# CVEs published 2019-05-22

165 CVEs were published on May 22, 2019: 2 critical, 5 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2018-7803](https://cve.now/CVE-2018-7803.md): A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could caus (no CVSS, Triconex TriStation Emulator)
- [CVE-2018-7844](https://cve.now/CVE-2018-7844.md): A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2019-6808](https://cve.now/CVE-2019-6808.md): A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Prem (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2019-6807](https://cve.now/CVE-2019-6807.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2019-6806](https://cve.now/CVE-2019-6806.md): A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7857](https://cve.now/CVE-2018-7857.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7856](https://cve.now/CVE-2018-7856.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7855](https://cve.now/CVE-2018-7855.md): A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium wh (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7201](https://cve.now/CVE-2018-7201.md): CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel. (no CVSS)
- [CVE-2018-7854](https://cve.now/CVE-2018-7854.md): A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium wh (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7853](https://cve.now/CVE-2018-7853.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7852](https://cve.now/CVE-2018-7852.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (CVSS 7.5, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7845](https://cve.now/CVE-2018-7845.md): A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7850](https://cve.now/CVE-2018-7850.md): A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modic (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7847](https://cve.now/CVE-2018-7847.md): A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Prem (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7842](https://cve.now/CVE-2018-7842.md): A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Mo (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7848](https://cve.now/CVE-2018-7848.md): A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7843](https://cve.now/CVE-2018-7843.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium w (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7849](https://cve.now/CVE-2018-7849.md): A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium wh (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7846](https://cve.now/CVE-2018-7846.md): A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, (no CVSS, Modicon M580 Modicon M340 Modicon Quantum Modicon Premium)
- [CVE-2018-7851](https://cve.now/CVE-2018-7851.md): CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA3 (no CVSS, Modicon M580 with firmware prior to V2.50 Modicon M340 with…)
- [CVE-2019-6816](https://cve.now/CVE-2019-6816.md): In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with poss (no CVSS, Modicon Quantum - all firmware versions)
- [CVE-2019-6815](https://cve.now/CVE-2019-6815.md): In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of servi (no CVSS, Modicon Quantum - all firmware versions)
- [CVE-2018-7788](https://cve.now/CVE-2018-7788.md): A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. (no CVSS, Modicon Quantum with firmware versions prior to V2.40.)
- [CVE-2018-7834](https://cve.now/CVE-2018-7834.md): A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL wit (no CVSS, ConneXium Gateway, TSXETG100 - all versions)
- [CVE-2019-6812](https://cve.now/CVE-2019-6812.md): A CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware versions prior to V1.7 IR 19 which could cause a (no CVSS, Modicon RTU Module, BMX-NOR-0200H with firmware versions pr…)
- [CVE-2017-5863](https://cve.now/CVE-2017-5863.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. (no CVSS)
- [CVE-2019-6819](https://cve.now/CVE-2019-6819.md): A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could cause a possible Denial of Service when spe (CVSS 7.5, Modicon Controllers, Modicon M340 - firmware versions prior…)
- [CVE-2019-6821](https://cve.now/CVE-2019-6821.md): CWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of the TCP connection when using Ethernet commun (no CVSS, Modicon Controllers, Modicon M580 firmware versions prior t…)
- [CVE-2019-6820](https://cve.now/CVE-2019-6820.md): A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP (CVSS 8.2, Modicon and PacDrive Controller, All versions of: Modicon M…)
- [CVE-2019-6814](https://cve.now/CVE-2019-6814.md): A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impa (no CVSS, ÊNET55XX Encoder with firmware prior to)
- [CVE-2017-5864](https://cve.now/CVE-2017-5864.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2018-7823](https://cve.now/CVE-2018-7823.md): A Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware (no CVSS, SoMachine Basic and Modicon M221, SoMachine Basic, all vers…)
- [CVE-2018-7822](https://cve.now/CVE-2018-7822.md): An Incorrect Default Permissions (CWE-276) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versi (no CVSS, SoMachine Basic and Modicon M221, SoMachine Basic, all vers…)
- [CVE-2018-7821](https://cve.now/CVE-2018-7821.md): An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmwar (CVSS 7.5, SoMachine Basic and Modicon M221, SoMachine Basic, all vers…)
- [CVE-2018-7829](https://cve.now/CVE-2018-7829.md): An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2018-7828](https://cve.now/CVE-2018-7828.md): A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2017-5871](https://cve.now/CVE-2017-5871.md): Odoo Version \<= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. (no CVSS)
- [CVE-2018-7827](https://cve.now/CVE-2018-7827.md): A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2018-7826](https://cve.now/CVE-2018-7826.md): A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2018-7825](https://cve.now/CVE-2018-7825.md): A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker t (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2018-7816](https://cve.now/CVE-2018-7816.md): A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that coul (no CVSS, Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enha…)
- [CVE-2018-7824](https://cve.now/CVE-2018-7824.md): An Externally Controlled Reference to a Resource (CWE-610) vulnerability exists in Schneider Electric Modbus Serial Driver (For 64-bit Windo (no CVSS, Schneider Electric Modbus Serial Driver)
- [CVE-2017-5984](https://cve.now/CVE-2017-5984.md): In libavcodec in Libav 9.21, ff\_h264\_execute\_ref\_pic\_marking() has a heap-based buffer over-read. (no CVSS)
- [CVE-2018-7840](https://cve.now/CVE-2018-7840.md): A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacke (no CVSS, VideoXpert OpsCenter versions prior to)
- [CVE-2018-7841](https://cve.now/CVE-2018-7841.md): A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an i (CVSS 9.8, KEV, U.motion Builder software)
- [CVE-2017-6912](https://cve.now/CVE-2017-6912.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. (no CVSS)
- [CVE-2017-8340](https://cve.now/CVE-2017-8340.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. (no CVSS)
- [CVE-2017-8341](https://cve.now/CVE-2017-8341.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. (no CVSS)
- [CVE-2017-8777](https://cve.now/CVE-2017-8777.md): Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization. (no CVSS)
- [CVE-2017-9808](https://cve.now/CVE-2017-9808.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2017-9809](https://cve.now/CVE-2017-9809.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure. (no CVSS)
- [CVE-2018-12886](https://cve.now/CVE-2018-12886.md): stack\_protect\_prologue in cfgexpand.c and stack\_protect\_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain (no CVSS)
- [CVE-2019-7844](https://cve.now/CVE-2019-7844.md): Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. (no CVSS, Adobe Media Encoder)
- [CVE-2019-7842](https://cve.now/CVE-2019-7842.md): Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. (no CVSS, Adobe Media Encoder)
- [CVE-2019-5627](https://cve.now/CVE-2019-5627.md): BlueCats Reveal iOS App Insecure Storage (CVSS 2.8, BlueCats Reveal)
- [CVE-2019-5626](https://cve.now/CVE-2019-5626.md): BlueCats Reveal Android App Insecure Storage (CVSS 2.8, BlueCats Reveal)
- [CVE-2019-5625](https://cve.now/CVE-2019-5625.md): Eaton Halo Home Android App Insecure Storage (CVSS 2.8, Eaton HALO Home)
- [CVE-2019-7837](https://cve.now/CVE-2019-7837.md): Adobe Flash Player versions 32.0.0.171 and earlier, 32.0.0.171 and earlier, and 32.0.0.171 and earlier have a use after free vulnerability. (no CVSS, Adobe Flash Player)
- [CVE-2019-7841](https://cve.now/CVE-2019-7841.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7836](https://cve.now/CVE-2019-7836.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7835](https://cve.now/CVE-2019-7835.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7834](https://cve.now/CVE-2019-7834.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7833](https://cve.now/CVE-2019-7833.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7832](https://cve.now/CVE-2019-7832.md): Adobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and e (no CVSS, Adobe Acrobat and Reader)
- [CVE-2018-14729](https://cve.now/CVE-2018-14729.md): The database backup feature in upload/source/admincp/admincp\_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2019-11536](https://cve.now/CVE-2019-11536.md): Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0, 2.24.0, 3.0.0, 3.1.0, 3.1.16, 3.2.3, 3.2.6, 3.5.0, 3.6.0, and 3.6.1, when WebHM (no CVSS)
- [CVE-2019-7831](https://cve.now/CVE-2019-7831.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12167](https://cve.now/CVE-2019-12167.md): httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter. (no CVSS)
- [CVE-2019-7830](https://cve.now/CVE-2019-7830.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7829](https://cve.now/CVE-2019-7829.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8442](https://cve.now/CVE-2019-8442.md): The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8. (no CVSS, Atlassian Jira)
- [CVE-2019-7828](https://cve.now/CVE-2019-7828.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-3402](https://cve.now/CVE-2019-3402.md): The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to (no CVSS, Atlassian Jira)
- [CVE-2019-7827](https://cve.now/CVE-2019-7827.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8443](https://cve.now/CVE-2019-8443.md): The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1. (no CVSS, Atlassian Jira)
- [CVE-2019-7825](https://cve.now/CVE-2019-7825.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-3403](https://cve.now/CVE-2019-3403.md): The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 bef (no CVSS, Atlassian Jira)
- [CVE-2019-7826](https://cve.now/CVE-2019-7826.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7824](https://cve.now/CVE-2019-7824.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2018-7202](https://cve.now/CVE-2018-7202.md): An issue was discovered in ProjectSend before r1053. (no CVSS)
- [CVE-2019-7823](https://cve.now/CVE-2019-7823.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7822](https://cve.now/CVE-2019-7822.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-3401](https://cve.now/CVE-2019-3401.md): The ManageFilters.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to enumera (no CVSS, Atlassian Jira)
- [CVE-2019-7821](https://cve.now/CVE-2019-7821.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7818](https://cve.now/CVE-2019-7818.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-10132](https://cve.now/CVE-2019-10132.md): A vulnerability was found in libvirt \>= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. (CVSS 8.8, libvirt)
- [CVE-2017-6514](https://cve.now/CVE-2017-6514.md): WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a / (no CVSS)
- [CVE-2019-11231](https://cve.now/CVE-2019-11231.md): An issue was discovered in GetSimple CMS through 3.3.15. (no CVSS)
- [CVE-2019-11634](https://cve.now/CVE-2019-11634.md): Citrix Workspace App before 1904 for Windows has Incorrect Access Control. (CVSS 9.8, KEV)
- [CVE-2019-11880](https://cve.now/CVE-2019-11880.md): CommSy through 8.6.5 has SQL Injection via the cid parameter. (no CVSS)
- [CVE-2019-7820](https://cve.now/CVE-2019-7820.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7813](https://cve.now/CVE-2019-7813.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7814](https://cve.now/CVE-2019-7814.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7817](https://cve.now/CVE-2019-7817.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12044](https://cve.now/CVE-2019-12044.md): A Buffer Overflow exists in Citrix NetScaler Gateway 10.5.x before 10.5.70.x, 11.1.x before 11.1.59.10, 12.0.x before 12.0.59.8, and 12.1.x (no CVSS)
- [CVE-2019-7812](https://cve.now/CVE-2019-7812.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7811](https://cve.now/CVE-2019-7811.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7810](https://cve.now/CVE-2019-7810.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7809](https://cve.now/CVE-2019-7809.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7808](https://cve.now/CVE-2019-7808.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7807](https://cve.now/CVE-2019-7807.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12046](https://cve.now/CVE-2019-12046.md): LemonLDAP::NG -2.0.3 has Incorrect Access Control. (no CVSS)
- [CVE-2019-7806](https://cve.now/CVE-2019-7806.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12279](https://cve.now/CVE-2019-12279.md): Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). (no CVSS)
- [CVE-2019-7805](https://cve.now/CVE-2019-7805.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7804](https://cve.now/CVE-2019-7804.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7803](https://cve.now/CVE-2019-7803.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7802](https://cve.now/CVE-2019-7802.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7801](https://cve.now/CVE-2019-7801.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7800](https://cve.now/CVE-2019-7800.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12102](https://cve.now/CVE-2019-12102.md): Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselect (no CVSS)
- [CVE-2019-7799](https://cve.now/CVE-2019-7799.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7798](https://cve.now/CVE-2019-7798.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7797](https://cve.now/CVE-2019-7797.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2018-1991](https://cve.now/CVE-2018-1991.md): IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying s (CVSS 2.7, IBM API Connect)
- [CVE-2019-7796](https://cve.now/CVE-2019-7796.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7795](https://cve.now/CVE-2019-7795.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12247](https://cve.now/CVE-2019-12247.md): QEMU 3.0.0 has an Integer Overflow because the qga/commands\*.c files do not check the length of the argument list or the number of environme (no CVSS)
- [CVE-2019-7794](https://cve.now/CVE-2019-7794.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7793](https://cve.now/CVE-2019-7793.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7792](https://cve.now/CVE-2019-7792.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-12277](https://cve.now/CVE-2019-12277.md): Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. (no CVSS, Blogifier.Core)
- [CVE-2019-7788](https://cve.now/CVE-2019-7788.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7790](https://cve.now/CVE-2019-7790.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7791](https://cve.now/CVE-2019-7791.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7789](https://cve.now/CVE-2019-7789.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7787](https://cve.now/CVE-2019-7787.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7785](https://cve.now/CVE-2019-7785.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7784](https://cve.now/CVE-2019-7784.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7786](https://cve.now/CVE-2019-7786.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7783](https://cve.now/CVE-2019-7783.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7782](https://cve.now/CVE-2019-7782.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7781](https://cve.now/CVE-2019-7781.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7780](https://cve.now/CVE-2019-7780.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7779](https://cve.now/CVE-2019-7779.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7778](https://cve.now/CVE-2019-7778.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7777](https://cve.now/CVE-2019-7777.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7776](https://cve.now/CVE-2019-7776.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2016-10750](https://cve.now/CVE-2016-10750.md): In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. (no CVSS, com.hazelcast:hazelcast)
- [CVE-2019-7775](https://cve.now/CVE-2019-7775.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7774](https://cve.now/CVE-2019-7774.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7772](https://cve.now/CVE-2019-7772.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7773](https://cve.now/CVE-2019-7773.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7771](https://cve.now/CVE-2019-7771.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7770](https://cve.now/CVE-2019-7770.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7768](https://cve.now/CVE-2019-7768.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7767](https://cve.now/CVE-2019-7767.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7766](https://cve.now/CVE-2019-7766.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7765](https://cve.now/CVE-2019-7765.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7764](https://cve.now/CVE-2019-7764.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7763](https://cve.now/CVE-2019-7763.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7762](https://cve.now/CVE-2019-7762.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7761](https://cve.now/CVE-2019-7761.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7760](https://cve.now/CVE-2019-7760.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7759](https://cve.now/CVE-2019-7759.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7758](https://cve.now/CVE-2019-7758.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier version, 2017.011.30138 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7145](https://cve.now/CVE-2019-7145.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7144](https://cve.now/CVE-2019-7144.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7143](https://cve.now/CVE-2019-7143.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7142](https://cve.now/CVE-2019-7142.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7141](https://cve.now/CVE-2019-7141.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7769](https://cve.now/CVE-2019-7769.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7140](https://cve.now/CVE-2019-7140.md): Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-11841](https://cve.now/CVE-2019-11841.md): A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. (no CVSS, golang.org/x/crypto)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.