): The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. (no CVSS)
- [CVE-2016-10885](https://cve.now/CVE-2016-10885.md): The wp-editor plugin before 1.2.6 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10886](https://cve.now/CVE-2016-10886.md): The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. (no CVSS)
- [CVE-2015-9307](https://cve.now/CVE-2015-9307.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature. (no CVSS)
- [CVE-2015-9308](https://cve.now/CVE-2015-9308.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature. (no CVSS)
- [CVE-2015-9309](https://cve.now/CVE-2015-9309.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature. (no CVSS)
- [CVE-2018-20967](https://cve.now/CVE-2018-20967.md): The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF. (no CVSS)
- [CVE-2018-20968](https://cve.now/CVE-2018-20968.md): The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10887](https://cve.now/CVE-2016-10887.md): The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2016-10888](https://cve.now/CVE-2016-10888.md): The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2015-9310](https://cve.now/CVE-2015-9310.md): The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2019-15047](https://cve.now/CVE-2019-15047.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15048](https://cve.now/CVE-2019-15048.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15049](https://cve.now/CVE-2019-15049.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15050](https://cve.now/CVE-2019-15050.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2015-9311](https://cve.now/CVE-2015-9311.md): The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. (no CVSS)
- [CVE-2019-0349](https://cve.now/CVE-2019-0349.md): SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21… (no CVSS, SAP SE SAP Kernel)
- [CVE-2015-9312](https://cve.now/CVE-2015-9312.md): The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. (no CVSS)
- [CVE-2015-9313](https://cve.now/CVE-2015-9313.md): The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. (no CVSS)
- [CVE-2015-9314](https://cve.now/CVE-2015-9314.md): The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. (no CVSS)
- [CVE-2019-7931](https://cve.now/CVE-2019-7931.md): Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Premiere Pro CC)
- [CVE-2015-9315](https://cve.now/CVE-2015-9315.md): The newstatpress plugin before 1.0.1 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-15046](https://cve.now/CVE-2019-15046.md): Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS)… (no CVSS)
- [CVE-2016-10889](https://cve.now/CVE-2016-10889.md): The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. (no CVSS)
- [CVE-2019-15025](https://cve.now/CVE-2019-15025.md): The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page. (no CVSS)
- [CVE-2017-18514](https://cve.now/CVE-2017-18514.md): The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-7961](https://cve.now/CVE-2019-7961.md): Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Prelude CC)
- [CVE-2015-9316](https://cve.now/CVE-2015-9316.md): The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc\_wppolls\_ajax\_request via… (no CVSS)
- [CVE-2019-7870](https://cve.now/CVE-2019-7870.md): Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Character Animator)
- [CVE-2019-8062](https://cve.now/CVE-2019-8062.md): Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. (CVSS 7.8, Adobe After Effects)
- [CVE-2019-0351](https://cve.now/CVE-2019-0351.md): A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40… (no CVSS, SAP SE SAP NetWeaver UDDI Server)
- [CVE-2019-0348](https://cve.now/CVE-2019-0348.md): SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection… (no CVSS, SAP SE SAP Business Objects Business Intelligence Platform)
- [CVE-2019-0346](https://cve.now/CVE-2019-0346.md): Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to… (no CVSS, SAP SE SAP Business Objects Business Intelligence Platform)
- [CVE-2019-0345](https://cve.now/CVE-2019-0345.md): A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview)… (no CVSS, SAP SE SAP NetWeaver Application Server for Java)
- [CVE-2019-0344](https://cve.now/CVE-2019-0344.md): Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possi (CVSS 9.8, KEV, SAP SE SAP Commerce Cloud)
- [CVE-2019-0343](https://cve.now/CVE-2019-0343.md): SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user… (no CVSS, SAP SE SAP Commerce Cloud)
- [CVE-2019-0340](https://cve.now/CVE-2019-0340.md): The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML… (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0341](https://cve.now/CVE-2019-0341.md): The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0338](https://cve.now/CVE-2019-0338.md): During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not… (no CVSS, SAP SE SAP Gateway)
- [CVE-2019-0334](https://cve.now/CVE-2019-0334.md): When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0333](https://cve.now/CVE-2019-0333.md): In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0337](https://cve.now/CVE-2019-0337.md): Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode… (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-0335](https://cve.now/CVE-2019-0335.md): Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0332](https://cve.now/CVE-2019-0332.md): SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0331](https://cve.now/CVE-2019-0331.md): Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2017-18515](https://cve.now/CVE-2017-18515.md): The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-14975](https://cve.now/CVE-2019-14975.md): Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz\_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check… (no CVSS)
- [CVE-2019-15027](https://cve.now/CVE-2019-15027.md): The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute… (no CVSS)
- [CVE-2019-14973](https://cve.now/CVE-2019-14973.md): \_TIFFCheckMalloc and \_TIFFCheckRealloc in tif\_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on… (no CVSS)
- [CVE-2014-10375](https://cve.now/CVE-2014-10375.md): handle\_messages in eXtl\_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header. (no CVSS)
- [CVE-2019-15028](https://cve.now/CVE-2019-15028.md): In Joomla! before 3.9.11, inadequate checks in com\_contact could allow mail submission in disabled forms. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.