# CVEs published 2019-04-05

22 CVEs were published on April 5, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-9489](https://cve.now/CVE-2019-9489.md): A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 1 (no CVSS, Trend Micro Apex One, OfficeScan, Worry-Free Business Secur…)
- [CVE-2019-9490](https://cve.now/CVE-2019-9490.md): A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose admin (no CVSS, Trend Micro InterScan Web Security Virtual Appliance)
- [CVE-2019-10478](https://cve.now/CVE-2019-10478.md): An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. (no CVSS)
- [CVE-2019-10479](https://cve.now/CVE-2019-10479.md): An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. (no CVSS)
- [CVE-2019-6554](https://cve.now/CVE-2019-6554.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS, Advantech WebAccess/SCADA)
- [CVE-2019-6550](https://cve.now/CVE-2019-6550.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS, Advantech WebAccess/SCADA)
- [CVE-2019-6552](https://cve.now/CVE-2019-6552.md): Advantech WebAccess/SCADA, Versions 8.3.5 and prior. (no CVSS, Advantech WebAccess/SCADA)
- [CVE-2019-10888](https://cve.now/CVE-2019-10888.md): A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html. (no CVSS)
- [CVE-2019-10887](https://cve.now/CVE-2019-10887.md): A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remot (no CVSS)
- [CVE-2019-10885](https://cve.now/CVE-2019-10885.md): An issue was discovered in Ivanti Workspace Control before 10.3.90.0. (no CVSS)
- [CVE-2019-10884](https://cve.now/CVE-2019-10884.md): Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. (no CVSS)
- [CVE-2018-20816](https://cve.now/CVE-2018-20816.md): An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stea (no CVSS)
- [CVE-2019-10875](https://cve.now/CVE-2019-10875.md): A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Br (no CVSS)
- [CVE-2019-10874](https://cve.now/CVE-2019-10874.md): Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code (no CVSS, bolt/bolt)
- [CVE-2019-10879](https://cve.now/CVE-2019-10879.md): In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow (no CVSS)
- [CVE-2019-10878](https://cve.now/CVE-2019-10878.md): In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in (no CVSS)
- [CVE-2019-10877](https://cve.now/CVE-2019-10877.md): In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multip (no CVSS)
- [CVE-2019-10876](https://cve.now/CVE-2019-10876.md): An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. (no CVSS, neutron)
- [CVE-2019-10873](https://cve.now/CVE-2019-10873.md): An issue was discovered in Poppler 0.74.0. (no CVSS)
- [CVE-2019-10872](https://cve.now/CVE-2019-10872.md): An issue was discovered in Poppler 0.74.0. (no CVSS)
- [CVE-2019-10871](https://cve.now/CVE-2019-10871.md): An issue was discovered in Poppler 0.74.0. (no CVSS)
- [CVE-2019-10868](https://cve.now/CVE-2019-10868.md): In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, (CVSS 4.3, trytond)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.