# CVEs published 2019-05-03

59 CVEs were published on May 3, 2019: 1 critical, 20 high. Days are UTC.

- [CVE-2018-20580](https://cve.now/CVE-2018-20580.md): The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted req (no CVSS)
- [CVE-2019-6619](https://cve.now/CVE-2019-6619.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server ha (no CVSS, F5 BIG-IP)
- [CVE-2019-6618](https://cve.now/CVE-2019-6618.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource Administrator role ca (no CVSS, F5 BIG-IP)
- [CVE-2019-11037](https://cve.now/CVE-2019-11037.md): Out of bounds memory write in PHP Imagick extension (CVSS 4.9, PHP Group PHP Imagick extension)
- [CVE-2019-11036](https://cve.now/CVE-2019-11036.md): Heap over-read in PHP EXIF extension (CVSS 4.8, PHP Group PHP)
- [CVE-2019-6158](https://cve.now/CVE-2019-6158.md): An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in (CVSS 8.7, Lenovo XClarity Administrator)
- [CVE-2019-3400](https://cve.now/CVE-2019-3400.md): The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTM (no CVSS, Atlassian Jira)
- [CVE-2018-20824](https://cve.now/CVE-2018-20824.md): The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site (no CVSS, Atlassian Jira)
- [CVE-2019-3894](https://cve.now/CVE-2019-3894.md): It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run th (CVSS 5.4, Red Hat wildfly)
- [CVE-2019-3805](https://cve.now/CVE-2019-3805.md): A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate (CVSS 5.5, Red Hat wildfly)
- [CVE-2019-6617](https://cve.now/CVE-2019-6617.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role i (no CVSS, F5 BIG-IP)
- [CVE-2019-6616](https://cve.now/CVE-2019-6616.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with TMSH access can ove (no CVSS, F5 BIG-IP)
- [CVE-2019-6614](https://cve.now/CVE-2019-6614.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode (no CVSS, F5 BIG-IP)
- [CVE-2019-6615](https://cve.now/CVE-2019-6615.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, Administrator and Resource Administrator role (no CVSS, F5 BIG-IP)
- [CVE-2019-6613](https://cve.now/CVE-2019-6613.md): On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure (no CVSS, F5 BIG-IP)
- [CVE-2019-6612](https://cve.now/CVE-2019-6612.md): On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted be (no CVSS, F5 BIG-IP)
- [CVE-2019-6611](https://cve.now/CVE-2019-6611.md): When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences o (no CVSS, F5 BIG-IP)
- [CVE-2019-1856](https://cve.now/CVE-2019-1856.md): Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Prime Collaboration Assurance)
- [CVE-2019-1857](https://cve.now/CVE-2019-1857.md): Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability (CVSS 6.1, Cisco HyperFlex HX-Series)
- [CVE-2019-1859](https://cve.now/CVE-2019-1859.md): Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability (CVSS 7.2, Cisco Small Business 200 Series Smart Switches)
- [CVE-2019-1838](https://cve.now/CVE-2019-1838.md): Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Application Policy Infrastructure Controller)
- [CVE-2019-1844](https://cve.now/CVE-2019-1844.md): Cisco Email Security Appliance Filter Bypass Vulnerability (CVSS 5.3, Cisco Email Security Appliance)
- [CVE-2019-1852](https://cve.now/CVE-2019-1852.md): Cisco Prime Network Registrar Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Prime Network Registrar)
- [CVE-2019-1854](https://cve.now/CVE-2019-1854.md): Cisco Expressway Series Directory Traversal Vulnerability (CVSS 4.1, Cisco Expressway)
- [CVE-2019-1817](https://cve.now/CVE-2019-1817.md): Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability (CVSS 8.6, Cisco Web Security Appliance)
- [CVE-2019-1836](https://cve.now/CVE-2019-1836.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal Vulnerability (CVSS 5.5, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1804](https://cve.now/CVE-2019-1804.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability (CVSS 9.8, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1807](https://cve.now/CVE-2019-1807.md): Cisco Umbrella Dashboard Session Management Vulnerability (CVSS 7.6, Cisco Umbrella)
- [CVE-2019-1816](https://cve.now/CVE-2019-1816.md): Cisco Web Security Appliance Privilege Escalation Vulnerability (CVSS 5.3, Cisco Web Security Appliance)
- [CVE-2019-1715](https://cve.now/CVE-2019-1715.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability (CVSS 5.3, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1724](https://cve.now/CVE-2019-1724.md): Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerability (CVSS 8.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2019-1803](https://cve.now/CVE-2019-1803.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability (CVSS 7.8, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1713](https://cve.now/CVE-2019-1713.md): Cisco Adaptive Security Appliance Software Cross-Site Request Forgery Vulnerability (CVSS 8.1, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-1714](https://cve.now/CVE-2019-1714.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN SAML Authentication Bypass Vulnerability (CVSS 5.8, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1705](https://cve.now/CVE-2019-1705.md): Cisco Adaptive Security Appliance Software VPN Denial of Service Vulnerability (CVSS 5.3, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-1706](https://cve.now/CVE-2019-1706.md): Cisco Adaptive Security Appliance Software IPsec Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-1708](https://cve.now/CVE-2019-1708.md): Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1709](https://cve.now/CVE-2019-1709.md): Cisco Firepower Threat Defense Software Command Injection Vulnerability (CVSS 6.0, Cisco Firepower Threat Defense Software)
- [CVE-2019-1701](https://cve.now/CVE-2019-1701.md): Cisco Adaptive Security Appliance and Firepower Threat Defense Software WebVPN Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1703](https://cve.now/CVE-2019-1703.md): Cisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2019-1704](https://cve.now/CVE-2019-1704.md): Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities (CVSS 7.5, Cisco Firepower Threat Defense Software)
- [CVE-2019-1699](https://cve.now/CVE-2019-1699.md): Cisco Firepower Threat Defense Software Command Injection Vulnerability (CVSS 6.7, Cisco Firepower Threat Defense (FTD) Software)
- [CVE-2019-1697](https://cve.now/CVE-2019-1697.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability (CVSS 6.8, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-1694](https://cve.now/CVE-2019-1694.md): Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1695](https://cve.now/CVE-2019-1695.md): Cisco Adaptive Security Appliance and Firepower Threat Defense Software Layer 2 Filtering Bypass Vulnerability (CVSS 4.3, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1696](https://cve.now/CVE-2019-1696.md): Cisco Firepower Threat Defense Software SMB Protocol Preprocessor Detection Engine Denial of Service Vulnerabilities (CVSS 7.5, Cisco Firepower Threat Defense Software)
- [CVE-2019-1693](https://cve.now/CVE-2019-1693.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability (CVSS 7.7, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2019-1687](https://cve.now/CVE-2019-1687.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability (CVSS 6.8, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-1692](https://cve.now/CVE-2019-1692.md): Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability (CVSS 5.3, Cisco Application Policy Infrastructure Controller)
- [CVE-2019-1635](https://cve.now/CVE-2019-1635.md): Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability (CVSS 7.5, Cisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Phone 7…)
- [CVE-2019-1682](https://cve.now/CVE-2019-1682.md): Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability (CVSS 7.8, Cisco Application Policy Infrastructure Controller)
- [CVE-2019-1589](https://cve.now/CVE-2019-1589.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability (CVSS 4.2, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1590](https://cve.now/CVE-2019-1590.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability (CVSS 8.1, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1592](https://cve.now/CVE-2019-1592.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability (CVSS 7.8, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2018-15462](https://cve.now/CVE-2018-15462.md): Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2019-1586](https://cve.now/CVE-2019-1586.md): Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability (CVSS 4.6, Cisco Application Policy Infrastructure Controller)
- [CVE-2019-1587](https://cve.now/CVE-2019-1587.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability (CVSS 4.3, Cisco Application Policy Infrastructure Controller)
- [CVE-2018-15388](https://cve.now/CVE-2018-15388.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2019-11690](https://cve.now/CVE-2019-11690.md): gen\_rand\_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.