# CVEs published 2019-02-13

42 CVEs were published on February 13, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2018-6267](https://cve.now/CVE-2018-6267.md): NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that (no CVSS, Nvidia Android)
- [CVE-2018-6268](https://cve.now/CVE-2018-6268.md): NVIDIA Tegra library contains a vulnerability in libnvmmlite\_video.so, where referencing memory after it has been freed may lead to denial o (no CVSS, Nvidia Android)
- [CVE-2018-6271](https://cve.now/CVE-2018-6271.md): NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not prope (no CVSS, Nvidia Android)
- [CVE-2018-19008](https://cve.now/CVE-2018-19008.md): The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a vulnerability in the file parser of the Text Editor wh (no CVSS, ICS-CERT ABB CP400 Panel Builder TextEditor)
- [CVE-2019-8337](https://cve.now/CVE-2019-8337.md): In msmtp 1.8.2 and mpop 1.4.3, when tls\_trust\_file has its default configuration, certificate-verification results are not properly checked. (no CVSS)
- [CVE-2018-12409](https://cve.now/CVE-2018-12409.md): The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scrip (no CVSS)
- [CVE-2018-0696](https://cve.now/CVE-2018-0696.md): OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the sec (no CVSS, OpenAM Consortium OpenAM)
- [CVE-2018-13403](https://cve.now/CVE-2018-13403.md): The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from ver (no CVSS, Atlassian Jira)
- [CVE-2018-13404](https://cve.now/CVE-2018-13404.md): The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 (no CVSS, Atlassian Jira)
- [CVE-2018-16189](https://cve.now/CVE-2018-16189.md): Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileg (no CVSS, Micco Self-Extracting Archives created by UNLHA32.DLL)
- [CVE-2018-16190](https://cve.now/CVE-2018-16190.md): Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and (no CVSS, Micco UNARJ32.DLL for Win32, LHMelting for Win32, and LML…)
- [CVE-2018-20232](https://cve.now/CVE-2018-20232.md): The labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before version 7.13.1 allows remote attackers to inj (no CVSS, Atlassian Jira)
- [CVE-2018-20237](https://cve.now/CVE-2018-20237.md): Atlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to download a deleted page via the word expor (no CVSS, Atlassian Confluence Server · Atlassian Confluence Data Cen…)
- [CVE-2018-20238](https://cve.now/CVE-2018-20238.md): Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authent (no CVSS, Atlassian Crowd)
- [CVE-2019-5909](https://cve.now/CVE-2019-5909.md): License Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry Class (R5.01.00 - R6.06.00), ProSafe-RS (R3.0 (no CVSS, Yokogawa Electric License Manager Service of YOKOGAWA produ…)
- [CVE-2019-5910](https://cve.now/CVE-2019-5910.md): Directory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote attackers to read arbitrary files via unspecifie (no CVSS, HOUSE GATE App for iOS)
- [CVE-2019-5911](https://cve.now/CVE-2019-5911.md): Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to g (no CVSS, Micco The installer of UNLHA32.DLL)
- [CVE-2019-5912](https://cve.now/CVE-2019-5912.md): Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to (no CVSS, Micco The installer of UNARJ32.DLL)
- [CVE-2019-5913](https://cve.now/CVE-2019-5913.md): Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain (no CVSS, Micco The installer of LHMelting)
- [CVE-2019-5914](https://cve.now/CVE-2019-5914.md): V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to (no CVSS, NTT DOCOMO V20 PRO L-01J)
- [CVE-2019-5915](https://cve.now/CVE-2019-5915.md): Open redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to redirect users to arbitrary web sites and conduc (no CVSS, OpenAM Consortium OpenAM)
- [CVE-2019-5916](https://cve.now/CVE-2019-5916.md): Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2 (no CVSS, D-CIRCLE POWER EGG)
- [CVE-2019-3610](https://cve.now/CVE-2019-3610.md): True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability (CVSS 5.6, McAfee True Key)
- [CVE-2018-15781](https://cve.now/CVE-2018-15781.md): DSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability (CVSS 7.9, Dell Wyse Password Encoder)
- [CVE-2019-3782](https://cve.now/CVE-2019-3782.md): CredHub CLI writes environment variable credentials to disk (CVSS 6.3, Cloud Foundry CredHub CLI)
- [CVE-2019-8334](https://cve.now/CVE-2019-8334.md): An issue was discovered in SchoolCMS 2.3.1. (no CVSS)
- [CVE-2019-8335](https://cve.now/CVE-2019-8335.md): An issue was discovered in SchoolCMS 2.3.1. (no CVSS)
- [CVE-2018-20164](https://cve.now/CVE-2018-20164.md): An issue was discovered in regex.yaml (aka regexes.yaml) in UA-Parser UAP-Core before 0.6.0. (no CVSS, uap-core)
- [CVE-2019-8312](https://cve.now/CVE-2019-8312.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8313](https://cve.now/CVE-2019-8313.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8314](https://cve.now/CVE-2019-8314.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8315](https://cve.now/CVE-2019-8315.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8316](https://cve.now/CVE-2019-8316.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8317](https://cve.now/CVE-2019-8317.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8318](https://cve.now/CVE-2019-8318.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2019-8319](https://cve.now/CVE-2019-8319.md): An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. (no CVSS)
- [CVE-2018-20253](https://cve.now/CVE-2018-20253.md): In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive (no CVSS, Check Point Software Technologies WinRAR)
- [CVE-2019-6543](https://cve.now/CVE-2019-6543.md): AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20 (no CVSS, ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to)
- [CVE-2019-6545](https://cve.now/CVE-2019-6545.md): AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 20 (no CVSS, ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to)
- [CVE-2019-6537](https://cve.now/CVE-2019-6537.md): Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings wit (no CVSS, ICS-CERT WECON LeviStudioU)
- [CVE-2019-6539](https://cve.now/CVE-2019-6539.md): Several heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior have been identified, which may allow arbit (no CVSS, ICS-CERT WECON LeviStudioU)
- [CVE-2019-6541](https://cve.now/CVE-2019-6541.md): A memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and prior, which may allow arbitrary code executio (no CVSS, ICS-CERT WECON LeviStudioU)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.