CVEs published June 4, 2019
27 CVEs were published on June 4, 2019: 2 critical, 1 high. 2 are now in CISA KEV.
- Published
- 27
- Critical
- 2
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 2
- Fix available
- 1
Most affected products
- Fortinet FortiOS
- 4
- Fortinet FortiOS and FortiProxy
- 2
- Fortinet FortiOS, FortiProxy
- 2
- Huawei Mate 9 Pro
- 2
- Huawei P20
- 2
- Huawei P30,P30 Pro
- 2
- Huawei AP4050DN-E
- 1
- Huawei AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR220…
- 1
- Huawei Emily-L29C
- 1
- Huawei Leland-AL00A
- 1
Critical 2
- CVE-2018-13382An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 tFortinet FortiOS, FortiProxy
- CVE-2018-13379An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4Fortinet FortiOS, FortiProxy
High 1
Medium, low and unrated 24
- CVE-2019-5588A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to exFortinet FortiOS
- CVE-2019-5586A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow Fortinet FortiOS
- CVE-2019-5587Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implantFortinet FortiOS
- CVE-2019-10636Marvell SSD Controller (88SS1074, 88SS1079, 88SS1080, 88SS1093, 88SS1092, 88SS1095, 88SS9174, 88SS9175, 88SS9187, 88SS9188, 88SS9189, 88SS91
- CVE-2018-13384A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to poFortinet FortiOS
- CVE-2019-12210In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed
- CVE-2019-12209Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enab
- CVE-2018-13381A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0,Fortinet FortiOS and FortiProxy
- CVE-2018-13380A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FFortinet FortiOS and FortiProxy
- CVE-2019-5307Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00 9.1.0.162(Huawei P30,P30 Pro
- CVE-2019-5284There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111(C00E111R2P10T8)Huawei Leland-AL00A
- CVE-2019-5285Some Huawei S series switches have a DoS vulnerability.Huawei S12700, S12700, S12700, S12700, S12700, S12700, S127…
- CVE-2019-5215There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1), anHuawei P30,P30 Pro
- CVE-2019-5283There is Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167Huawei P20
- CVE-2019-5217There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8).Huawei Mate 9 Pro
- CVE-2019-5300There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, Huawei AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR220…
- CVE-2019-5298There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800.Huawei AP4050DN-E
- CVE-2019-5297Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C185E2R1P12T8) have a Factory Reset Protection (FRP) bypass security vulnerabilityHuawei Emily-L29C
- CVE-2019-5306There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00Huawei P20
- CVE-2019-5296Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability.Huawei Mate20
- CVE-2019-5244Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of inputHuawei Mate 9 Pro
- CVE-2019-5281There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2).Huawei Y9
- CVE-2019-12730aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows
- CVE-2019-12727On Ubiquiti airCam 3.1.4 devices, a Denial of Service vulnerability exists in the RTSP Service provided by the ubnt-streamer binary.