# CVEs published 2019-02-08

18 CVEs were published on February 8, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-7651](https://cve.now/CVE-2019-7651.md): EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks (no CVSS)
- [CVE-2018-9190](https://cve.now/CVE-2018-9190.md): A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via t (no CVSS, Fortinet FortiClientWindows)
- [CVE-2018-1352](https://cve.now/CVE-2018-1352.md): A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variab (no CVSS)
- [CVE-2019-1672](https://cve.now/CVE-2019-1672.md): Cisco Web Security Appliance Decryption Policy Bypass Vulnerability (CVSS 5.8, Cisco Web Security Appliance)
- [CVE-2019-1673](https://cve.now/CVE-2019-1673.md): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Identity Services Engine Software)
- [CVE-2019-1676](https://cve.now/CVE-2019-1676.md): Cisco Meeting Server SIP Processing Denial of Service Vulnerability (CVSS 6.8, Cisco Meeting Server)
- [CVE-2018-18364](https://cve.now/CVE-2018-18364.md): Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue (no CVSS, Symantec Ghost Solution Suite)
- [CVE-2018-20764](https://cve.now/CVE-2018-20764.md): A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. (no CVSS)
- [CVE-2019-7648](https://cve.now/CVE-2019-7648.md): controller/fetchpwd.php and controller/doAction.php in Hotels\_Server through 2018-11-05 rely on base64 in an attempt to protect password sto (no CVSS)
- [CVE-2019-7637](https://cve.now/CVE-2019-7637.md): SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL\_FillRect in video/SDL\_surface.c. (no CVSS)
- [CVE-2019-7639](https://cve.now/CVE-2019-7639.md): An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29. (no CVSS)
- [CVE-2019-6242](https://cve.now/CVE-2019-6242.md): Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. (no CVSS)
- [CVE-2019-7632](https://cve.now/CVE-2019-7632.md): LifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command Injection, as demonstrated by shell metachara (no CVSS)
- [CVE-2019-7401](https://cve.now/CVE-2019-7401.md): NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request (no CVSS)
- [CVE-2019-7628](https://cve.now/CVE-2019-7628.md): Pagure 5.2 leaks API keys by e-mailing them to users. (no CVSS)
- [CVE-2019-7635](https://cve.now/CVE-2019-7635.md): SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL\_blit\_1.c. (no CVSS)
- [CVE-2019-7636](https://cve.now/CVE-2019-7636.md): SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL\_GetRGB in video/SDL\_pixels.c. (no CVSS)
- [CVE-2019-7638](https://cve.now/CVE-2019-7638.md): SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL\_pixels.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.