CVEs published February 15, 2019
31 CVEs were published on February 15, 2019: 0 critical, 3 high.
- Published
- 31
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- IBM InfoSphere Information Server
- 3
- SAP SE ABAP Platform
- 2
- SAP SE SAP Disclosure Management
- 2
- Steven Ellis Easy2map-photos WordPress Plugin
- 2
- IBM QRadar SIEM
- 1
- IBM Rational ClearCase
- 1
- Mambo CMS
- 1
- SAP SE SAP Business One Mobile Android App
- 1
- SAP SE SAP BusinessObjects Business Intelligence Platform
- 1
- SAP SE SAP BusinessObjects Business Intelligence Platform S…
- 1
High 3
- CVE-2018-1701IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installatioIBM InfoSphere Information Server
- CVE-2018-1727IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XMIBM InfoSphere Information Server
- CVE-2019-4059IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password.IBM Rational ClearCase
Medium, low and unrated 28
- CVE-2019-8354An issue was discovered in SoX 14.4.2.
- CVE-2019-8355An issue was discovered in SoX 14.4.2.
- CVE-2019-8356An issue was discovered in SoX 14.4.2.
- CVE-2019-8357An issue was discovered in SoX 14.4.2.
- CVE-2013-2516Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to Stefaan Colman FileUtils · fileutils
- CVE-2013-2565A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root paMambo CMS
- CVE-2013-5654Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storageYingZhi Python Programming Language
- CVE-2015-4615Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parenSteven Ellis Easy2map-photos WordPress Plugin
- CVE-2015-4617Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying fSteven Ellis Easy2map-photos WordPress Plugin
- CVE-2017-1695IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infoIBM QRadar SIEM
- CVE-2018-1895IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting.IBM InfoSphere Information Server
- CVE-2019-0251The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in CSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2019-0254SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site ScriSAP SE SAP Disclosure Management
- CVE-2019-0255SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an
- CVE-2019-0256Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwiseSAP SE SAP Business One Mobile Android App
- CVE-2019-0257Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7SAP SE ABAP Platform
- CVE-2019-0258SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalationSAP SE SAP Disclosure Management
- CVE-2019-0259SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without properSAP SE SAP BusinessObjects Business Intelligence Platform S…
- CVE-2019-0261Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks proSAP SE SAP HANA Extended Application Services
- CVE-2019-0262SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resultiSAP SE SAP WebIntelligence BILaunchPad
- CVE-2019-0265SLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding thSAP SE ABAP Platform
- CVE-2019-0266Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform usSAP SE SAP HANA Extended Application Services, advanced mod…
- CVE-2019-0267SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokSAP SE SAP Manufacturing Integration and Intelligence
- CVE-2019-6974In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition,
- CVE-2019-8347BEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php?action=add&nav=add_web_user&admin_p_nav=us
- CVE-2019-8345The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle atta
- CVE-2019-8341An issue was discovered in Jinja2 2.10.
- CVE-2019-8343In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.