CVEs published June 12, 2019
123 CVEs were published on June 12, 2019: 0 critical, 38 high. 2 are now in CISA KEV.
- Published
- 123
- Critical
- 0
- High
- 38
- Medium
- 49
- Low
- 1
- Unrated
- 35
- Now in CISA KEV
- 2
- Fix available
- 23
Most affected products
- Microsoft Windows
- 61
- Microsoft Edge · Microsoft ChakraCore +1
- 6
- Microsoft Internet Explorer
- 4
- Microsoft SharePoint Enterprise Server · Microsoft Share… +2
- 4
- Adobe ColdFusion
- 3
- SAP SE SAP NetWeaver Process Integration
- 3
- Siemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3
- 3
- Fuji Electric V-Server
- 2
- Microsoft ChakraCore · Microsoft Edge
- 2
- Microsoft Edge · Microsoft.ChakraCore
- 2
High 38
- CVE-2019-1055Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2019-1064Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1065Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1069Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1080Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2019-1022Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1026Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1027Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1028Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1038Microsoft Browser Memory Corruption VulnerabilityMicrosoft Internet Explorer · Microsoft Edge
- CVE-2019-1041Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1045Windows Network File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0988Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer · Microsoft Edge
- CVE-2019-0998Windows Storage Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1005Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2019-1007Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1014Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1017Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1018DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1019Microsoft Windows Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2019-1021Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0722Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0888ActiveX Data Objects (ADO) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0904Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0905Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0906Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0907Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0908Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0909Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0959Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0960Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0973Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0974Jet Database Engine Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0983Windows Storage Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0984Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0985Microsoft Speech API Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0620Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-0709Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
Medium, low and unrated 85
- CVE-2019-0311Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode uSAP SE SAP R/3 Enterprise Application
- CVE-2019-0312Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOLSAP SE SAP NetWeaver Process Integration
- CVE-2019-0314SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessSAP SE SAP Work Manager · SAP SE SAP Inventory Manager
- CVE-2019-0315Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.SAP SE SAP NetWeaver Process Integration
- CVE-2019-7845Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability.Adobe Flash Player
- CVE-2019-7840ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerabAdobe ColdFusion
- CVE-2019-7839ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability.Adobe ColdFusion
- CVE-2019-7838ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerabilAdobe ColdFusion
- CVE-2019-5442XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amountsPippo · ro.pippo:pippo-jaxb
- CVE-2019-10971The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that Network Configurator for DeviceNet Safety
- CVE-2019-11269Open Redirector in spring-security-oauth2Spring Security OAuth · org.springframework.security.oauth:…
- CVE-2019-0304FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNSAP SE SAP NetWeaver AS ABAP Platform
- CVE-2019-0305Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP_XIESR and SAP_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, SAP SE SAP NetWeaver Process Integration
- CVE-2019-0306SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SSAP SE SAP HANA Extended Application Services
- CVE-2019-0307Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communicatSAP SE SAP Solution Manager
- CVE-2019-0308An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price oSAP SE SAP E-Commerce
- CVE-2019-9676Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11.IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX
- CVE-2019-3947Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext.Fuji Electric V-Server
- CVE-2019-3946Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005.Fuji Electric V-Server
- CVE-2019-3875A vulnerability was found in keycloak before 6.0.2.Red Hat keycloak · org.keycloak:keycloak-core
- CVE-2019-10155The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity the libreswan Project libreswan
- CVE-2019-1049Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1050Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1051Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-1052Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-1053Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-1054Microsoft Edge Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2019-1081Microsoft Browser Information Disclosure VulnerabilityMicrosoft Edge · Microsoft Internet Explorer
- CVE-2019-1023Scripting Engine Information Disclosure VulnerabilityMicrosoft ChakraCore · Microsoft Edge
- CVE-2019-1024Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge +1
- CVE-2019-1025Windows Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-1029Skype for Business and Lync Server Denial of Service VulnerabilityMicrosoft Lync Server
- CVE-2019-1031Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2019-1032Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2019-1033Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2019-1034Microsoft Word Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2019-1035Microsoft Word Remote Code Execution VulnerabilityMicrosoft SharePoint Server · Microsoft Office
- CVE-2019-1036Microsoft Office SharePoint XSS VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2019-1039Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1040Windows NTLM Tampering VulnerabilityMicrosoft Windows
- CVE-2019-1043Comctl32 Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2019-1044Windows Secure Kernel Mode Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2019-1046Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1047Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1048Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-0986Windows User Profile Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0989Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-0990Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft ChakraCore · Microsoft Edge
- CVE-2019-0991Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-0992Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft.ChakraCore
- CVE-2019-0993Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-0996Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2019-1002Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft.ChakraCore
- CVE-2019-1003Chakra Scripting Engine Memory Corruption VulnerabilityMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-1009Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1010Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1011Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1012Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1013Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1015Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-1016Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-0710Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-0711Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-0713Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-0920Scripting Engine Memory Corruption VulnerabilityMicrosoft Internet Explorer
- CVE-2019-0941Microsoft IIS Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-0943Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2019-0948Windows Event Viewer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-0968Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-0972Local Security Authority Subsystem Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2019-0977Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2019-10157It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backRed Hat keycloak · keycloak-connect
- CVE-2019-6580A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), SivSiemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3
- CVE-2019-6581A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), SivSiemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3
- CVE-2019-6582A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), SivSiemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3
- CVE-2019-6584A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS Siemens AG SIEMENS LOGO!8
- CVE-2019-10925A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).Siemens SIMATIC MV400 family
- CVE-2019-10926A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).Siemens SIMATIC MV400 family
- CVE-2019-6567A vulnerability has been identified in SCALANCE X-200 switch family (incl.Siemens SCALANCE X-200 switch family · Siemens SCALANCE… +2
- CVE-2019-6571A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS Siemens AG SIEMENS LOGO!8
- CVE-2019-3872It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x anRed Hat picketlink
- CVE-2019-3888A vulnerability was found in Undertow web server before 2.0.21.Red Hat undertow · io.undertow:undertow-core
- CVE-2019-3873It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XMRed Hat picketlink
- CVE-2019-10150It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authenticatiredhat atomic-openshift
- CVE-2017-15123A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated redhat CloudForms