# CVEs published 2019-05-06

47 CVEs were published on May 6, 2019: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-18279](https://cve.now/CVE-2017-18279.md): Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon (no CVSS, Qualcomm Technologies Small Cell SoC, Snapdragon Mobile, Sn…)
- [CVE-2017-18278](https://cve.now/CVE-2017-18278.md): An integer underflow may occur due to lack of check when received data length from font\_mgr\_qsee\_request\_service is bigger than the minimal (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2017-18276](https://cve.now/CVE-2017-18276.md): Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mob (no CVSS, Qualcomm Technologies Snapdragon Mobile, Snapdragon Wear)
- [CVE-2017-18275](https://cve.now/CVE-2017-18275.md): A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdrag (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2017-18274](https://cve.now/CVE-2017-18274.md): While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2017-18173](https://cve.now/CVE-2017-18173.md): In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 4 (no CVSS, Qualcomm Technologies Snapdragon Mobile)
- [CVE-2017-18157](https://cve.now/CVE-2017-18157.md): A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2017-18156](https://cve.now/CVE-2017-18156.md): While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdrag (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2017-15841](https://cve.now/CVE-2017-15841.md): When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version SD 410/12, SD 425, (no CVSS, Qualcomm Technologies Snapdragon Mobile)
- [CVE-2017-18131](https://cve.now/CVE-2017-18131.md): In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8 (no CVSS, Qualcomm Technologies Snapdragon Automobile, Snapdragon Mob…)
- [CVE-2019-11569](https://cve.now/CVE-2019-11569.md): Veeam ONE Reporter 9.5.0.3201 allows CSRF. (no CVSS)
- [CVE-2019-10999](https://cve.now/CVE-2019-10999.md): The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. (no CVSS)
- [CVE-2018-18979](https://cve.now/CVE-2018-18979.md): An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. (no CVSS)
- [CVE-2018-18978](https://cve.now/CVE-2018-18978.md): An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. (no CVSS)
- [CVE-2018-18977](https://cve.now/CVE-2018-18977.md): An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. (no CVSS)
- [CVE-2018-18976](https://cve.now/CVE-2018-18976.md): An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. (no CVSS)
- [CVE-2018-18975](https://cve.now/CVE-2018-18975.md): An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. (no CVSS)
- [CVE-2018-4067](https://cve.now/CVE-2018-4067.md): An exploitable information disclosure vulnerability exists in the ACEManager template\_load.cgi functionality of Sierra Wireless AirLink ES45 (no CVSS, Sierra Wireless)
- [CVE-2018-13990](https://cve.now/CVE-2018-13990.md): The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions prior to 1.35 is vulnerable to brute-force attacks, because of Improper Res (CVSS 8.6)
- [CVE-2018-4063](https://cve.now/CVE-2018-4063.md): An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. (CVSS 8.8, KEV, Sierra Wireless)
- [CVE-2018-4066](https://cve.now/CVE-2018-4066.md): An exploitable cross-site request forgery vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. (no CVSS, Sierra Wireless)
- [CVE-2018-4062](https://cve.now/CVE-2018-4062.md): A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. (no CVSS, Sierra Wireless)
- [CVE-2018-4073](https://cve.now/CVE-2018-4073.md): An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet\_Task.cgi functionality of Sierra Wireless AirLink (no CVSS, Sierra Wireless)
- [CVE-2018-4072](https://cve.now/CVE-2018-4072.md): An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet\_Task.cgi functionality of Sierra Wireless AirLink (no CVSS, Sierra Wireless)
- [CVE-2018-13983](https://cve.now/CVE-2018-13983.md): ImpressCMS 1.3.10 has XSS via the PATH\_INFO to htdocs/install/index.php, htdocs/install/page\_langselect.php, or htdocs/install/page\_modcheck (no CVSS, impresscms/impresscms)
- [CVE-2018-4071](https://cve.now/CVE-2018-4071.md): An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet\_Task.cgi functionality of Sierra Wireless AirLin (no CVSS, Sierra Wireless)
- [CVE-2018-4070](https://cve.now/CVE-2018-4070.md): An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet\_Task.cgi functionality of Sierra Wireless AirLin (no CVSS, Sierra Wireless)
- [CVE-2018-4065](https://cve.now/CVE-2018-4065.md): An exploitable cross-site scripting vulnerability exists in the ACEManager ping\_result.cgi functionality of Sierra Wireless AirLink ES450 FW (no CVSS, Sierra Wireless)
- [CVE-2018-4061](https://cve.now/CVE-2018-4061.md): An exploitable command injection vulnerability exists in the ACEManager iplogging.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9. (no CVSS, Sierra Wireless)
- [CVE-2018-4068](https://cve.now/CVE-2018-4068.md): An exploitable information disclosure vulnerability exists in the ACEManager functionality of Sierra Wireless AirLink ES450 FW 4.9.3. (no CVSS, Sierra Wireless)
- [CVE-2019-11807](https://cve.now/CVE-2019-11807.md): The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update\_attachm (no CVSS)
- [CVE-2018-4069](https://cve.now/CVE-2018-4069.md): An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. (no CVSS, Sierra Wireless)
- [CVE-2018-17202](https://cve.now/CVE-2018-17202.md): Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which cou (no CVSS, Apache Commons Imaging · org.apache.sanselan:sanselan)
- [CVE-2018-17201](https://cve.now/CVE-2018-17201.md): Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack (no CVSS, Apache Commons Imaging · org.apache.sanselan:sanselan)
- [CVE-2019-5430](https://cve.now/CVE-2019-5430.md): In UniFi Video 3.10.0 and prior, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server confi (no CVSS, UniFi Video Server)
- [CVE-2019-5434](https://cve.now/CVE-2019-5434.md): An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize() call on the "what" para (no CVSS, Revive Adserver)
- [CVE-2019-5433](https://cve.now/CVE-2019-5433.md): A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.p (no CVSS, Revive Adserver)
- [CVE-2019-5432](https://cve.now/CVE-2019-5432.md): A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions \< 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5. (no CVSS, mqtt-packet)
- [CVE-2019-5431](https://cve.now/CVE-2019-5431.md): This vulnerability was caused by an incomplete fix to CVE-2017-0911. (no CVSS, Twitter Kit for iOS)
- [CVE-2019-10249](https://cve.now/CVE-2019-10249.md): All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been c (no CVSS, The Eclipse Foundation Eclipse Xtext · org.eclipse.xtext… +1)
- [CVE-2019-3799](https://cve.now/CVE-2019-3799.md): Directory Traversal with spring-cloud-config-server (no CVSS, Spring Cloud Config · org.springframework.cloud:spring-clou…)
- [CVE-2019-3797](https://cve.now/CVE-2019-3797.md): Additional information exposure with Spring Data JPA derived queries (CVSS 3.5, Spring Boot · org.springframework.data:spring-data-jpa)
- [CVE-2019-3552](https://cve.now/CVE-2019-3552.md): C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. (no CVSS, Facebook Thrift)
- [CVE-2019-3558](https://cve.now/CVE-2019-3558.md): Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS, Facebook Thrift)
- [CVE-2019-3559](https://cve.now/CVE-2019-3559.md): Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS, Facebook Thrift)
- [CVE-2019-3564](https://cve.now/CVE-2019-3564.md): Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. (no CVSS, Facebook Thrift · github.com/facebook/fbthrift)
- [CVE-2019-3565](https://cve.now/CVE-2019-3565.md): Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown (no CVSS, Facebook Thrift)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.