# CVEs published 2019-04-30

77 CVEs were published on April 30, 2019: 1 critical, 3 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-11627](https://cve.now/CVE-2019-11627.md): gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID. (no CVSS)
- [CVE-2019-0214](https://cve.now/CVE-2019-0214.md): In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mec (no CVSS, Apache Archiva · org.apache.archiva:archiva)
- [CVE-2019-0213](https://cve.now/CVE-2019-0213.md): In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. (no CVSS, Apache Archiva · org.apache.archiva:archiva)
- [CVE-2019-0194](https://cve.now/CVE-2019-0194.md): Apache Camel's File is vulnerable to directory traversal. (no CVSS, Apache Camel · org.apache.camel:camel-core)
- [CVE-2019-3939](https://cve.now/CVE-2019-3939.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the w (no CVSS, Crestron AirMedia)
- [CVE-2019-3938](https://cve.now/CVE-2019-3938.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the f (no CVSS, Crestron AirMedia)
- [CVE-2019-3937](https://cve.now/CVE-2019-3937.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configurat (no CVSS, Crestron AirMedia)
- [CVE-2019-3936](https://cve.now/CVE-2019-3936.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 is vulnerable to denial of service via a crafted request to TCP port (no CVSS, Crestron AirMedia)
- [CVE-2019-3935](https://cve.now/CVE-2019-3935.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to act as a moderator to a slide show via crafted HTTP (no CVSS, Crestron AirMedia)
- [CVE-2019-3934](https://cve.now/CVE-2019-3934.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP (no CVSS, Crestron AirMedia)
- [CVE-2019-3933](https://cve.now/CVE-2019-3933.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /i (no CVSS, Crestron AirMedia)
- [CVE-2019-3932](https://cve.now/CVE-2019-3932.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to authentication bypass due to a hard-coded password (no CVSS, Crestron AirMedia)
- [CVE-2019-3931](https://cve.now/CVE-2019-3931.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafte (no CVSS, Crestron AirMedia)
- [CVE-2019-3930](https://cve.now/CVE-2019-3930.md): The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1 (no CVSS, Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq A…)
- [CVE-2019-3929](https://cve.now/CVE-2019-3929.md): The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1 (CVSS 9.8, KEV, Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq A…)
- [CVE-2019-3928](https://cve.now/CVE-2019-3928.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allow any user to obtain the presentation passcode via the iso.3.6.1. (no CVSS, Crestron AirMedia)
- [CVE-2019-3927](https://cve.now/CVE-2019-3927.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 anyone can change the administrator and moderator passwords via the i (no CVSS, Crestron AirMedia)
- [CVE-2019-3926](https://cve.now/CVE-2019-3926.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1 (no CVSS, Crestron AirMedia)
- [CVE-2019-3925](https://cve.now/CVE-2019-3925.md): Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.1 (no CVSS, Crestron AirMedia)
- [CVE-2019-11626](https://cve.now/CVE-2019-11626.md): routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c (no CVSS)
- [CVE-2019-11625](https://cve.now/CVE-2019-11625.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. (no CVSS)
- [CVE-2019-11624](https://cve.now/CVE-2019-11624.md): doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. (no CVSS)
- [CVE-2019-11623](https://cve.now/CVE-2019-11623.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. (no CVSS)
- [CVE-2019-11622](https://cve.now/CVE-2019-11622.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. (no CVSS)
- [CVE-2019-11621](https://cve.now/CVE-2019-11621.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. (no CVSS)
- [CVE-2019-11620](https://cve.now/CVE-2019-11620.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. (no CVSS)
- [CVE-2019-11619](https://cve.now/CVE-2019-11619.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. (no CVSS)
- [CVE-2019-11618](https://cve.now/CVE-2019-11618.md): doorGets 7.0 has a default administrator credential vulnerability. (no CVSS)
- [CVE-2019-11617](https://cve.now/CVE-2019-11617.md): doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. (no CVSS)
- [CVE-2019-11616](https://cve.now/CVE-2019-11616.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. (no CVSS)
- [CVE-2019-11615](https://cve.now/CVE-2019-11615.md): /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. (no CVSS)
- [CVE-2019-11614](https://cve.now/CVE-2019-11614.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. (no CVSS)
- [CVE-2019-11613](https://cve.now/CVE-2019-11613.md): doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. (no CVSS)
- [CVE-2019-11612](https://cve.now/CVE-2019-11612.md): doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. (no CVSS)
- [CVE-2019-11611](https://cve.now/CVE-2019-11611.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. (no CVSS)
- [CVE-2019-11610](https://cve.now/CVE-2019-11610.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. (no CVSS)
- [CVE-2019-11609](https://cve.now/CVE-2019-11609.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. (no CVSS)
- [CVE-2019-11608](https://cve.now/CVE-2019-11608.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. (no CVSS)
- [CVE-2019-11607](https://cve.now/CVE-2019-11607.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. (no CVSS)
- [CVE-2019-11606](https://cve.now/CVE-2019-11606.md): doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. (no CVSS)
- [CVE-2018-14930](https://cve.now/CVE-2018-14930.md): An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. (no CVSS)
- [CVE-2018-14874](https://cve.now/CVE-2018-14874.md): An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. (no CVSS)
- [CVE-2018-14875](https://cve.now/CVE-2018-14875.md): An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. (no CVSS)
- [CVE-2018-14931](https://cve.now/CVE-2018-14931.md): An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. (no CVSS)
- [CVE-2018-15208](https://cve.now/CVE-2018-15208.md): BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter. (no CVSS)
- [CVE-2018-15207](https://cve.now/CVE-2018-15207.md): BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to a (no CVSS)
- [CVE-2018-15206](https://cve.now/CVE-2018-15206.md): BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf. (no CVSS)
- [CVE-2019-11193](https://cve.now/CVE-2019-11193.md): The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD\_FILE\_MANAGER, CMD\_SHOW\_USER, and CMD\_SHOW\_RESELLER; an attacker ca (no CVSS)
- [CVE-2019-9486](https://cve.now/CVE-2019-9486.md): STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceSer (no CVSS)
- [CVE-2018-20835](https://cve.now/CVE-2018-20835.md): A vulnerability was found in tar-fs before 1.16.2. (no CVSS, tar-fs)
- [CVE-2018-20834](https://cve.now/CVE-2018-20834.md): A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). (no CVSS, tar)
- [CVE-2019-10131](https://cve.now/CVE-2019-10131.md): An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c (CVSS 6.5, ImageMagick)
- [CVE-2019-10272](https://cve.now/CVE-2019-10272.md): An issue was discovered in Weaver e-cology 9.0. (no CVSS)
- [CVE-2019-9621](https://cve.now/CVE-2019-9621.md): Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 (CVSS 7.5, KEV)
- [CVE-2018-19374](https://cve.now/CVE-2018-19374.md): Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into t (no CVSS)
- [CVE-2018-20510](https://cve.now/CVE-2018-20510.md): The print\_binder\_transaction\_ilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive (no CVSS)
- [CVE-2018-20509](https://cve.now/CVE-2018-20509.md): The print\_binder\_ref\_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address (no CVSS)
- [CVE-2019-5624](https://cve.now/CVE-2019-5624.md): Rapid7 Metasploit Framework Zip Import Directory Traversal (CVSS 7.4, Rapid7 Metasploit Framework)
- [CVE-2019-10950](https://cve.now/CVE-2019-10950.md): Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide inse (no CVSS, Fujifilm FCR Capsula X/ Carbon X)
- [CVE-2019-10948](https://cve.now/CVE-2019-10948.md): Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are suscepti (no CVSS, Fujifilm FCR Capsula X/ Carbon X)
- [CVE-2019-3399](https://cve.now/CVE-2019-3399.md): The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see i (no CVSS, Atlassian Jira)
- [CVE-2018-20239](https://cve.now/CVE-2018-20239.md): Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12 (no CVSS, Atlassian Application Links)
- [CVE-2019-4166](https://cve.now/CVE-2019-4166.md): IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. (CVSS 7.4, IBM StoredIQ)
- [CVE-2019-6494](https://cve.now/CVE-2019-6494.md): IMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL 0x8016E000 along with a user defined string to a (no CVSS)
- [CVE-2015-9286](https://cve.now/CVE-2015-9286.md): Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS. (no CVSS, nodebb)
- [CVE-2019-10316](https://cve.now/CVE-2019-10316.md): Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master whe (no CVSS, Jenkins project Jenkins Aqua MicroScanner Plugin · org.jenk…)
- [CVE-2019-10317](https://cve.now/CVE-2019-10317.md): Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM. (no CVSS, Jenkins project Jenkins SiteMonitor Plugin · org.jvnet.huds…)
- [CVE-2019-10318](https://cve.now/CVE-2019-10318.md): Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins ma (no CVSS, Jenkins project Jenkins Azure AD Plugin · org.jenkins-ci.pl…)
- [CVE-2019-10307](https://cve.now/CVE-2019-10307.md): A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView (no CVSS, Jenkins project Jenkins Static Analysis Utilities Plugin ·…)
- [CVE-2019-10308](https://cve.now/CVE-2019-10308.md): A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form han (no CVSS, Jenkins project Jenkins Static Analysis Utilities Plugin ·…)
- [CVE-2019-10309](https://cve.now/CVE-2019-10309.md): Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External (no CVSS, Jenkins project Jenkins Self-Organizing Swarm Plug-in Modul…)
- [CVE-2019-10310](https://cve.now/CVE-2019-10310.md): A cross-site request forgery vulnerability in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescr (no CVSS, Jenkins project Jenkins Ansible Tower Plugin · org.jenkins-…)
- [CVE-2019-10311](https://cve.now/CVE-2019-10311.md): A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doTestTowe (no CVSS, Jenkins project Jenkins Ansible Tower Plugin · org.jenkins-…)
- [CVE-2019-10312](https://cve.now/CVE-2019-10312.md): A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doFillTowe (no CVSS, Jenkins project Jenkins Ansible Tower Plugin · org.jenkins-…)
- [CVE-2019-10313](https://cve.now/CVE-2019-10313.md): Jenkins Twitter Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by use (no CVSS, Jenkins project Jenkins Twitter Plugin · org.jenkins-ci.plu…)
- [CVE-2019-10314](https://cve.now/CVE-2019-10314.md): Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM. (no CVSS, Jenkins project Jenkins Koji Plugin · org.jenkins-ci.plugin…)
- [CVE-2019-10315](https://cve.now/CVE-2019-10315.md): Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF. (no CVSS, Jenkins project Jenkins GitHub Authentication Plugin · org.…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-04-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.