# CVEs published 2019-05-13

80 CVEs were published on May 13, 2019: 3 critical, 7 high. Days are UTC.

- [CVE-2019-9618](https://cve.now/CVE-2019-9618.md): The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter. (no CVSS)
- [CVE-2019-8952](https://cve.now/CVE-2019-8952.md): A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. (no CVSS)
- [CVE-2019-8951](https://cve.now/CVE-2019-8951.md): An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. (no CVSS)
- [CVE-2018-16138](https://cve.now/CVE-2018-16138.md): An issue was discovered in the administration page in IPBRICK OS 6.3. (no CVSS)
- [CVE-2018-16137](https://cve.now/CVE-2018-16137.md): An issue was discovered in the Web Management Console in IPBRICK OS 6.3. (no CVSS)
- [CVE-2018-16136](https://cve.now/CVE-2018-16136.md): An issue was discovered in the administrator interface in IPBRICK OS 6.3. (no CVSS)
- [CVE-2019-10053](https://cve.now/CVE-2019-10053.md): An issue was discovered in Suricata 4.1.x before 4.1.4. (no CVSS)
- [CVE-2019-11600](https://cve.now/CVE-2019-11600.md): A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands v (no CVSS)
- [CVE-2018-16139](https://cve.now/CVE-2018-16139.md): Cross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2019-1862](https://cve.now/CVE-2019-1862.md): Cisco IOS XE Software Web UI Command Injection Vulnerability (CVSS 7.2, Cisco IOS XE Software)
- [CVE-2019-1649](https://cve.now/CVE-2019-1649.md): Cisco Secure Boot Hardware Tampering Vulnerability (CVSS 6.7, Cisco Routers)
- [CVE-2019-12083](https://cve.now/CVE-2019-12083.md): The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's sa (no CVSS)
- [CVE-2018-18912](https://cve.now/CVE-2018-18912.md): An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. (no CVSS)
- [CVE-2019-7218](https://cve.now/CVE-2019-7218.md): Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. (no CVSS)
- [CVE-2019-7217](https://cve.now/CVE-2019-7217.md): Citrix ShareFile before 19.12 allows User Enumeration. (no CVSS)
- [CVE-2019-11680](https://cve.now/CVE-2019-11680.md): KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading a web shell as a product category image. (no CVSS)
- [CVE-2019-3702](https://cve.now/CVE-2019-3702.md): A Remote Code Execution issue in the DNS Query Web UI in Lifesize Icon LS\_RM3\_3.7.0 (2421) allows remote authenticated attackers to execute (no CVSS)
- [CVE-2019-9727](https://cve.now/CVE-2019-9727.md): Unauthenticated password hash disclosure in the User.getUserPWD method in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers (no CVSS)
- [CVE-2019-9726](https://cve.now/CVE-2019-9726.md): Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of t (no CVSS)
- [CVE-2019-10050](https://cve.now/CVE-2019-10050.md): A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. (no CVSS)
- [CVE-2019-8342](https://cve.now/CVE-2019-8342.md): A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set. (no CVSS)
- [CVE-2019-7690](https://cve.now/CVE-2019-7690.md): In MobaTek MobaXterm Personal Edition v11.1 Build 3860, the SSH private key and its password can be retrieved from process memory for the li (no CVSS)
- [CVE-2019-4259](https://cve.now/CVE-2019-4259.md): A security vulnerability has been identified in IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 with CES stack enabled that (CVSS 4.0, IBM Spectrum Scale)
- [CVE-2015-9287](https://cve.now/CVE-2015-9287.md): Directory Traversal was discovered in University of Cambridge mod\_ucam\_webauth before 2.0.2. (no CVSS)
- [CVE-2018-4029](https://cve.now/CVE-2018-4029.md): An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker (CVSS 10.0, Novatek)
- [CVE-2018-4024](https://cve.now/CVE-2018-4024.md): An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the (CVSS 7.5, Novatek)
- [CVE-2018-4027](https://cve.now/CVE-2018-4027.md): An exploitable denial-of-service vulnerability exists in the XML\_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the An (CVSS 5.3, Novatek)
- [CVE-2018-4028](https://cve.now/CVE-2018-4028.md): An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1 (CVSS 5.3, Novatek)
- [CVE-2018-4018](https://cve.now/CVE-2018-4018.md): An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. (CVSS 10.0, Novatek)
- [CVE-2018-4025](https://cve.now/CVE-2018-4025.md): An exploitable denial-of-service vulnerability exists in the XML\_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the (CVSS 7.5, Novatek)
- [CVE-2018-4026](https://cve.now/CVE-2018-4026.md): An exploitable denial-of-service vulnerability exists in the XML\_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Ank (CVSS 7.5, Novatek)
- [CVE-2018-4023](https://cve.now/CVE-2018-4023.md): An exploitable code execution vulnerability exists in the XML\_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker (CVSS 10.0, Novatek)
- [CVE-2018-4017](https://cve.now/CVE-2018-4017.md): An exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam running version RoavA1SWV1.9. (CVSS 7.1, Anker)
- [CVE-2018-4016](https://cve.now/CVE-2018-4016.md): An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. (CVSS 8.0, Anker)
- [CVE-2018-4014](https://cve.now/CVE-2018-4014.md): An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. (CVSS 8.0, Anker)
- [CVE-2019-11429](https://cve.now/CVE-2019-11429.md): CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro) is vulnerable to Re (no CVSS)
- [CVE-2019-12047](https://cve.now/CVE-2019-12047.md): Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by (no CVSS)
- [CVE-2019-3684](https://cve.now/CVE-2019-3684.md): susemanager installer creates world-readable swap files (CVSS 4.0, SUSE Manager · Uyuni)
- [CVE-2019-7409](https://cve.now/CVE-2019-7409.md): Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2019-7411](https://cve.now/CVE-2019-7411.md): Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject (no CVSS)
- [CVE-2019-7404](https://cve.now/CVE-2019-7404.md): An issue was discovered on LG GAMP-7100, GAPM-7200, and GAPM-8000 routers. (no CVSS)
- [CVE-2019-8350](https://cve.now/CVE-2019-8350.md): The Simple - Better Banking application 2.45.0 through 2.45.3 (fixed in 2.46.0) for Android was affected by an information disclosure vulner (CVSS 6.6)
- [CVE-2012-6652](https://cve.now/CVE-2012-6652.md): Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remot (no CVSS)
- [CVE-2018-19990](https://cve.now/CVE-2018-19990.md): In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devic (no CVSS)
- [CVE-2018-19989](https://cve.now/CVE-2018-19989.md): In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DI (no CVSS)
- [CVE-2018-19988](https://cve.now/CVE-2018-19988.md): In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR- (no CVSS)
- [CVE-2018-19987](https://cve.now/CVE-2018-19987.md): D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01\_01\_i3se\_BETA, (no CVSS)
- [CVE-2018-19986](https://cve.now/CVE-2018-19986.md): In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B (no CVSS)
- [CVE-2018-15128](https://cve.now/CVE-2018-15128.md): An issue was discovered in Polycom Group Series 6.1.6.1 and earlier, HDX 3.1.12 and earlier, and Pano 1.1.1 and earlier. (no CVSS)
- [CVE-2018-19048](https://cve.now/CVE-2018-19048.md): Simditor through 2.3.21 allows DOM XSS via an onload attribute within a malformed SVG element. (no CVSS, simditor)
- [CVE-2019-12043](https://cve.now/CVE-2019-12043.md): In remarkable 1.7.1, lib/parser\_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as dem (no CVSS, remarkable)
- [CVE-2018-18872](https://cve.now/CVE-2018-18872.md): The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event\_title parameter in a wp-admin/admin.php?page=cale (no CVSS)
- [CVE-2018-18524](https://cve.now/CVE-2018-18524.md): Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. (no CVSS)
- [CVE-2018-16623](https://cve.now/CVE-2018-16623.md): Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown. (no CVSS)
- [CVE-2018-16624](https://cve.now/CVE-2018-16624.md): panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. (no CVSS)
- [CVE-2018-16625](https://cve.now/CVE-2018-16625.md): index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element. (no CVSS)
- [CVE-2018-16626](https://cve.now/CVE-2018-16626.md): index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name. (no CVSS)
- [CVE-2018-16639](https://cve.now/CVE-2018-16639.md): Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation. (no CVSS)
- [CVE-2018-18558](https://cve.now/CVE-2018-18558.md): An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. (no CVSS)
- [CVE-2018-15530](https://cve.now/CVE-2018-15530.md): Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript c (no CVSS)
- [CVE-2018-12304](https://cve.now/CVE-2018-12304.md): Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple applicati (no CVSS)
- [CVE-2018-12303](https://cve.now/CVE-2018-12303.md): Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via directory names. (no CVSS)
- [CVE-2018-12302](https://cve.now/CVE-2018-12302.md): Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via (no CVSS)
- [CVE-2018-12301](https://cve.now/CVE-2018-12301.md): Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL (no CVSS)
- [CVE-2018-12300](https://cve.now/CVE-2018-12300.md): Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via (no CVSS)
- [CVE-2018-12299](https://cve.now/CVE-2018-12299.md): Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names. (no CVSS)
- [CVE-2018-12298](https://cve.now/CVE-2018-12298.md): Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL pa (no CVSS)
- [CVE-2018-12297](https://cve.now/CVE-2018-12297.md): Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names. (no CVSS)
- [CVE-2018-12296](https://cve.now/CVE-2018-12296.md): Insufficient access control in /api/external/7.0/system.System.get\_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain infor (no CVSS)
- [CVE-2018-12295](https://cve.now/CVE-2018-12295.md): SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId (no CVSS)
- [CVE-2018-14714](https://cve.now/CVE-2018-14714.md): System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load (no CVSS)
- [CVE-2018-14713](https://cve.now/CVE-2018-14713.md): Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory (no CVSS)
- [CVE-2018-14712](https://cve.now/CVE-2018-14712.md): Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL para (no CVSS)
- [CVE-2018-14711](https://cve.now/CVE-2018-14711.md): Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-chan (no CVSS)
- [CVE-2018-14710](https://cve.now/CVE-2018-14710.md): Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL par (no CVSS)
- [CVE-2018-19037](https://cve.now/CVE-2018-19037.md): On Virgin Media wireless router 3.0 hub devices, the web interface is vulnerable to denial of service. (no CVSS)
- [CVE-2019-12041](https://cve.now/CVE-2019-12041.md): lib/common/html\_re.js in remarkable 1.7.1 allows Regular Expression Denial of Service (ReDoS) via a CDATA section. (no CVSS, remarkable)
- [CVE-2019-11888](https://cve.now/CVE-2019-11888.md): Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers (no CVSS)
- [CVE-2018-20838](https://cve.now/CVE-2018-20838.md): ampforwp\_save\_steps\_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS. (no CVSS)
- [CVE-2019-11886](https://cve.now/CVE-2019-11886.md): The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp\_option\_update (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.