CVEs published May 15, 2019
69 CVEs were published on May 15, 2019: 1 critical, 7 high.
- Published
- 69
- Critical
- 1
- High
- 7
- Medium
- 35
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 39
Most affected products
- Cisco NX-OS Software
- 30
- Cisco WebEx WRF Player
- 3
- FreeBSD
- 2
- capstone
- 1
- Cisco 550X Series Stackable Managed Switches
- 1
- Cisco Small Business 300 Series Managed Switches
- 1
- Cisco Video Surveillance Manager
- 1
- com.thoughtworks.xstream:xstream
- 1
- Dell EMC RecoverPoint
- 1
- kie-server · org.kie.server:kie-server-common
- 1
Critical 1
High 7
- CVE-2019-12098In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack.
- CVE-2019-1806Cisco Small Business Series Switches Simple Network Management Protocol Denial of Service VulnerabilityCisco 550X Series Stackable Managed Switches
- CVE-2019-1772Cisco Webex Network Recording Player Arbitrary Code Execution VulnerabilityCisco WebEx WRF Player
- CVE-2019-1773Cisco Webex Network Recording Player Arbitrary Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2019-1771Cisco Webex Network Recording Player Arbitrary Code Execution VulnerabilityCisco WebEx WRF Player
- CVE-2019-1717Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure VulnerabilityCisco Video Surveillance Manager
- CVE-2019-3586McAfee Endpoint Security firewall not always acting on GTI lookup resultsMcAfee Endpoint Security
Medium, low and unrated 61
- CVE-2019-1814Cisco Small Business 300 Series Managed Switches DHCP Denial of Service VulnerabilityCisco Small Business 300 Series Managed Switches
- CVE-2019-12111A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpse
- CVE-2019-12110An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect
- CVE-2019-12109A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in
- CVE-2019-12108A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in
- CVE-2019-12107The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap
- CVE-2019-12106The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After
- CVE-2019-1811Cisco NX-OS CLI Command Software Image Signature Verification VulnerabilitiesCisco NX-OS Software
- CVE-2019-1812Cisco NX-OS CLI Command Software Image Signature Verification VulnerabilitiesCisco NX-OS Software
- CVE-2019-1813Cisco NX-OS CLI Command Software Image Signature Verification VulnerabilityCisco NX-OS Software
- CVE-2019-1808Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification VulnerabilityCisco NX-OS Software
- CVE-2019-1809Cisco NX-OS Software Patch Signature Verification Bypass VulnerabilityCisco NX-OS Software
- CVE-2019-1810Cisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification VulnerabilityCisco NX-OS Software
- CVE-2019-1791Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1795Cisco FXOS and NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1783Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1784Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1790Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-9196The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via
- CVE-2019-1781Cisco FXOS and NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1782Cisco FXOS and NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1779Cisco FXOS and NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1778Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1774Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1775Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1776Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-10111An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2.
- CVE-2019-10110An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4,
- CVE-2019-1770Cisco NX-OS Software Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1769Cisco NX-OS Software Line Card Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-10109An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4,
- CVE-2019-10108An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, an
- CVE-2019-10640An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4.
- CVE-2019-1735Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)Cisco NX-OS Software
- CVE-2019-1767Cisco NX-OS Software Buffer Overflow and Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1010258nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow.nanosvg library nanosvg
- CVE-2019-11224HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection.
- CVE-2013-7285Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run com.thoughtworks.xstream:xstream
- CVE-2019-1730Cisco NX-OS Software Bash Bypass Guest Shell VulnerabilityCisco NX-OS Software
- CVE-2019-1731Cisco NX-OS Software SSH Key Information Disclosure VulnerabilityCisco NX-OS Software
- CVE-2019-1732Cisco NX-OS Software Remote Package Manager Command Injection VulnerabilityCisco NX-OS Software
- CVE-2019-1733Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting VulnerabilityCisco NX-OS Software
- CVE-2019-1727Cisco NX-OS Software Python Parser Privilege Escalation VulnerabilityCisco NX-OS Software
- CVE-2019-1728Cisco FXOS and NX-OS Software Secure Configuration Bypass VulnerabilityCisco NX-OS Software
- CVE-2019-1729Cisco NX-OS Software Arbitrary File Overwrite VulnerabilityCisco NX-OS Software
- CVE-2019-1726Cisco NX-OS Software CLI Bypass to Internal Service VulnerabilityCisco NX-OS Software
- CVE-2019-3602Cross site scripting vulnerability in McAfee NSM impacting authenticated usersMcAfee Network Security Manager
- CVE-2016-7043It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java properkie-server · org.kie.server:kie-server-common
- CVE-2019-3727OS command injection vulnerabilityDell EMC RecoverPoint
- CVE-2019-3724Authorization Bypass VulnerabilityRSA Netwitness PlatformRSA Netwitness Platform
- CVE-2019-8936NTP through 4.2.8p12 has a NULL Pointer Dereference.
- CVE-2019-5598In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-REFreeBSD
- CVE-2019-5597In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a FreeBSD
- CVE-2019-5526VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application.VMware Workstation
- CVE-2014-9917An issue was discovered in Bilboplanet 2.0.
- CVE-2014-9918An issue was discovered in Bilboplanet 2.0.
- CVE-2014-9919An issue was discovered in Bilboplanet 2.0.
- CVE-2016-10719TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing
- CVE-2016-7151Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.capstone
- CVE-2019-11833fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow l
- CVE-2019-12101coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attack