# CVEs published 2019-05-24

146 CVEs were published on May 24, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-7079](https://cve.now/CVE-2019-7079.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7078](https://cve.now/CVE-2019-7078.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7077](https://cve.now/CVE-2019-7077.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7076](https://cve.now/CVE-2019-7076.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7075](https://cve.now/CVE-2019-7075.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7074](https://cve.now/CVE-2019-7074.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7073](https://cve.now/CVE-2019-7073.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7072](https://cve.now/CVE-2019-7072.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7071](https://cve.now/CVE-2019-7071.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7084](https://cve.now/CVE-2019-7084.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7083](https://cve.now/CVE-2019-7083.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7082](https://cve.now/CVE-2019-7082.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7081](https://cve.now/CVE-2019-7081.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7080](https://cve.now/CVE-2019-7080.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7070](https://cve.now/CVE-2019-7070.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7069](https://cve.now/CVE-2019-7069.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7068](https://cve.now/CVE-2019-7068.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7067](https://cve.now/CVE-2019-7067.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7066](https://cve.now/CVE-2019-7066.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7085](https://cve.now/CVE-2019-7085.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7086](https://cve.now/CVE-2019-7086.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7087](https://cve.now/CVE-2019-7087.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7089](https://cve.now/CVE-2019-7089.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7095](https://cve.now/CVE-2019-7095.md): Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2019-7094](https://cve.now/CVE-2019-7094.md): Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7093](https://cve.now/CVE-2019-7093.md): Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability (no CVSS, Adobe Creative Cloud Desktop Application)
- [CVE-2019-7092](https://cve.now/CVE-2019-7092.md): ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. (no CVSS, Adobe ColdFusion)
- [CVE-2019-7091](https://cve.now/CVE-2019-7091.md): ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerabi (no CVSS, Adobe ColdFusion)
- [CVE-2019-7090](https://cve.now/CVE-2019-7090.md): Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Play (no CVSS, Adobe Flash Player Desktop Runtime · Adobe Flash Player… +1)
- [CVE-2019-7065](https://cve.now/CVE-2019-7065.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7064](https://cve.now/CVE-2019-7064.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7063](https://cve.now/CVE-2019-7063.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7062](https://cve.now/CVE-2019-7062.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7060](https://cve.now/CVE-2019-7060.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7059](https://cve.now/CVE-2019-7059.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7058](https://cve.now/CVE-2019-7058.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7057](https://cve.now/CVE-2019-7057.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7056](https://cve.now/CVE-2019-7056.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7055](https://cve.now/CVE-2019-7055.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7054](https://cve.now/CVE-2019-7054.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7053](https://cve.now/CVE-2019-7053.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7052](https://cve.now/CVE-2019-7052.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7051](https://cve.now/CVE-2019-7051.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7050](https://cve.now/CVE-2019-7050.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7049](https://cve.now/CVE-2019-7049.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7048](https://cve.now/CVE-2019-7048.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7047](https://cve.now/CVE-2019-7047.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7046](https://cve.now/CVE-2019-7046.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7045](https://cve.now/CVE-2019-7045.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7044](https://cve.now/CVE-2019-7044.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7043](https://cve.now/CVE-2019-7043.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7042](https://cve.now/CVE-2019-7042.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7041](https://cve.now/CVE-2019-7041.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7040](https://cve.now/CVE-2019-7040.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7039](https://cve.now/CVE-2019-7039.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7038](https://cve.now/CVE-2019-7038.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7037](https://cve.now/CVE-2019-7037.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7036](https://cve.now/CVE-2019-7036.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7035](https://cve.now/CVE-2019-7035.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7034](https://cve.now/CVE-2019-7034.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7033](https://cve.now/CVE-2019-7033.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7032](https://cve.now/CVE-2019-7032.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7031](https://cve.now/CVE-2019-7031.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7030](https://cve.now/CVE-2019-7030.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7029](https://cve.now/CVE-2019-7029.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7028](https://cve.now/CVE-2019-7028.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7027](https://cve.now/CVE-2019-7027.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7026](https://cve.now/CVE-2019-7026.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7025](https://cve.now/CVE-2019-7025.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7024](https://cve.now/CVE-2019-7024.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7023](https://cve.now/CVE-2019-7023.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7022](https://cve.now/CVE-2019-7022.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7021](https://cve.now/CVE-2019-7021.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7020](https://cve.now/CVE-2019-7020.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7019](https://cve.now/CVE-2019-7019.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-7018](https://cve.now/CVE-2019-7018.md): Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2017-18375](https://cve.now/CVE-2017-18375.md): Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php. (no CVSS)
- [CVE-2016-10759](https://cve.now/CVE-2016-10759.md): The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/Extend (no CVSS)
- [CVE-2016-10758](https://cve.now/CVE-2016-10758.md): PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated by a .php file to pkinc/admin/mediaarchive.php and pkinc/func/default.php via the (no CVSS)
- [CVE-2016-10757](https://cve.now/CVE-2016-10757.md): In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/l (no CVSS)
- [CVE-2016-10756](https://cve.now/CVE-2016-10756.md): Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of . (no CVSS)
- [CVE-2016-10755](https://cve.now/CVE-2016-10755.md): AbanteCart 1.2.8 allows SQL Injection via the source\_language parameter to admin/controller/pages/localisation/language.php and core/lib/lan (no CVSS)
- [CVE-2016-10754](https://cve.now/CVE-2016-10754.md): modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter. (no CVSS)
- [CVE-2016-10753](https://cve.now/CVE-2016-10753.md): e107 2.1.2 allows PHP Object Injection with resultant SQL injection, because usersettings.php uses unserialize without an HMAC. (no CVSS)
- [CVE-2016-10752](https://cve.now/CVE-2016-10752.md): serendipity\_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles a (no CVSS)
- [CVE-2016-10751](https://cve.now/CVE-2016-10751.md): osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. (no CVSS)
- [CVE-2019-7816](https://cve.now/CVE-2019-7816.md): ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerabilit (no CVSS, Adobe ColdFusion)
- [CVE-2019-7815](https://cve.now/CVE-2019-7815.md): Adobe Acrobat and Reader versions 2019.010.20091 and earlier, 2019.010.20091 and earlier, 2017.011.30120 and earlier version, and 2015.006.3 (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-10685](https://cve.now/CVE-2019-10685.md): A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. (no CVSS)
- [CVE-2018-12624](https://cve.now/CVE-2018-12624.md): An issue was discovered in Eventum 3.5.0. (no CVSS)
- [CVE-2018-17843](https://cve.now/CVE-2018-17843.md): SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool (no CVSS)
- [CVE-2018-10815](https://cve.now/CVE-2018-10815.md): An issue was discovered in Cloudera Manager before 5.13.4, 5.14.x before 5.14.4, and 5.15.x before 5.15.1. (no CVSS)
- [CVE-2018-18058](https://cve.now/CVE-2018-18058.md): An issue was discovered in Bitdefender Engines before 7.76662. (no CVSS)
- [CVE-2018-18059](https://cve.now/CVE-2018-18059.md): An issue was discovered in Bitdefender Engines before 7.76675. (no CVSS)
- [CVE-2018-18060](https://cve.now/CVE-2018-18060.md): An issue was discovered in Bitdefender Engines before 7.76808. (no CVSS)
- [CVE-2019-8346](https://cve.now/CVE-2019-8346.md): In Zoho ManageEngine ADSelfService Plus 5.x through 5704, an authorization.do cross-site Scripting (XSS) vulnerability allows for an unauthe (no CVSS)
- [CVE-2018-19612](https://cve.now/CVE-2018-19612.md): The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types an (no CVSS)
- [CVE-2019-2248](https://cve.now/CVE-2019-2248.md): Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2250](https://cve.now/CVE-2019-2250.md): Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Consumer IOT, Snapd…)
- [CVE-2018-11949](https://cve.now/CVE-2018-11949.md): Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdrag (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11953](https://cve.now/CVE-2018-11953.md): While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-11967](https://cve.now/CVE-2018-11967.md): Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library i (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11968](https://cve.now/CVE-2018-11968.md): Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11976](https://cve.now/CVE-2018-11976.md): ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-12004](https://cve.now/CVE-2018-12004.md): Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectiv (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-12005](https://cve.now/CVE-2018-12005.md): An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-12012](https://cve.now/CVE-2018-12012.md): While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be co (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-12013](https://cve.now/CVE-2018-12013.md): Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13885](https://cve.now/CVE-2018-13885.md): Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13886](https://cve.now/CVE-2018-13886.md): Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13887](https://cve.now/CVE-2018-13887.md): Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13895](https://cve.now/CVE-2018-13895.md): Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13899](https://cve.now/CVE-2018-13899.md): Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13920](https://cve.now/CVE-2018-13920.md): Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-13925](https://cve.now/CVE-2018-13925.md): Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2244](https://cve.now/CVE-2019-2244.md): Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to r (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2245](https://cve.now/CVE-2019-2245.md): Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to rea (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2247](https://cve.now/CVE-2019-2247.md): Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global v (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-19613](https://cve.now/CVE-2018-19613.md): Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF. (no CVSS)
- [CVE-2018-11940](https://cve.now/CVE-2018-11940.md): Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11937](https://cve.now/CVE-2018-11937.md): Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon C (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11936](https://cve.now/CVE-2018-11936.md): Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memo (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2018-11930](https://cve.now/CVE-2018-11930.md): Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer t (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11928](https://cve.now/CVE-2018-11928.md): Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10847](https://cve.now/CVE-2019-10847.md): Computrols CBAS 18.0.0 allows Cross-Site Request Forgery. (no CVSS)
- [CVE-2018-11927](https://cve.now/CVE-2018-11927.md): Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from f (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-11925](https://cve.now/CVE-2018-11925.md): Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11924](https://cve.now/CVE-2018-11924.md): Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11271](https://cve.now/CVE-2018-11271.md): Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11923](https://cve.now/CVE-2018-11923.md): Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-10848](https://cve.now/CVE-2019-10848.md): Computrols CBAS 18.0.0 allows Username Enumeration. (no CVSS)
- [CVE-2016-10245](https://cve.now/CVE-2016-10245.md): Insufficient sanitization of the query parameter in templates/html/search\_opensearch.php could lead to reflected cross-site scripting or ifr (no CVSS)
- [CVE-2019-2726](https://cve.now/CVE-2019-2726.md): Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration (no CVSS, Oracle Enterprise Manager Ops Center)
- [CVE-2016-8898](https://cve.now/CVE-2016-8898.md): Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. (no CVSS)
- [CVE-2016-8900](https://cve.now/CVE-2016-8900.md): Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related (no CVSS)
- [CVE-2019-11604](https://cve.now/CVE-2019-11604.md): An issue was discovered in Quest KACE Systems Management Appliance before 9.1. (no CVSS)
- [CVE-2019-11875](https://cve.now/CVE-2019-11875.md): In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate p (no CVSS)
- [CVE-2019-11876](https://cve.now/CVE-2019-11876.md): In PrestaShop 1.7.5.2, the shop\_country parameter in the install/index.php installation script/component is affected by Reflected XSS. (no CVSS, prestashop/prestashop)
- [CVE-2019-12150](https://cve.now/CVE-2019-12150.md): Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted) (no CVSS)
- [CVE-2019-12155](https://cve.now/CVE-2019-12155.md): interface\_release\_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. (no CVSS)
- [CVE-2019-12195](https://cve.now/CVE-2019-12195.md): TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. (no CVSS)
- [CVE-2019-12315](https://cve.now/CVE-2019-12315.md): Samsung SCX-824 printers allow a reflected Cross-Site-Scripting (XSS) vulnerability that can be triggered by using the "print from file" fea (no CVSS)
- [CVE-2019-12314](https://cve.now/CVE-2019-12314.md): Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W\_MCS/ PATH\_INFO, as demonstrated by a cg (no CVSS)
- [CVE-2019-12313](https://cve.now/CVE-2019-12313.md): XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element. (no CVSS, shave)
- [CVE-2019-12312](https://cve.now/CVE-2019-12312.md): In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. (no CVSS)
- [CVE-2019-10143](https://cve.now/CVE-2019-10143.md): It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who alread (CVSS 6.4, freeradius)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.