# CVEs published 2019-05-15

69 CVEs were published on May 15, 2019: 1 critical, 7 high. Days are UTC.

- [CVE-2019-1814](https://cve.now/CVE-2019-1814.md): Cisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability (CVSS 6.8, Cisco Small Business 300 Series Managed Switches)
- [CVE-2019-12098](https://cve.now/CVE-2019-12098.md): In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. (CVSS 7.4)
- [CVE-2019-12111](https://cve.now/CVE-2019-12111.md): A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpse (no CVSS)
- [CVE-2019-12110](https://cve.now/CVE-2019-12110.md): An AddPortMapping Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in upnpredirect (no CVSS)
- [CVE-2019-12109](https://cve.now/CVE-2019-12109.md): A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in (no CVSS)
- [CVE-2019-12108](https://cve.now/CVE-2019-12108.md): A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in (no CVSS)
- [CVE-2019-12107](https://cve.now/CVE-2019-12107.md): The upnp\_event\_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap (no CVSS)
- [CVE-2019-12106](https://cve.now/CVE-2019-12106.md): The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After (no CVSS)
- [CVE-2019-1811](https://cve.now/CVE-2019-1811.md): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1812](https://cve.now/CVE-2019-1812.md): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1813](https://cve.now/CVE-2019-1813.md): Cisco NX-OS CLI Command Software Image Signature Verification Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1808](https://cve.now/CVE-2019-1808.md): Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1809](https://cve.now/CVE-2019-1809.md): Cisco NX-OS Software Patch Signature Verification Bypass Vulnerability (CVSS 6.4, Cisco NX-OS Software)
- [CVE-2019-1810](https://cve.now/CVE-2019-1810.md): Cisco Nexus 3000 Series and 9000 Series Switches in NX-OS Mode CLI Command Software Image Signature Verification Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1806](https://cve.now/CVE-2019-1806.md): Cisco Small Business Series Switches Simple Network Management Protocol Denial of Service Vulnerability (CVSS 7.7, Cisco 550X Series Stackable Managed Switches)
- [CVE-2019-1791](https://cve.now/CVE-2019-1791.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1795](https://cve.now/CVE-2019-1795.md): Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1783](https://cve.now/CVE-2019-1783.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1784](https://cve.now/CVE-2019-1784.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1790](https://cve.now/CVE-2019-1790.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-9196](https://cve.now/CVE-2019-9196.md): The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via (no CVSS)
- [CVE-2019-1781](https://cve.now/CVE-2019-1781.md): Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1782](https://cve.now/CVE-2019-1782.md): Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1779](https://cve.now/CVE-2019-1779.md): Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVSS 4.2, Cisco NX-OS Software)
- [CVE-2019-1778](https://cve.now/CVE-2019-1778.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1774](https://cve.now/CVE-2019-1774.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1775](https://cve.now/CVE-2019-1775.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1776](https://cve.now/CVE-2019-1776.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-10111](https://cve.now/CVE-2019-10111.md): An issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. (no CVSS)
- [CVE-2019-1772](https://cve.now/CVE-2019-1772.md): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability (CVSS 7.8, Cisco WebEx WRF Player)
- [CVE-2019-1773](https://cve.now/CVE-2019-1773.md): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities (CVSS 7.8, Cisco WebEx WRF Player)
- [CVE-2019-10110](https://cve.now/CVE-2019-10110.md): An Insecure Permissions issue (issue 1 of 3) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, (no CVSS)
- [CVE-2019-1770](https://cve.now/CVE-2019-1770.md): Cisco NX-OS Software Command Injection Vulnerability (CVSS 4.2, Cisco NX-OS Software)
- [CVE-2019-1769](https://cve.now/CVE-2019-1769.md): Cisco NX-OS Software Line Card Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1771](https://cve.now/CVE-2019-1771.md): Cisco Webex Network Recording Player Arbitrary Code Execution Vulnerability (CVSS 7.8, Cisco WebEx WRF Player)
- [CVE-2019-10109](https://cve.now/CVE-2019-10109.md): An Information Exposure issue (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, (no CVSS)
- [CVE-2019-10108](https://cve.now/CVE-2019-10108.md): An Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, an (no CVSS)
- [CVE-2019-10640](https://cve.now/CVE-2019-10640.md): An issue was discovered in GitLab Community and Enterprise Edition before 11.7.10, 11.8.x before 11.8.6, and 11.9.x before 11.9.4. (no CVSS)
- [CVE-2019-1735](https://cve.now/CVE-2019-1735.md): Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735) (CVSS 4.4, Cisco NX-OS Software)
- [CVE-2019-1767](https://cve.now/CVE-2019-1767.md): Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1010258](https://cve.now/CVE-2019-1010258.md): nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow. (no CVSS, nanosvg library nanosvg)
- [CVE-2019-11224](https://cve.now/CVE-2019-11224.md): HARMAN AMX MVP5150 v2.87.13 devices allow remote OS Command Injection. (no CVSS)
- [CVE-2013-7285](https://cve.now/CVE-2013-7285.md): Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run (no CVSS, com.thoughtworks.xstream:xstream)
- [CVE-2019-1730](https://cve.now/CVE-2019-1730.md): Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability (CVSS 6.0, Cisco NX-OS Software)
- [CVE-2019-1731](https://cve.now/CVE-2019-1731.md): Cisco NX-OS Software SSH Key Information Disclosure Vulnerability (CVSS 5.1, Cisco NX-OS Software)
- [CVE-2019-1732](https://cve.now/CVE-2019-1732.md): Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability (CVSS 6.4, Cisco NX-OS Software)
- [CVE-2019-1733](https://cve.now/CVE-2019-1733.md): Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco NX-OS Software)
- [CVE-2019-1727](https://cve.now/CVE-2019-1727.md): Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability (CVSS 4.2, Cisco NX-OS Software)
- [CVE-2019-1728](https://cve.now/CVE-2019-1728.md): Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1729](https://cve.now/CVE-2019-1729.md): Cisco NX-OS Software Arbitrary File Overwrite Vulnerability (CVSS 6.7, Cisco NX-OS Software)
- [CVE-2019-1726](https://cve.now/CVE-2019-1726.md): Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability (CVSS 5.3, Cisco NX-OS Software)
- [CVE-2019-1717](https://cve.now/CVE-2019-1717.md): Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability (CVSS 7.5, Cisco Video Surveillance Manager)
- [CVE-2019-3586](https://cve.now/CVE-2019-3586.md): McAfee Endpoint Security firewall not always acting on GTI lookup results (CVSS 7.5, McAfee Endpoint Security)
- [CVE-2019-3602](https://cve.now/CVE-2019-3602.md): Cross site scripting vulnerability in McAfee NSM impacting authenticated users (CVSS 4.8, McAfee Network Security Manager)
- [CVE-2016-7043](https://cve.now/CVE-2016-7043.md): It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java proper (CVSS 5.9, kie-server · org.kie.server:kie-server-common)
- [CVE-2019-3727](https://cve.now/CVE-2019-3727.md): OS command injection vulnerability (CVSS 6.4, Dell EMC RecoverPoint)
- [CVE-2019-3725](https://cve.now/CVE-2019-3725.md): Command Injection vulnerability (CVSS 9.8, RSA Netwitness Platform · RSA Security Analytics)
- [CVE-2019-3724](https://cve.now/CVE-2019-3724.md): Authorization Bypass VulnerabilityRSA Netwitness Platform (CVSS 6.5, RSA Netwitness Platform)
- [CVE-2019-8936](https://cve.now/CVE-2019-8936.md): NTP through 4.2.8p12 has a NULL Pointer Dereference. (no CVSS)
- [CVE-2019-5598](https://cve.now/CVE-2019-5598.md): In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RE (no CVSS, FreeBSD)
- [CVE-2019-5597](https://cve.now/CVE-2019-5597.md): In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a (no CVSS, FreeBSD)
- [CVE-2019-5526](https://cve.now/CVE-2019-5526.md): VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. (no CVSS, VMware Workstation)
- [CVE-2014-9917](https://cve.now/CVE-2014-9917.md): An issue was discovered in Bilboplanet 2.0. (no CVSS)
- [CVE-2014-9918](https://cve.now/CVE-2014-9918.md): An issue was discovered in Bilboplanet 2.0. (no CVSS)
- [CVE-2014-9919](https://cve.now/CVE-2014-9919.md): An issue was discovered in Bilboplanet 2.0. (no CVSS)
- [CVE-2016-10719](https://cve.now/CVE-2016-10719.md): TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing (no CVSS)
- [CVE-2016-7151](https://cve.now/CVE-2016-7151.md): Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86\_insn\_reg\_intel in arch/X86/X86Mapping.c. (no CVSS, capstone)
- [CVE-2019-11833](https://cve.now/CVE-2019-11833.md): fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow l (no CVSS)
- [CVE-2019-12101](https://cve.now/CVE-2019-12101.md): coap\_decode\_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.