# CVEs published 2019-08-20

197 CVEs were published on August 20, 2019: 1 critical, 27 high. Days are UTC.

- [CVE-2019-5036](https://cve.now/CVE-2019-5036.md): An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. (CVSS 7.5, Nest Labs)
- [CVE-2019-5035](https://cve.now/CVE-2019-5035.md): An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version… (CVSS 9.0, Nest Labs)
- [CVE-2019-5034](https://cve.now/CVE-2019-5034.md): An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. (CVSS 5.3, Nest Labs)
- [CVE-2019-10960](https://cve.now/CVE-2019-10960.md): Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. (no CVSS, Zebra Industrial Printers All Versions)
- [CVE-2019-5040](https://cve.now/CVE-2019-5040.md): An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam… (CVSS 8.2, Nest Labs)
- [CVE-2019-5037](https://cve.now/CVE-2019-5037.md): An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version… (CVSS 7.5, Nest Labs)
- [CVE-2019-5039](https://cve.now/CVE-2019-5039.md): An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2. (CVSS 7.5, Nest Labs)
- [CVE-2019-5038](https://cve.now/CVE-2019-5038.md): An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. (CVSS 7.5, Nest Labs)
- [CVE-2019-8106](https://cve.now/CVE-2019-8106.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8105](https://cve.now/CVE-2019-8105.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8104](https://cve.now/CVE-2019-8104.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8103](https://cve.now/CVE-2019-8103.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8102](https://cve.now/CVE-2019-8102.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8101](https://cve.now/CVE-2019-8101.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8100](https://cve.now/CVE-2019-8100.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8099](https://cve.now/CVE-2019-8099.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8098](https://cve.now/CVE-2019-8098.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-6143](https://cve.now/CVE-2019-6143.md): Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious… (no CVSS, Forcepoint Next Generation Firewall)
- [CVE-2019-8097](https://cve.now/CVE-2019-8097.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8096](https://cve.now/CVE-2019-8096.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8095](https://cve.now/CVE-2019-8095.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-10086](https://cve.now/CVE-2019-10086.md): In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access (no CVSS, Apache Commons Beanutils · commons-beanutils:commons-beanut…)
- [CVE-2019-8094](https://cve.now/CVE-2019-8094.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8077](https://cve.now/CVE-2019-8077.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8061](https://cve.now/CVE-2019-8061.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8060](https://cve.now/CVE-2019-8060.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8059](https://cve.now/CVE-2019-8059.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8058](https://cve.now/CVE-2019-8058.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8057](https://cve.now/CVE-2019-8057.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8056](https://cve.now/CVE-2019-8056.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8055](https://cve.now/CVE-2019-8055.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8054](https://cve.now/CVE-2019-8054.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8053](https://cve.now/CVE-2019-8053.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8052](https://cve.now/CVE-2019-8052.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8051](https://cve.now/CVE-2019-8051.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8050](https://cve.now/CVE-2019-8050.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8049](https://cve.now/CVE-2019-8049.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8048](https://cve.now/CVE-2019-8048.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8046](https://cve.now/CVE-2019-8046.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8047](https://cve.now/CVE-2019-8047.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8045](https://cve.now/CVE-2019-8045.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8044](https://cve.now/CVE-2019-8044.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8043](https://cve.now/CVE-2019-8043.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8042](https://cve.now/CVE-2019-8042.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8041](https://cve.now/CVE-2019-8041.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8040](https://cve.now/CVE-2019-8040.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8039](https://cve.now/CVE-2019-8039.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2127](https://cve.now/CVE-2019-2127.md): In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2019-8038](https://cve.now/CVE-2019-8038.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2137](https://cve.now/CVE-2019-2137.md): In the endCall() function of TelecomManager.java, there is a possible Denial of Service due to a missing permission check. (no CVSS, Android)
- [CVE-2019-8037](https://cve.now/CVE-2019-8037.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2136](https://cve.now/CVE-2019-2136.md): In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2019-8036](https://cve.now/CVE-2019-8036.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2135](https://cve.now/CVE-2019-2135.md): In Mfc\_Transceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-8034](https://cve.now/CVE-2019-8034.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2134](https://cve.now/CVE-2019-2134.md): In phFriNfc\_ExtnsTransceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-8035](https://cve.now/CVE-2019-8035.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8033](https://cve.now/CVE-2019-8033.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8032](https://cve.now/CVE-2019-8032.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2133](https://cve.now/CVE-2019-2133.md): In Mfc\_Transceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-8031](https://cve.now/CVE-2019-8031.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2132](https://cve.now/CVE-2019-2132.md): It is possible to overlay the VPN dialog by a malicious application. (no CVSS, Android)
- [CVE-2019-8030](https://cve.now/CVE-2019-8030.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2131](https://cve.now/CVE-2019-2131.md): An application with overlay permission can display overlays on top of settings UI. (no CVSS, Android)
- [CVE-2019-8028](https://cve.now/CVE-2019-8028.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2130](https://cve.now/CVE-2019-2130.md): In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. (no CVSS, Android)
- [CVE-2019-8026](https://cve.now/CVE-2019-8026.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2129](https://cve.now/CVE-2019-2129.md): In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-8029](https://cve.now/CVE-2019-8029.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2128](https://cve.now/CVE-2019-2128.md): In ACELP\_4t64\_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2126](https://cve.now/CVE-2019-2126.md): In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. (no CVSS, Android)
- [CVE-2019-2125](https://cve.now/CVE-2019-2125.md): In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. (no CVSS, Android)
- [CVE-2019-8027](https://cve.now/CVE-2019-8027.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2122](https://cve.now/CVE-2019-2122.md): In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case… (no CVSS, Android)
- [CVE-2019-8025](https://cve.now/CVE-2019-8025.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8024](https://cve.now/CVE-2019-8024.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2121](https://cve.now/CVE-2019-2121.md): In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. (no CVSS, Android)
- [CVE-2019-8021](https://cve.now/CVE-2019-8021.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8022](https://cve.now/CVE-2019-8022.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2120](https://cve.now/CVE-2019-2120.md): In OatFileAssistant::GenerateOatFile of oat\_file\_assistant.cc, there is a possible file corruption issue due to an insecure default value. (no CVSS, Android)
- [CVE-2019-8020](https://cve.now/CVE-2019-8020.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8023](https://cve.now/CVE-2019-8023.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8019](https://cve.now/CVE-2019-8019.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8018](https://cve.now/CVE-2019-8018.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8017](https://cve.now/CVE-2019-8017.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8014](https://cve.now/CVE-2019-8014.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8015](https://cve.now/CVE-2019-8015.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8016](https://cve.now/CVE-2019-8016.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8013](https://cve.now/CVE-2019-8013.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8012](https://cve.now/CVE-2019-8012.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8011](https://cve.now/CVE-2019-8011.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8010](https://cve.now/CVE-2019-8010.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8009](https://cve.now/CVE-2019-8009.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8008](https://cve.now/CVE-2019-8008.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-13520](https://cve.now/CVE-2019-13520.md): Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. (no CVSS, Alpha5 Smart Loader)
- [CVE-2019-8007](https://cve.now/CVE-2019-8007.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8006](https://cve.now/CVE-2019-8006.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8005](https://cve.now/CVE-2019-8005.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8004](https://cve.now/CVE-2019-8004.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8003](https://cve.now/CVE-2019-8003.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8002](https://cve.now/CVE-2019-8002.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-11924](https://cve.now/CVE-2019-11924.md): A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received… (no CVSS, Facebook fizz)
- [CVE-2019-7965](https://cve.now/CVE-2019-7965.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and… (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-4482](https://cve.now/CVE-2019-4482.md): IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Emptoris Spend Analysis)
- [CVE-2019-4437](https://cve.now/CVE-2019-4437.md): IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. (CVSS 8.2, IBM API Connect)
- [CVE-2019-4424](https://cve.now/CVE-2019-4424.md): IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection… (CVSS 7.1, IBM Business Automation Workflow)
- [CVE-2019-4340](https://cve.now/CVE-2019-4340.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing… (CVSS 7.1, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4338](https://cve.now/CVE-2019-4338.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or… (CVSS 7.5, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4167](https://cve.now/CVE-2019-4167.md): IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… (CVSS 4.3, IBM StoredIQ)
- [CVE-2019-4120](https://cve.now/CVE-2019-4120.md): IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Private)
- [CVE-2019-4253](https://cve.now/CVE-2019-4253.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and… (CVSS 7.8, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1796](https://cve.now/CVE-2018-1796.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. (CVSS 7.8, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1636](https://cve.now/CVE-2018-1636.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1635](https://cve.now/CVE-2018-1635.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1634](https://cve.now/CVE-2018-1634.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1633](https://cve.now/CVE-2018-1633.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1632](https://cve.now/CVE-2018-1632.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1631](https://cve.now/CVE-2018-1631.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1630](https://cve.now/CVE-2018-1630.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root… (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2019-3753](https://cve.now/CVE-2019-3753.md): Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text… (CVSS 7.2, Dell EMC PowerConnect)
- [CVE-2019-4485](https://cve.now/CVE-2019-4485.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through… (CVSS 4.3, IBM Contract Management · IBM Emptoris Spend Analysis +1)
- [CVE-2019-4484](https://cve.now/CVE-2019-4484.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through… (CVSS 4.3, IBM Contract Management · IBM Emptoris Spend Analysis +1)
- [CVE-2019-4483](https://cve.now/CVE-2019-4483.md): IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. (CVSS 7.6, IBM Contract Management · IBM Emptoris Spend Analysis)
- [CVE-2019-4481](https://cve.now/CVE-2019-4481.md): IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. (CVSS 7.6, IBM Emptoris Spend Analysis · IBM Contract Management)
- [CVE-2019-4460](https://cve.now/CVE-2019-4460.md): IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. (CVSS 4.3, IBM API Connect)
- [CVE-2019-4433](https://cve.now/CVE-2019-4433.md): IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity… (CVSS 7.1, IBM InfoSphere Identity Insight · IBM InfoSphere Global Nam…)
- [CVE-2019-4425](https://cve.now/CVE-2019-4425.md): IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another… (CVSS 5.7, IBM Business Automation Workflow)
- [CVE-2019-4420](https://cve.now/CVE-2019-4420.md): IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could… (CVSS 6.2, IBM Intelligent Operations Center)
- [CVE-2019-4419](https://cve.now/CVE-2019-4419.md): IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML… (CVSS 7.1, IBM Intelligent Operations Center)
- [CVE-2019-4402](https://cve.now/CVE-2019-4402.md): IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an… (CVSS 8.6, IBM API Connect)
- [CVE-2019-4310](https://cve.now/CVE-2019-4310.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to… (CVSS 7.5, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4308](https://cve.now/CVE-2019-4308.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through… (CVSS 4.3, IBM Emptoris Sourcing · IBM Contract Management +1)
- [CVE-2019-4294](https://cve.now/CVE-2019-4294.md): IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0… (CVSS 8.4, IBM MQ Appliance · IBM DataPower Gateway)
- [CVE-2019-4117](https://cve.now/CVE-2019-4117.md): IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… (CVSS 4.3, IBM Cloud Private)
- [CVE-2019-4049](https://cve.now/CVE-2019-4049.md): IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space… (CVSS 6.2, IBM MQ)
- [CVE-2019-7594](https://cve.now/CVE-2019-7594.md): Metasys use of hardcoded RC2 key (CVSS 6.8, Johnson Controls Metasys versions prior to)
- [CVE-2019-7593](https://cve.now/CVE-2019-7593.md): Metasys use of shared RSA key pairs (CVSS 6.8, Johnson Controls Metasys versions prior to)
- [CVE-2019-10745](https://cve.now/CVE-2019-10745.md): assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. (no CVSS, assign-deep)
- [CVE-2019-3968](https://cve.now/CVE-2019-3968.md): In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface… (no CVSS, OpenEMR)
- [CVE-2019-3967](https://cve.now/CVE-2019-3967.md): In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers… (no CVSS, OpenEMR)
- [CVE-2019-3966](https://cve.now/CVE-2019-3966.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the foreign\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3965](https://cve.now/CVE-2019-3965.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the document\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3964](https://cve.now/CVE-2019-3964.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3963](https://cve.now/CVE-2019-3963.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-11209](https://cve.now/CVE-2019-11209.md): TIBCO FTL Escalation Of Privileges for Realm Configuration (CVSS 8.8, TIBCO Software TIBCO FTL Community Edition · TIBCO Softw… +1)
- [CVE-2018-18056](https://cve.now/CVE-2018-18056.md): An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. (no CVSS)
- [CVE-2017-18533](https://cve.now/CVE-2017-18533.md): The rimons-twitter-widget plugin before 1.3 for WordPress has XSS. (no CVSS)
- [CVE-2017-18532](https://cve.now/CVE-2017-18532.md): The realty plugin before 1.1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18531](https://cve.now/CVE-2017-18531.md): The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288. (no CVSS)
- [CVE-2017-18530](https://cve.now/CVE-2017-18530.md): The rating-bws plugin before 0.2 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18529](https://cve.now/CVE-2017-18529.md): The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18528](https://cve.now/CVE-2017-18528.md): The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2015-9320](https://cve.now/CVE-2015-9320.md): The option-tree plugin before 2.5.4 for WordPress has XSS related to add\_query\_arg. (no CVSS)
- [CVE-2017-18527](https://cve.now/CVE-2017-18527.md): The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2016-10895](https://cve.now/CVE-2016-10895.md): The option-tree plugin before 2.6.0 for WordPress has XSS via an add\_list\_item or add\_social\_links AJAX request. (no CVSS)
- [CVE-2017-18526](https://cve.now/CVE-2017-18526.md): The moreads-se plugin before 1.4.7 for WordPress has XSS. (no CVSS)
- [CVE-2015-9319](https://cve.now/CVE-2015-9319.md): The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser. (no CVSS)
- [CVE-2017-18524](https://cve.now/CVE-2017-18524.md): The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18519](https://cve.now/CVE-2017-18519.md): The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages. (no CVSS)
- [CVE-2017-18523](https://cve.now/CVE-2017-18523.md): The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book. (no CVSS)
- [CVE-2017-18522](https://cve.now/CVE-2017-18522.md): The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. (no CVSS)
- [CVE-2016-10892](https://cve.now/CVE-2016-10892.md): The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18566](https://cve.now/CVE-2017-18566.md): The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18518](https://cve.now/CVE-2017-18518.md): The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2018-20978](https://cve.now/CVE-2018-20978.md): The wp-all-import plugin before 3.4.7 for WordPress has XSS. (no CVSS)
- [CVE-2017-18567](https://cve.now/CVE-2017-18567.md): The wp-all-import plugin before 3.4.6 for WordPress has XSS. (no CVSS)
- [CVE-2015-9329](https://cve.now/CVE-2015-9329.md): The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. (no CVSS)
- [CVE-2015-9330](https://cve.now/CVE-2015-9330.md): The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection. (no CVSS)
- [CVE-2015-9331](https://cve.now/CVE-2015-9331.md): The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit. (no CVSS)
- [CVE-2016-10913](https://cve.now/CVE-2016-10913.md): The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. (no CVSS)
- [CVE-2016-10914](https://cve.now/CVE-2016-10914.md): The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file. (no CVSS)
- [CVE-2019-15238](https://cve.now/CVE-2019-15238.md): The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. (no CVSS)
- [CVE-2017-18568](https://cve.now/CVE-2017-18568.md): The my-wp-translate plugin before 1.0.4 for WordPress has XSS. (no CVSS)
- [CVE-2017-18569](https://cve.now/CVE-2017-18569.md): The my-wp-translate plugin before 1.0.4 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10915](https://cve.now/CVE-2016-10915.md): The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18520](https://cve.now/CVE-2017-18520.md): The democracy-poll plugin before 5.4 for WordPress has XSS via update\_l10n in admin/class.DemAdminInit.php. (no CVSS)
- [CVE-2015-9332](https://cve.now/CVE-2015-9332.md): The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI. (no CVSS)
- [CVE-2011-5328](https://cve.now/CVE-2011-5328.md): The user-access-manager plugin before 1.2 for WordPress has CSRF. (no CVSS)
- [CVE-2014-10381](https://cve.now/CVE-2014-10381.md): The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. (no CVSS)
- [CVE-2015-9318](https://cve.now/CVE-2015-9318.md): The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies. (no CVSS)
- [CVE-2017-18517](https://cve.now/CVE-2017-18517.md): The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2015-9317](https://cve.now/CVE-2015-9317.md): The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. (no CVSS)
- [CVE-2019-14687](https://cve.now/CVE-2019-14687.md): A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an… (no CVSS, Trend Micro Password Manager)
- [CVE-2019-14684](https://cve.now/CVE-2019-14684.md): A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an… (no CVSS, Trend Micro Password Manager)
- [CVE-2019-15082](https://cve.now/CVE-2019-15082.md): The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. (no CVSS)
- [CVE-2019-15233](https://cve.now/CVE-2019-15233.md): The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator… (no CVSS)
- [CVE-2019-14430](https://cve.now/CVE-2019-14430.md): plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection. (no CVSS)
- [CVE-2019-15291](https://cve.now/CVE-2019-15291.md): An issue was discovered in the Linux kernel through 5.2.9. (no CVSS)
- [CVE-2019-11806](https://cve.now/CVE-2019-11806.md): OX App Suite 7.10.1 and earlier has Insecure Permissions. (no CVSS)
- [CVE-2019-11522](https://cve.now/CVE-2019-11522.md): OX App Suite 7.10.0 to 7.10.2 allows XSS. (no CVSS)
- [CVE-2019-11521](https://cve.now/CVE-2019-11521.md): OX App Suite 7.10.1 allows Content Spoofing. (no CVSS)
- [CVE-2018-20975](https://cve.now/CVE-2018-20975.md): Fat Free CRM before 0.18.1 has XSS in the tags\_helper in app/helpers/tags\_helper.rb. (no CVSS, fat\_free\_crm)
- [CVE-2019-12889](https://cve.now/CVE-2019-12889.md): An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. (no CVSS)
- [CVE-2019-15239](https://cve.now/CVE-2019-15239.md): In the Linux kernel, a certain net/ipv4/tcp\_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to… (no CVSS)
- [CVE-2019-15227](https://cve.now/CVE-2019-15227.md): FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. (no CVSS)
- [CVE-2019-15237](https://cve.now/CVE-2019-15237.md): Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. (no CVSS)
- [CVE-2016-10893](https://cve.now/CVE-2016-10893.md): The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.