# CVEs published 2019-04-23

188 CVEs were published on April 23, 2019: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-11487](https://cve.now/CVE-2019-11487.md): The Linux kernel before 5.1-rc5 allows page-\>\_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of R (no CVSS)
- [CVE-2019-11486](https://cve.now/CVE-2019-11486.md): The Siemens R3964 line discipline driver in drivers/tty/n\_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions. (no CVSS)
- [CVE-2019-10688](https://cve.now/CVE-2019-10688.md): VVX products with software versions including and prior to, UCS 5.9.2 with Better Together over Ethernet Connector (BToE) application 3.9.1, (no CVSS)
- [CVE-2018-8825](https://cve.now/CVE-2018-8825.md): Google TensorFlow 1.7 and below is affected by: Buffer Overflow. (no CVSS, tensorflow-gpu · tensorflow +1)
- [CVE-2018-7576](https://cve.now/CVE-2018-7576.md): Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. (no CVSS, tensorflow · tensorflow-gpu +1)
- [CVE-2019-10711](https://cve.now/CVE-2019-10711.md): Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware (until Webware version V1.0. (no CVSS)
- [CVE-2019-7727](https://cve.now/CVE-2019-7727.md): In NICE Engage through 6.5, the default configuration binds an unauthenticated JMX/RMI interface to all network interfaces, without restrict (no CVSS)
- [CVE-2019-10710](https://cve.now/CVE-2019-10710.md): Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to rece (no CVSS)
- [CVE-2019-2706](https://cve.now/CVE-2019-2706.md): Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: BPM Foundation Services). (no CVSS, Oracle Business Process Management Suite)
- [CVE-2019-2707](https://cve.now/CVE-2019-2707.md): Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products (subcomponent: Applica (no CVSS, Oracle PeopleSoft Enterprise ELM Enterprise Learning Manage…)
- [CVE-2019-2708](https://cve.now/CVE-2019-2708.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2709](https://cve.now/CVE-2019-2709.md): Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). (no CVSS, Oracle Transportation Management)
- [CVE-2019-2712](https://cve.now/CVE-2019-2712.md): Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). (no CVSS, Oracle Commerce Platform)
- [CVE-2019-2713](https://cve.now/CVE-2019-2713.md): Vulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent: Asset Manager). (no CVSS, Oracle Commerce Merchandising)
- [CVE-2019-2719](https://cve.now/CVE-2019-2719.md): Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications (InfoCenter)). (no CVSS, Oracle Knowledge)
- [CVE-2019-2720](https://cve.now/CVE-2019-2720.md): Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware (subcomponent: ODI Tools). (no CVSS, Oracle Data Integrator)
- [CVE-2019-2721](https://cve.now/CVE-2019-2721.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2722](https://cve.now/CVE-2019-2722.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2723](https://cve.now/CVE-2019-2723.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2683](https://cve.now/CVE-2019-2683.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2684](https://cve.now/CVE-2019-2684.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). (no CVSS, Oracle Java)
- [CVE-2019-2685](https://cve.now/CVE-2019-2685.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2686](https://cve.now/CVE-2019-2686.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2687](https://cve.now/CVE-2019-2687.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2688](https://cve.now/CVE-2019-2688.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2689](https://cve.now/CVE-2019-2689.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2690](https://cve.now/CVE-2019-2690.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2691](https://cve.now/CVE-2019-2691.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2692](https://cve.now/CVE-2019-2692.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). (no CVSS, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2019-2693](https://cve.now/CVE-2019-2693.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2694](https://cve.now/CVE-2019-2694.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2695](https://cve.now/CVE-2019-2695.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2696](https://cve.now/CVE-2019-2696.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2697](https://cve.now/CVE-2019-2697.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2698](https://cve.now/CVE-2019-2698.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). (no CVSS, Oracle Java)
- [CVE-2019-2699](https://cve.now/CVE-2019-2699.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). (no CVSS, Oracle Java)
- [CVE-2019-2700](https://cve.now/CVE-2019-2700.md): Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products (subcomponent: Enterprise Learning Mgmt). (no CVSS, Oracle PeopleSoft Enterprise ELM Enterprise Learning Manage…)
- [CVE-2019-2701](https://cve.now/CVE-2019-2701.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcompone (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2019-2702](https://cve.now/CVE-2019-2702.md): Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications (subcomponent: Web Servic (no CVSS, Oracle Hospitality Cruise Dining Room Management)
- [CVE-2019-2703](https://cve.now/CVE-2019-2703.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2704](https://cve.now/CVE-2019-2704.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: IPS Package Manager). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2705](https://cve.now/CVE-2019-2705.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2657](https://cve.now/CVE-2019-2657.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2658](https://cve.now/CVE-2019-2658.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2659](https://cve.now/CVE-2019-2659.md): Vulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo Application Framework). (no CVSS, Oracle Commerce Platform)
- [CVE-2019-2660](https://cve.now/CVE-2019-2660.md): Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). (no CVSS, Oracle Knowledge Management)
- [CVE-2019-2661](https://cve.now/CVE-2019-2661.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center)
- [CVE-2019-2662](https://cve.now/CVE-2019-2662.md): Vulnerability in the Oracle Territory Management component of Oracle E-Business Suite (subcomponent: Territory Administration). (no CVSS, Oracle Territory Management)
- [CVE-2019-2663](https://cve.now/CVE-2019-2663.md): Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Advanced Outbound Telephony)
- [CVE-2019-2664](https://cve.now/CVE-2019-2664.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2665](https://cve.now/CVE-2019-2665.md): Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: CRM User Management Framework). (no CVSS, Oracle Common Applications)
- [CVE-2019-2669](https://cve.now/CVE-2019-2669.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2670](https://cve.now/CVE-2019-2670.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2671](https://cve.now/CVE-2019-2671.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2673](https://cve.now/CVE-2019-2673.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2674](https://cve.now/CVE-2019-2674.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2675](https://cve.now/CVE-2019-2675.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2676](https://cve.now/CVE-2019-2676.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2677](https://cve.now/CVE-2019-2677.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2678](https://cve.now/CVE-2019-2678.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2679](https://cve.now/CVE-2019-2679.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2680](https://cve.now/CVE-2019-2680.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2681](https://cve.now/CVE-2019-2681.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2682](https://cve.now/CVE-2019-2682.md): Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). (no CVSS, Oracle Applications Framework)
- [CVE-2019-2633](https://cve.now/CVE-2019-2633.md): Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite (subcomponent: Messages). (no CVSS, Oracle Work in Process)
- [CVE-2019-2634](https://cve.now/CVE-2019-2634.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2635](https://cve.now/CVE-2019-2635.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2636](https://cve.now/CVE-2019-2636.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Group Replication Plugin). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2637](https://cve.now/CVE-2019-2637.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2638](https://cve.now/CVE-2019-2638.md): Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). (no CVSS, Oracle General Ledger)
- [CVE-2019-2639](https://cve.now/CVE-2019-2639.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2640](https://cve.now/CVE-2019-2640.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2019-2641](https://cve.now/CVE-2019-2641.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2019-2642](https://cve.now/CVE-2019-2642.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2019-2643](https://cve.now/CVE-2019-2643.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2019-2644](https://cve.now/CVE-2019-2644.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2645](https://cve.now/CVE-2019-2645.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2646](https://cve.now/CVE-2019-2646.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: EJB Container). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2647](https://cve.now/CVE-2019-2647.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2648](https://cve.now/CVE-2019-2648.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2649](https://cve.now/CVE-2019-2649.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2650](https://cve.now/CVE-2019-2650.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2651](https://cve.now/CVE-2019-2651.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center)
- [CVE-2019-2652](https://cve.now/CVE-2019-2652.md): Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). (no CVSS, Oracle iStore)
- [CVE-2019-2653](https://cve.now/CVE-2019-2653.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2654](https://cve.now/CVE-2019-2654.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2655](https://cve.now/CVE-2019-2655.md): Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Business Intelligence (OLTP) (no CVSS, Oracle Interaction Center Intelligence)
- [CVE-2019-2656](https://cve.now/CVE-2019-2656.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2610](https://cve.now/CVE-2019-2610.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2611](https://cve.now/CVE-2019-2611.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2612](https://cve.now/CVE-2019-2612.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2613](https://cve.now/CVE-2019-2613.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2614](https://cve.now/CVE-2019-2614.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2615](https://cve.now/CVE-2019-2615.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2616](https://cve.now/CVE-2019-2616.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (CVSS 7.2, KEV, Oracle BI Publisher)
- [CVE-2019-2617](https://cve.now/CVE-2019-2617.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2618](https://cve.now/CVE-2019-2618.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2619](https://cve.now/CVE-2019-2619.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2620](https://cve.now/CVE-2019-2620.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2621](https://cve.now/CVE-2019-2621.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). (no CVSS, Oracle Application Object Library)
- [CVE-2019-2622](https://cve.now/CVE-2019-2622.md): Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite (subcomponent: Renewals). (no CVSS, Oracle Service Contracts)
- [CVE-2019-2623](https://cve.now/CVE-2019-2623.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2624](https://cve.now/CVE-2019-2624.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2625](https://cve.now/CVE-2019-2625.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2626](https://cve.now/CVE-2019-2626.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2627](https://cve.now/CVE-2019-2627.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2628](https://cve.now/CVE-2019-2628.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2629](https://cve.now/CVE-2019-2629.md): Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User I (no CVSS, Oracle Health Sciences Data Management Workbench)
- [CVE-2019-2630](https://cve.now/CVE-2019-2630.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2631](https://cve.now/CVE-2019-2631.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2632](https://cve.now/CVE-2019-2632.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2585](https://cve.now/CVE-2019-2585.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2586](https://cve.now/CVE-2019-2586.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: RemoteCall). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2587](https://cve.now/CVE-2019-2587.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2588](https://cve.now/CVE-2019-2588.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2589](https://cve.now/CVE-2019-2589.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2590](https://cve.now/CVE-2019-2590.md): Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager component of Oracle PeopleSoft Products (subcomponent: Job Opening (no CVSS, Oracle PeopleSoft Enterprise HCM Talent Acquisition Manager)
- [CVE-2019-2591](https://cve.now/CVE-2019-2591.md): Vulnerability in the PeopleSoft Enterprise HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway). (no CVSS, Oracle PeopleSoft Enterprise HCM Candidate Gateway)
- [CVE-2019-2592](https://cve.now/CVE-2019-2592.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2593](https://cve.now/CVE-2019-2593.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2594](https://cve.now/CVE-2019-2594.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2595](https://cve.now/CVE-2019-2595.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2596](https://cve.now/CVE-2019-2596.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2597](https://cve.now/CVE-2019-2597.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2598](https://cve.now/CVE-2019-2598.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2600](https://cve.now/CVE-2019-2600.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center)
- [CVE-2019-2601](https://cve.now/CVE-2019-2601.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2602](https://cve.now/CVE-2019-2602.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). (no CVSS, Oracle Java)
- [CVE-2019-2603](https://cve.now/CVE-2019-2603.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2604](https://cve.now/CVE-2019-2604.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2019-2605](https://cve.now/CVE-2019-2605.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Web Catalog). (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2019-2606](https://cve.now/CVE-2019-2606.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2607](https://cve.now/CVE-2019-2607.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2608](https://cve.now/CVE-2019-2608.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2609](https://cve.now/CVE-2019-2609.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2518](https://cve.now/CVE-2019-2518.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2551](https://cve.now/CVE-2019-2551.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2557](https://cve.now/CVE-2019-2557.md): Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for (no CVSS, Oracle Application Testing Suite)
- [CVE-2019-2558](https://cve.now/CVE-2019-2558.md): Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Infrastructure). (no CVSS, Oracle Retail Point-of-Service)
- [CVE-2019-2564](https://cve.now/CVE-2019-2564.md): Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime). (no CVSS, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2019-2565](https://cve.now/CVE-2019-2565.md): Vulnerability in the JD Edwards World Technical Foundation component of Oracle JD Edwards Products (subcomponent: Service Enablement). (no CVSS, Oracle JD Edwards World Technical Foundation)
- [CVE-2019-2566](https://cve.now/CVE-2019-2566.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2567](https://cve.now/CVE-2019-2567.md): Vulnerability in the Oracle Configurator component of Oracle Supply Chain Products Suite (subcomponent: Active Model Generation). (no CVSS, Oracle Configurator)
- [CVE-2019-2568](https://cve.now/CVE-2019-2568.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2570](https://cve.now/CVE-2019-2570.md): Vulnerability in the Siebel Core - Server BizLogic Script component of Oracle Siebel CRM (subcomponent: Integration - Scripting). (no CVSS, Oracle Siebel Core - Server Framework)
- [CVE-2019-2571](https://cve.now/CVE-2019-2571.md): Vulnerability in the RDBMS DataPump component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2572](https://cve.now/CVE-2019-2572.md): Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). (no CVSS, Oracle Business Process Management Suite)
- [CVE-2019-2573](https://cve.now/CVE-2019-2573.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2574](https://cve.now/CVE-2019-2574.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2575](https://cve.now/CVE-2019-2575.md): Vulnerability in the Oracle AutoVue 3D Professional Advanced component of Oracle Supply Chain Products Suite (subcomponent: Format Handling (no CVSS, Oracle AutoVue 3D Professional Advanced)
- [CVE-2019-2576](https://cve.now/CVE-2019-2576.md): Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS, Oracle Service Bus)
- [CVE-2019-2577](https://cve.now/CVE-2019-2577.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: File Locking Services). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2578](https://cve.now/CVE-2019-2578.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2019-2579](https://cve.now/CVE-2019-2579.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2019-2580](https://cve.now/CVE-2019-2580.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2581](https://cve.now/CVE-2019-2581.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2582](https://cve.now/CVE-2019-2582.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2583](https://cve.now/CVE-2019-2583.md): Vulnerability in the Oracle iSupplier Portal component of Oracle E-Business Suite (subcomponent: Attachments). (no CVSS, Oracle iSupplier Portal)
- [CVE-2019-2584](https://cve.now/CVE-2019-2584.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2880](https://cve.now/CVE-2018-2880.md): Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). (no CVSS, Oracle MICROS Retail-J)
- [CVE-2018-3120](https://cve.now/CVE-2018-3120.md): Vulnerability in the MICROS Lucas component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle MICROS Lucas)
- [CVE-2018-3123](https://cve.now/CVE-2018-3123.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3312](https://cve.now/CVE-2018-3312.md): Vulnerability in the Oracle Retail Customer Engagement component of Oracle Retail Applications (subcomponent: Segment). (no CVSS, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2018-3314](https://cve.now/CVE-2018-3314.md): Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Customer). (no CVSS, Oracle MICROS Relate CRM Software)
- [CVE-2019-2424](https://cve.now/CVE-2019-2424.md): Vulnerability in the Oracle Retail Convenience Store Back Office component of Oracle Retail Applications (subcomponent: Level 3 Maintenance (no CVSS, Oracle Retail Convenience Store Back Office)
- [CVE-2019-2516](https://cve.now/CVE-2019-2516.md): Vulnerability in the Portable Clusterware component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2517](https://cve.now/CVE-2019-2517.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-10864](https://cve.now/CVE-2019-10864.md): The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Ref (no CVSS)
- [CVE-2019-11076](https://cve.now/CVE-2019-11076.md): Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request. (no CVSS)
- [CVE-2019-7304](https://cve.now/CVE-2019-7304.md): Local privilege escalation via snapd socket (CVSS 8.8, Canonical snapd)
- [CVE-2019-7303](https://cve.now/CVE-2019-7303.md): Snapd seccomp filter TIOCSTI ioctl bypass (CVSS 5.7, Canonical snapd)
- [CVE-2019-0223](https://cve.now/CVE-2019-0223.md): While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and it (no CVSS, Apache Software Foundation Apache Qpid Proton)
- [CVE-2018-1328](https://cve.now/CVE-2018-1328.md): Apache Zeppelin prior to 0.8.0 had a stored XSS issue via Note permissions. (no CVSS, Apache Software Foundation Apache Zeppelin · org.apache.zep…)
- [CVE-2018-1317](https://cve.now/CVE-2018-1317.md): In Apache Zeppelin prior to 0.8.0 the cron scheduler was enabled by default and could allow users to run paragraphs as other users without a (no CVSS, Apache Software Foundation Apache Zeppelin · org.apache.zep…)
- [CVE-2017-12619](https://cve.now/CVE-2017-12619.md): Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. (no CVSS, Apache Software Foundation Apache Zeppelin · org.apache.zep…)
- [CVE-2019-11474](https://cve.now/CVE-2019-11474.md): coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by craf (no CVSS)
- [CVE-2019-11473](https://cve.now/CVE-2019-11473.md): coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting a (no CVSS)
- [CVE-2019-11472](https://cve.now/CVE-2019-11472.md): ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (d (no CVSS)
- [CVE-2019-11471](https://cve.now/CVE-2019-11471.md): libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set\_alpha\_channel in heif\_context.h because heif\_context.cc mishandles refer (no CVSS)
- [CVE-2019-11470](https://cve.now/CVE-2019-11470.md): The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) b (no CVSS)
- [CVE-2018-20822](https://cve.now/CVE-2018-20822.md): LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex\_Selector::perform in ast.hpp and Sass:: (no CVSS)
- [CVE-2018-20821](https://cve.now/CVE-2018-20821.md): The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse\_ (no CVSS)
- [CVE-2018-20820](https://cve.now/CVE-2018-20820.md): read\_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an inte (no CVSS)
- [CVE-2018-20819](https://cve.now/CVE-2018-20819.md): io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffe (no CVSS)
- [CVE-2018-17169](https://cve.now/CVE-2018-17169.md): An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or (no CVSS)
- [CVE-2019-11469](https://cve.now/CVE-2019-11469.md): Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. (no CVSS)
- [CVE-2013-7470](https://cve.now/CVE-2013-7470.md): cipso\_v4\_validate in include/net/cipso\_ipv4.h in the Linux kernel before 3.11.7, when CONFIG\_NETLABEL is disabled, allows attackers to cause (no CVSS)
- [CVE-2019-11463](https://cve.now/CVE-2019-11463.md): A memory leak in archive\_read\_format\_zip\_cleanup in archive\_read\_support\_format\_zip.c in libarchive 3.3.4-dev allows remote attackers to cau (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.