CVEs published April 19, 2019
29 CVEs were published on April 19, 2019: 0 critical, 1 high.
- Published
- 29
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Android
- 15
- IBM MQ
- 1
- IBM QRadar SIEM
- 1
- jquery · jquery-rails +4
- 1
- matrix-sydent
- 1
- The Eclipse Foundation Eclipse OpenJ9
- 1
High 1
Medium, low and unrated 28
- CVE-2019-11359Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML
- CVE-2018-20817SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob da
- CVE-2019-11354The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.
- CVE-2019-11351TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.
- CVE-2019-11350CloudBees Jenkins Operations Center 2.150.2.3, when an expired trial license exists, allows Cleartext Password Storage and Retrieval via the
- CVE-2019-2037In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check.Android
- CVE-2019-2041In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices due to an insecure defAndroid
- CVE-2019-2032In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing bounds check.Android
- CVE-2019-2029In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free.Android
- CVE-2019-2040In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.Android
- CVE-2019-2039In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.Android
- CVE-2019-2038In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check.Android
- CVE-2019-2035In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check.Android
- CVE-2019-2034In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow.Android
- CVE-2019-2033In create_hdr of dnssd_clientstub.c, there is a possible use after free.Android
- CVE-2019-2031In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check.Android
- CVE-2019-2030In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free.Android
- CVE-2019-2028In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved.Android
- CVE-2019-2027In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2019-2026In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check.Android
- CVE-2019-9841Vesta Control Panel 0.9.8-23 allows XSS via a crafted URL.
- CVE-2019-11344data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler
- CVE-2019-5008hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a
- CVE-2019-10886An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV an
- CVE-2018-1729IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users.IBM QRadar SIEM
- CVE-2019-10245In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode arThe Eclipse Foundation Eclipse OpenJ9
- CVE-2019-11340util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_matrix-sydent
- CVE-2019-11358jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototypjquery · jquery-rails +4