# CVEs published 2019-05-23

111 CVEs were published on May 23, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-5804](https://cve.now/CVE-2019-5804.md): Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a (no CVSS, Google Chrome)
- [CVE-2019-12309](https://cve.now/CVE-2019-12309.md): dotCMS before 5.1.0 has a path traversal vulnerability exploitable by an administrator to create files. (no CVSS)
- [CVE-2019-5803](https://cve.now/CVE-2019-5803.md): Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass conten (no CVSS, Google Chrome)
- [CVE-2019-5802](https://cve.now/CVE-2019-5802.md): Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoo (no CVSS, Google Chrome)
- [CVE-2019-5801](https://cve.now/CVE-2019-5801.md): Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via (no CVSS, Google Chrome)
- [CVE-2019-5800](https://cve.now/CVE-2019-5800.md): Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy (no CVSS, Google Chrome)
- [CVE-2019-5799](https://cve.now/CVE-2019-5799.md): Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker (no CVSS, Google Chrome)
- [CVE-2019-5798](https://cve.now/CVE-2019-5798.md): Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory (no CVSS, Google Chrome)
- [CVE-2019-5796](https://cve.now/CVE-2019-5796.md): Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption v (no CVSS, Google Chrome)
- [CVE-2018-19614](https://cve.now/CVE-2018-19614.md): XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers. (no CVSS)
- [CVE-2019-5795](https://cve.now/CVE-2019-5795.md): Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory acce (no CVSS, Google Chrome)
- [CVE-2019-5794](https://cve.now/CVE-2019-5794.md): Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain sp (no CVSS, Google Chrome)
- [CVE-2019-5793](https://cve.now/CVE-2019-5793.md): Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions in (no CVSS, Google Chrome)
- [CVE-2019-10846](https://cve.now/CVE-2019-10846.md): Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via t (no CVSS)
- [CVE-2019-5792](https://cve.now/CVE-2019-5792.md): Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory acce (no CVSS, Google Chrome)
- [CVE-2019-5791](https://cve.now/CVE-2019-5791.md): Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read vi (no CVSS, Google Chrome)
- [CVE-2019-5790](https://cve.now/CVE-2019-5790.md): An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attac (no CVSS, Google Chrome)
- [CVE-2019-5789](https://cve.now/CVE-2019-5789.md): An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker wh (no CVSS, Google Chrome)
- [CVE-2019-5788](https://cve.now/CVE-2019-5788.md): An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacke (no CVSS, Google Chrome)
- [CVE-2019-5787](https://cve.now/CVE-2019-5787.md): Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruptio (no CVSS, Google Chrome)
- [CVE-2019-10849](https://cve.now/CVE-2019-10849.md): Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure. (no CVSS)
- [CVE-2019-10850](https://cve.now/CVE-2019-10850.md): Computrols CBAS 18.0.0 has Default Credentials. (no CVSS)
- [CVE-2019-10851](https://cve.now/CVE-2019-10851.md): Computrols CBAS 18.0.0 has hard-coded encryption keys. (no CVSS)
- [CVE-2019-10852](https://cve.now/CVE-2019-10852.md): Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start (no CVSS)
- [CVE-2019-10853](https://cve.now/CVE-2019-10853.md): Computrols CBAS 18.0.0 allows Authentication Bypass. (no CVSS)
- [CVE-2019-10854](https://cve.now/CVE-2019-10854.md): Computrols CBAS 18.0.0 allows Authenticated Command Injection. (no CVSS)
- [CVE-2019-10855](https://cve.now/CVE-2019-10855.md): Computrols CBAS 18.0.0 mishandles password hashes. (no CVSS)
- [CVE-2019-10866](https://cve.now/CVE-2019-10866.md): In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function get\_labels\_parameters in the fi (no CVSS)
- [CVE-2016-7550](https://cve.now/CVE-2016-7550.md): asterisk 13.10.0 is affected by: denial of service issues in asterisk. (no CVSS)
- [CVE-2016-8897](https://cve.now/CVE-2016-8897.md): Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php. (no CVSS)
- [CVE-2016-8899](https://cve.now/CVE-2016-8899.md): Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related (no CVSS)
- [CVE-2016-8901](https://cve.now/CVE-2016-8901.md): b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call\_plugin.php. (no CVSS)
- [CVE-2019-12289](https://cve.now/CVE-2019-12289.md): An issue was discovered in upgrade\_firmware.cgi on VStarcam 100T (C7824WIP) CH-sys-48.53.75.119~123 and 200V (C38S) CH-sys-48.53.203.119~123 (no CVSS)
- [CVE-2019-12288](https://cve.now/CVE-2019-12288.md): An issue was discovered in upgrade\_htmls.cgi on VStarcam 100T (C7824WIP) KR75.8.53.20 and 200V (C38S) KR203.18.1.20 devices. (no CVSS)
- [CVE-2016-9969](https://cve.now/CVE-2016-9969.md): In libwebp 0.5.1, there is a double free bug in libwebpmux. (no CVSS)
- [CVE-2017-13667](https://cve.now/CVE-2017-13667.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. (no CVSS)
- [CVE-2019-7061](https://cve.now/CVE-2019-7061.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7109](https://cve.now/CVE-2019-7109.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7110](https://cve.now/CVE-2019-7110.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7114](https://cve.now/CVE-2019-7114.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7115](https://cve.now/CVE-2019-7115.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7116](https://cve.now/CVE-2019-7116.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2017-11365](https://cve.now/CVE-2017-11365.md): Certain Symfony products are affected by: Incorrect Access Control. (no CVSS, symfony/security-core · symfony/security +1)
- [CVE-2019-7121](https://cve.now/CVE-2019-7121.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2017-11557](https://cve.now/CVE-2017-11557.md): An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. (no CVSS)
- [CVE-2019-7122](https://cve.now/CVE-2019-7122.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7123](https://cve.now/CVE-2019-7123.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7127](https://cve.now/CVE-2019-7127.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7111](https://cve.now/CVE-2019-7111.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7118](https://cve.now/CVE-2019-7118.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2017-11559](https://cve.now/CVE-2017-11559.md): An issue was discovered in ZOHO ManageEngine OpManager 12.2. (no CVSS)
- [CVE-2019-7119](https://cve.now/CVE-2019-7119.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7120](https://cve.now/CVE-2019-7120.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2017-11560](https://cve.now/CVE-2017-11560.md): An issue was discovered in ZOHO ManageEngine OpManager 12.2. (no CVSS)
- [CVE-2019-7124](https://cve.now/CVE-2019-7124.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7117](https://cve.now/CVE-2019-7117.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7128](https://cve.now/CVE-2019-7128.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7088](https://cve.now/CVE-2019-7088.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7096](https://cve.now/CVE-2019-7096.md): Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. (no CVSS, Adobe Flash Player)
- [CVE-2019-7112](https://cve.now/CVE-2019-7112.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7113](https://cve.now/CVE-2019-7113.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7125](https://cve.now/CVE-2019-7125.md): Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7108](https://cve.now/CVE-2019-7108.md): Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an out-of-bounds read vulnerabil (no CVSS, Adobe Flash Player)
- [CVE-2019-7098](https://cve.now/CVE-2019-7098.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7102](https://cve.now/CVE-2019-7102.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7099](https://cve.now/CVE-2019-7099.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7100](https://cve.now/CVE-2019-7100.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7101](https://cve.now/CVE-2019-7101.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7103](https://cve.now/CVE-2019-7103.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7104](https://cve.now/CVE-2019-7104.md): Adobe Shockwave Player versions 12.3.4.204 and earlier have a memory corruption vulnerability. (no CVSS, Adobe Shockwave Player)
- [CVE-2019-7135](https://cve.now/CVE-2019-7135.md): Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7106](https://cve.now/CVE-2019-7106.md): Adobe XD versions 16.0 and earlier have a path traversal vulnerability. (no CVSS, Adobe XD)
- [CVE-2019-7097](https://cve.now/CVE-2019-7097.md): Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. (no CVSS, Adobe Dreamweaver)
- [CVE-2019-7105](https://cve.now/CVE-2019-7105.md): Adobe XD versions 16.0 and earlier have a path traversal vulnerability. (no CVSS, Adobe XD)
- [CVE-2019-7107](https://cve.now/CVE-2019-7107.md): Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. (no CVSS, Adobe InDesign)
- [CVE-2019-7130](https://cve.now/CVE-2019-7130.md): Adobe Bridge CC versions 9.0.2 have a heap overflow vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7132](https://cve.now/CVE-2019-7132.md): Adobe Bridge CC versions 9.0.2 have an out-of-bounds write vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7133](https://cve.now/CVE-2019-7133.md): Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2017-11561](https://cve.now/CVE-2017-11561.md): An issue was discovered in ZOHO ManageEngine OpManager 12.2. (no CVSS)
- [CVE-2019-7134](https://cve.now/CVE-2019-7134.md): Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7138](https://cve.now/CVE-2019-7138.md): Adobe Bridge CC versions 9.0.2 have an out-of-bounds read vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2019-7136](https://cve.now/CVE-2019-7136.md): Adobe Bridge CC versions 9.0.2 have an use after free vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2017-11738](https://cve.now/CVE-2017-11738.md): In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to (no CVSS)
- [CVE-2017-11739](https://cve.now/CVE-2017-11739.md): In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a w (no CVSS)
- [CVE-2019-7137](https://cve.now/CVE-2019-7137.md): Adobe Bridge CC versions 9.0.2 have a memory corruption vulnerability. (no CVSS, Adobe Bridge CC)
- [CVE-2017-11740](https://cve.now/CVE-2017-11740.md): In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be exec (no CVSS)
- [CVE-2017-13668](https://cve.now/CVE-2017-13668.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2019-12301](https://cve.now/CVE-2019-12301.md): The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank (no CVSS)
- [CVE-2017-15029](https://cve.now/CVE-2017-15029.md): Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF. (no CVSS)
- [CVE-2017-15030](https://cve.now/CVE-2017-15030.md): Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2017-15652](https://cve.now/CVE-2017-15652.md): Artifex Ghostscript 9.22 is affected by: Obtain Information. (no CVSS)
- [CVE-2017-17060](https://cve.now/CVE-2017-17060.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions. (no CVSS)
- [CVE-2017-17061](https://cve.now/CVE-2017-17061.md): OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2017-5210](https://cve.now/CVE-2017-5210.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure. (no CVSS)
- [CVE-2017-5211](https://cve.now/CVE-2017-5211.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. (no CVSS)
- [CVE-2017-5212](https://cve.now/CVE-2017-5212.md): Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control. (no CVSS)
- [CVE-2017-5213](https://cve.now/CVE-2017-5213.md): Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2019-12300](https://cve.now/CVE-2019-12300.md): Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. (no CVSS, buildbot)
- [CVE-2019-12272](https://cve.now/CVE-2019-12272.md): In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth\_status and admin/status/realtime/wireless\_status of the web appl (no CVSS)
- [CVE-2019-4078](https://cve.now/CVE-2019-4078.md): IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local non privileged user to execute code as an administrat (CVSS 7.4, IBM MQ)
- [CVE-2019-4039](https://cve.now/CVE-2019-4039.md): IBM WebSphere MQ 8.0.0.0 through 8.0.0.9 and 9.0.0.0 through 9.1.1 could allow a local attacker to cause a denial of service within the erro (CVSS 6.2, IBM MQ)
- [CVE-2018-15664](https://cve.now/CVE-2018-15664.md): In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Director (no CVSS)
- [CVE-2019-0201](https://cve.now/CVE-2019-0201.md): An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. (no CVSS, Apache Software Foundation Apache ZooKeeper · org.apache.zo…)
- [CVE-2019-12298](https://cve.now/CVE-2019-12298.md): Leanify 0.4.3 allows remote attackers to trigger an out-of-bounds write (1024 bytes) via a modified input file. (no CVSS)
- [CVE-2019-12042](https://cve.now/CVE-2019-12042.md): Insecure permissions of the section object Global\\PandaDevicesAgentSharedMemory and the event Global\\PandaDevicesAgentSharedMemoryChange in (no CVSS)
- [CVE-2019-10977](https://cve.now/CVE-2019-10977.md): In Mitsubishi Electric MELSEC-Q series Ethernet module QJ71E71-100 serial number 20121 and prior, an attacker could send crafted TCP packets (no CVSS, Mitsubishi Electric MELSEC-Q series Ethernet module)
- [CVE-2019-9949](https://cve.now/CVE-2019-9949.md): Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affec (no CVSS)
- [CVE-2019-12297](https://cve.now/CVE-2019-12297.md): An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. (no CVSS)
- [CVE-2019-11873](https://cve.now/CVE-2019-11873.md): wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. (no CVSS)
- [CVE-2019-12295](https://cve.now/CVE-2019-12295.md): In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. (no CVSS)
- [CVE-2019-12293](https://cve.now/CVE-2019-12293.md): In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.