CVEs published February 7, 2019
35 CVEs were published on February 7, 2019: 1 critical, 2 high.
- Published
- 35
- Critical
- 1
- High
- 2
- Medium
- 9
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Cisco TelePresence Management Suite
- 2
- Apache Software Foundation Apache Guacamole · org.apache.gu…
- 1
- Apache Software Foundation Apache Hadoop · org.apache.hadoo…
- 1
- Cisco Aironet Active Sensor
- 1
- Cisco Firepower Management Center
- 1
- Cisco Meeting Server
- 1
- Cisco TelePresence Conductor · Cisco Expressway Series +1
- 1
- Cisco Unified Contact Center Express
- 1
- Cisco Webex Business Suite
- 1
- Cisco WebEx Meetings for Android
- 1
Critical 1
High 2
Medium, low and unrated 32
- CVE-2019-6139Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001.Forcepoint . Forcepoint User ID (FUID) server
- CVE-2018-1296In Apache Hadoop 3.0.0-alpha1 to 3.0.0, 2.9.0, 2.8.0 to 2.8.3, and 2.5.0 to 2.7.5, HDFS exposes extended attribute key/value pairs during liApache Software Foundation Apache Hadoop · org.apache.hadoo…
- CVE-2018-1340Prior to 1.0.0, Apache Guacamole used a cookie for client-side storage of the user's session token.Apache Software Foundation Apache Guacamole · org.apache.gu…
- CVE-2019-1660Cisco TelePresence Management Suite Simple Object Access Protocol VulnerabilityCisco TelePresence Management Suite
- CVE-2019-1661Cisco TelePresence Management Suite Cross-Site Scripting VulnerabilityCisco TelePresence Management Suite
- CVE-2019-1670Cisco Unified Intelligence Center Software Cross-Site Scripting VulnerabilityCisco Unified Contact Center Express
- CVE-2019-1671Cisco Firepower Management Center Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2019-1678Cisco Meeting Server Denial of Service VulnerabilityCisco Meeting Server
- CVE-2019-1679Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery VulnerabilityCisco TelePresence Conductor · Cisco Expressway Series +1
- CVE-2019-1680Cisco Webex Business Suite Content Injection VulnerabilityCisco Webex Business Suite
- CVE-2019-1677Cisco Webex Meetings for Android Cross-Site Scripting VulnerabilityCisco WebEx Meetings for Android
- CVE-2019-7587Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled
- CVE-2019-7581The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafte
- CVE-2019-7582The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file tha
- CVE-2019-7585An issue was discovered in Waimai Super Cms 20150505.
- CVE-2019-7580ThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal/admin_category/addpost.html alias parameter because
- CVE-2018-1666IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, anIBM DataPower Gateway
- CVE-2019-7535index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path discl
- CVE-2019-7559In btor2parser/btor2parser.c in Boolector Btor2Tools before 2019-01-15, opening a specially crafted input file leads to an out of bounds wri
- CVE-2019-7560In parser/btorsmt2.c in Boolector 3.0.0, opening a specially crafted input file leads to a use after free in get_failed_assumptions or btor_pyboolector
- CVE-2019-7566CSZ CMS 1.1.8 has CSRF via admin/users/new/add.
- CVE-2019-7567An issue was discovered in Waimai Super Cms 20150505.
- CVE-2019-7568An issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get data via the cate parameter in an index.php
- CVE-2019-7569An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update).
- CVE-2019-7570A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI.
- CVE-2019-7572SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
- CVE-2019-7573SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (i
- CVE-2019-7574SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.
- CVE-2019-7575SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
- CVE-2019-7576SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (o
- CVE-2019-7577SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
- CVE-2019-7578SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.