CVEs published February 21, 2019
35 CVEs were published on February 21, 2019: 0 critical, 5 high. 1 is now in CISA KEV.
- Published
- 35
- Critical
- 0
- High
- 5
- Medium
- 17
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- IBM Security Identity Governance and Intelligence
- 7
- Cisco HyperFlex HX-Series
- 4
- Cisco Firepower Extensible Operating System
- 1
- Cisco Firepower Threat Defense Software
- 1
- Cisco IoT Field Network Director
- 1
- Cisco IP Phone 8800 Series Software
- 1
- Cisco Network Convergence System 1000 Series
- 1
- Cisco Prime Collaboration Assurance
- 1
- Cisco Prime Infrastructure
- 1
- Cisco Unity Connection
- 1
High 5
- CVE-2019-6340Drupal core - Highly critical - Remote Code ExecutionDrupal Core · drupal/core +1
- CVE-2019-1681Cisco Network Convergence System 1000 Series TFTP Directory Traversal VulnerabilityCisco Network Convergence System 1000 Series
- CVE-2019-1664Cisco HyperFlex Software Unauthenticated Root Access VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-1662Cisco Prime Collaboration Assurance Software Unauthenticated Access VulnerabilityCisco Prime Collaboration Assurance
- CVE-2019-1659Cisco Prime Infrastructure Certificate Validation VulnerabilityCisco Prime Infrastructure
Medium, low and unrated 30
- CVE-2019-8955In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against To
- CVE-2019-1691Cisco Firepower Threat Defense Software SSL or TLS Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-1698Cisco IoT Field Network Director XML External Entity VulnerabilityCisco IoT Field Network Director
- CVE-2019-1700Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service VulnerabilityCisco Firepower Extensible Operating System
- CVE-2019-1667Cisco HyperFlex Arbitrary Statistics Write VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-1684Cisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service VulnerabilityCisco IP Phone 8800 Series Software
- CVE-2019-1685Cisco Unity Connection Reflected Cross-Site Scripting VulnerabilityCisco Unity Connection
- CVE-2018-20783In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allo
- CVE-2019-1665Cisco Hyperflex Stored Cross-Site Scripting VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-1666Cisco HyperFlex Unauthenticated Statistics Retrieval VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-8985On Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through WF2880), there is a stack-based buffer overf
- CVE-2018-1944IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials, such as a password IBM Security Identity Governance and Intelligence
- CVE-2018-1945IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to hijack the clickingIBM Security Identity Governance and Intelligence
- CVE-2018-1946IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allIBM Security Identity Governance and Intelligence
- CVE-2018-1947IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting.IBM Security Identity Governance and Intelligence
- CVE-2018-1948IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tIBM Security Identity Governance and Intelligence
- CVE-2018-1949IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information to unauthorized userIBM Security Identity Governance and Intelligence
- CVE-2018-1950IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive iIBM Security Identity Governance and Intelligence
- CVE-2018-2006IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system.IBM Robotic Process Automation with Automation Anywhere
- CVE-2019-8983MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
- CVE-2019-8984MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).
- CVE-2018-20122The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI
- CVE-2018-6687GetSusp (a free McAfee tool) update fixes an infinite loop vulnerability (CVE-2018-6687)McAfee GetSusp
- CVE-2019-8982com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leadin
- CVE-2019-8979Kohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.
- CVE-2019-8980A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of servic
- CVE-2013-7469Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making
- CVE-2018-20146An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0.
- CVE-2019-5727Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6
- CVE-2019-8996In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.