CVEs published February 13, 2019
42 CVEs were published on February 13, 2019: 0 critical, 1 high.
- Published
- 42
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- Atlassian Jira
- 3
- ICS-CERT WECON LeviStudioU
- 3
- Nvidia Android
- 3
- ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to
- 2
- OpenAM Consortium OpenAM
- 2
- Atlassian Confluence Server · Atlassian Confluence Data Cen…
- 1
- Atlassian Crowd
- 1
- Check Point Software Technologies WinRAR
- 1
- Cloud Foundry CredHub CLI
- 1
- D-CIRCLE POWER EGG
- 1
High 1
Medium, low and unrated 41
- CVE-2018-6267NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that Nvidia Android
- CVE-2018-6268NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial oNvidia Android
- CVE-2018-6271NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not propeNvidia Android
- CVE-2018-19008The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor whICS-CERT ABB CP400 Panel Builder TextEditor
- CVE-2019-8337In msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate-verification results are not properly checked.
- CVE-2018-12409The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scrip
- CVE-2018-0696OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the secOpenAM Consortium OpenAM
- CVE-2018-13403The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from verAtlassian Jira
- CVE-2018-13404The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 Atlassian Jira
- CVE-2018-16189Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privilegMicco Self-Extracting Archives created by UNLHA32.DLL
- CVE-2018-16190Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and Micco UNARJ32.DLL for Win32, LHMelting for Win32, and LML…
- CVE-2018-20232The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to injAtlassian Jira
- CVE-2018-20237Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word exporAtlassian Confluence Server · Atlassian Confluence Data Cen…
- CVE-2018-20238Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authentAtlassian Crowd
- CVE-2019-5909License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.0Yokogawa Electric License Manager Service of YOKOGAWA produ…
- CVE-2019-5910Directory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote attackers to read arbitrary files via unspecifieHOUSE GATE App for iOS
- CVE-2019-5911Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gMicco The installer of UNLHA32.DLL
- CVE-2019-5912Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to Micco The installer of UNARJ32.DLL
- CVE-2019-5913Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain Micco The installer of LHMelting
- CVE-2019-5914V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to NTT DOCOMO V20 PRO L-01J
- CVE-2019-5915Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conducOpenAM Consortium OpenAM
- CVE-2019-5916Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2D-CIRCLE POWER EGG
- CVE-2019-3610True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerabilityMcAfee True Key
- CVE-2019-3782CredHub CLI writes environment variable credentials to diskCloud Foundry CredHub CLI
- CVE-2019-8334An issue was discovered in SchoolCMS 2.3.1.
- CVE-2019-8335An issue was discovered in SchoolCMS 2.3.1.
- CVE-2018-20164An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0.uap-core
- CVE-2019-8312An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8313An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8314An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8315An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8316An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8317An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8318An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2019-8319An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
- CVE-2018-20253In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive Check Point Software Technologies WinRAR
- CVE-2019-6543AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to
- CVE-2019-6545AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to
- CVE-2019-6537Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings witICS-CERT WECON LeviStudioU
- CVE-2019-6539Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbitICS-CERT WECON LeviStudioU
- CVE-2019-6541A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code executioICS-CERT WECON LeviStudioU