# CVEs published 2019-05-30

29 CVEs were published on May 30, 2019: 1 critical, 1 high. Days are UTC.

- [CVE-2019-12483](https://cve.now/CVE-2019-12483.md): An issue was discovered in GPAC 0.7.1. (no CVSS)
- [CVE-2019-12482](https://cve.now/CVE-2019-12482.md): An issue was discovered in GPAC 0.7.1. (no CVSS)
- [CVE-2019-12481](https://cve.now/CVE-2019-12481.md): An issue was discovered in GPAC 0.7.1. (no CVSS)
- [CVE-2019-12480](https://cve.now/CVE-2019-12480.md): BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in At (no CVSS)
- [CVE-2015-2230](https://cve.now/CVE-2015-2230.md): Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console. (no CVSS)
- [CVE-2015-7609](https://cve.now/CVE-2015-7609.md): Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra. (no CVSS)
- [CVE-2019-9723](https://cve.now/CVE-2019-9723.md): LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of dir (no CVSS)
- [CVE-2018-10948](https://cve.now/CVE-2018-10948.md): Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs. (no CVSS)
- [CVE-2018-14425](https://cve.now/CVE-2018-14425.md): There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 (no CVSS)
- [CVE-2018-9193](https://cve.now/CVE-2018-9193.md): A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination o (CVSS 7.1, Fortinet FortiClientWindows)
- [CVE-2018-13368](https://cve.now/CVE-2018-13368.md): A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands (no CVSS, Fortinet FortiClient for Windows)
- [CVE-2018-9191](https://cve.now/CVE-2018-9191.md): A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands (no CVSS, Fortinet FortiClient for Windows)
- [CVE-2018-4048](https://cve.now/CVE-2018-4048.md): An exploitable local privilege elevation vulnerability exists in the file system permissions of the \`Temp\` directory in GOG Galaxy 1.2.48.36 (CVSS 9.3, Talos GOG Galaxy)
- [CVE-2018-20840](https://cve.now/CVE-2018-20840.md): An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. (no CVSS)
- [CVE-2019-8457](https://cve.now/CVE-2019-8457.md): SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree t (no CVSS, SQLite)
- [CVE-2018-12130](https://cve.now/CVE-2018-12130.md): Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an auth (CVSS 5.9, Intel Central Processing Units)
- [CVE-2018-12127](https://cve.now/CVE-2018-12127.md): Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenti (CVSS 5.6, Intel Central Processing Units)
- [CVE-2018-12126](https://cve.now/CVE-2018-12126.md): Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an au (CVSS 5.6, Intel Central ProcCVE-2018-12126essing Units)
- [CVE-2019-11091](https://cve.now/CVE-2019-11091.md): Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may (CVSS 5.6, Intel Central Processing Units)
- [CVE-2018-15131](https://cve.now/CVE-2018-15131.md): An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 P (no CVSS)
- [CVE-2018-8029](https://cve.now/CVE-2018-8029.md): In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run a (no CVSS, Apache Hadoop · org.apache.hadoop:hadoop-main)
- [CVE-2019-12461](https://cve.now/CVE-2019-12461.md): Web Port 1.19.1 allows XSS via the /log type parameter. (no CVSS)
- [CVE-2019-12460](https://cve.now/CVE-2019-12460.md): Web Port 1.19.1 allows XSS via the /access/setup type parameter. (no CVSS)
- [CVE-2019-12459](https://cve.now/CVE-2019-12459.md): FileRun 2019.05.21 allows customizables/plugins/audio\_player Directory Listing. (no CVSS)
- [CVE-2019-12458](https://cve.now/CVE-2019-12458.md): FileRun 2019.05.21 allows css/ext-ux Directory Listing. (no CVSS)
- [CVE-2019-12457](https://cve.now/CVE-2019-12457.md): FileRun 2019.05.21 allows images/extjs Directory Listing. (no CVSS)
- [CVE-2019-12456](https://cve.now/CVE-2019-12456.md): An issue was discovered in the MPT3COMMAND case in \_ctl\_ioctl\_main in drivers/scsi/mpt3sas/mpt3sas\_ctl.c in the Linux kernel through 5.1.5. (no CVSS)
- [CVE-2019-12455](https://cve.now/CVE-2019-12455.md): An issue was discovered in sunxi\_divs\_clk\_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. (no CVSS)
- [CVE-2019-12454](https://cve.now/CVE-2019-12454.md): An issue was discovered in wcd9335\_codec\_enable\_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.