# CVEs published 2019-06-12

123 CVEs were published on June 12, 2019: 0 critical, 38 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-0311](https://cve.now/CVE-2019-0311.md): Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode u (no CVSS, SAP SE SAP R/3 Enterprise Application)
- [CVE-2019-0312](https://cve.now/CVE-2019-0312.md): Several web pages provided SAP NetWeaver Process Integration (versions: SAP\_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP\_XITOOL (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-0314](https://cve.now/CVE-2019-0314.md): SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from access (no CVSS, SAP SE SAP Work Manager · SAP SE SAP Inventory Manager)
- [CVE-2019-0315](https://cve.now/CVE-2019-0315.md): Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP\_XIESR: 7.10 to 7.11, 7.20, 7. (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-7845](https://cve.now/CVE-2019-7845.md): Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. (no CVSS, Adobe Flash Player)
- [CVE-2019-7840](https://cve.now/CVE-2019-7840.md): ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerab (no CVSS, Adobe ColdFusion)
- [CVE-2019-7839](https://cve.now/CVE-2019-7839.md): ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vulnerability. (no CVSS, Adobe ColdFusion)
- [CVE-2019-7838](https://cve.now/CVE-2019-7838.md): ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blacklist bypass vulnerabil (no CVSS, Adobe ColdFusion)
- [CVE-2019-5442](https://cve.now/CVE-2019-5442.md): XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts (no CVSS, Pippo · ro.pippo:pippo-jaxb)
- [CVE-2019-10971](https://cve.now/CVE-2019-10971.md): The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that (no CVSS, Network Configurator for DeviceNet Safety)
- [CVE-2019-11269](https://cve.now/CVE-2019-11269.md): Open Redirector in spring-security-oauth2 (CVSS 4.2, Spring Security OAuth · org.springframework.security.oauth:…)
- [CVE-2019-0304](https://cve.now/CVE-2019-0304.md): FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRN (no CVSS, SAP SE SAP NetWeaver AS ABAP Platform)
- [CVE-2019-0305](https://cve.now/CVE-2019-0305.md): Java Server Pages (JSPs) provided by the SAP NetWeaver Process Integration (SAP\_XIESR and SAP\_XITOOL: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-0306](https://cve.now/CVE-2019-0306.md): SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as S (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2019-0307](https://cve.now/CVE-2019-0307.md): Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communicat (no CVSS, SAP SE SAP Solution Manager)
- [CVE-2019-0308](https://cve.now/CVE-2019-0308.md): An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price o (no CVSS, SAP SE SAP E-Commerce)
- [CVE-2019-9676](https://cve.now/CVE-2019-9676.md): Buffer overflow vulnerability found in some Dahua IP Camera devices IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX Build before 2018/11. (no CVSS, IPC-HFW1XXX,IPC-HDW1XXX,IPC-HFW2XXX)
- [CVE-2019-3947](https://cve.now/CVE-2019-3947.md): Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. (no CVSS, Fuji Electric V-Server)
- [CVE-2019-3946](https://cve.now/CVE-2019-3946.md): Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. (no CVSS, Fuji Electric V-Server)
- [CVE-2019-3875](https://cve.now/CVE-2019-3875.md): A vulnerability was found in keycloak before 6.0.2. (CVSS 6.5, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2019-10155](https://cve.now/CVE-2019-10155.md): The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity (CVSS 3.1, the libreswan Project libreswan)
- [CVE-2019-1049](https://cve.now/CVE-2019-1049.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1050](https://cve.now/CVE-2019-1050.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1051](https://cve.now/CVE-2019-1051.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1052](https://cve.now/CVE-2019-1052.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1053](https://cve.now/CVE-2019-1053.md): Windows Shell Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2019-1054](https://cve.now/CVE-2019-1054.md): Microsoft Edge Security Feature Bypass Vulnerability (CVSS 5.0, Microsoft Edge)
- [CVE-2019-1055](https://cve.now/CVE-2019-1055.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1064](https://cve.now/CVE-2019-1064.md): Windows Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2019-1065](https://cve.now/CVE-2019-1065.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1069](https://cve.now/CVE-2019-1069.md): Task Scheduler Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2019-1080](https://cve.now/CVE-2019-1080.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1081](https://cve.now/CVE-2019-1081.md): Microsoft Browser Information Disclosure Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft Internet Explorer)
- [CVE-2019-1022](https://cve.now/CVE-2019-1022.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1023](https://cve.now/CVE-2019-1023.md): Scripting Engine Information Disclosure Vulnerability (CVSS 6.5, Microsoft ChakraCore · Microsoft Edge)
- [CVE-2019-1024](https://cve.now/CVE-2019-1024.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1025](https://cve.now/CVE-2019-1025.md): Windows Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2019-1026](https://cve.now/CVE-2019-1026.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1027](https://cve.now/CVE-2019-1027.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1028](https://cve.now/CVE-2019-1028.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1029](https://cve.now/CVE-2019-1029.md): Skype for Business and Lync Server Denial of Service Vulnerability (no CVSS, Microsoft Lync Server)
- [CVE-2019-1031](https://cve.now/CVE-2019-1031.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1032](https://cve.now/CVE-2019-1032.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2019-1033](https://cve.now/CVE-2019-1033.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1034](https://cve.now/CVE-2019-1034.md): Microsoft Word Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1035](https://cve.now/CVE-2019-1035.md): Microsoft Word Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Server · Microsoft Office)
- [CVE-2019-1036](https://cve.now/CVE-2019-1036.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1038](https://cve.now/CVE-2019-1038.md): Microsoft Browser Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1039](https://cve.now/CVE-2019-1039.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1040](https://cve.now/CVE-2019-1040.md): Windows NTLM Tampering Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2019-1041](https://cve.now/CVE-2019-1041.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1043](https://cve.now/CVE-2019-1043.md): Comctl32 Remote Code Execution Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2019-1044](https://cve.now/CVE-2019-1044.md): Windows Secure Kernel Mode Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2019-1045](https://cve.now/CVE-2019-1045.md): Windows Network File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1046](https://cve.now/CVE-2019-1046.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1047](https://cve.now/CVE-2019-1047.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1048](https://cve.now/CVE-2019-1048.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-0986](https://cve.now/CVE-2019-0986.md): Windows User Profile Service Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2019-0988](https://cve.now/CVE-2019-0988.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-0989](https://cve.now/CVE-2019-0989.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-0990](https://cve.now/CVE-2019-0990.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 6.5, Microsoft ChakraCore · Microsoft Edge)
- [CVE-2019-0991](https://cve.now/CVE-2019-0991.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-0992](https://cve.now/CVE-2019-0992.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2019-0993](https://cve.now/CVE-2019-0993.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-0996](https://cve.now/CVE-2019-0996.md): Azure DevOps Server Spoofing Vulnerability (no CVSS, Microsoft Azure DevOps Server)
- [CVE-2019-0998](https://cve.now/CVE-2019-0998.md): Windows Storage Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1002](https://cve.now/CVE-2019-1002.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2019-1003](https://cve.now/CVE-2019-1003.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1005](https://cve.now/CVE-2019-1005.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1007](https://cve.now/CVE-2019-1007.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1009](https://cve.now/CVE-2019-1009.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1010](https://cve.now/CVE-2019-1010.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1011](https://cve.now/CVE-2019-1011.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1012](https://cve.now/CVE-2019-1012.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1013](https://cve.now/CVE-2019-1013.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1014](https://cve.now/CVE-2019-1014.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1015](https://cve.now/CVE-2019-1015.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1016](https://cve.now/CVE-2019-1016.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-1017](https://cve.now/CVE-2019-1017.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1018](https://cve.now/CVE-2019-1018.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1019](https://cve.now/CVE-2019-1019.md): Microsoft Windows Security Feature Bypass Vulnerability (CVSS 8.5, Microsoft Windows)
- [CVE-2019-1021](https://cve.now/CVE-2019-1021.md): Windows Audio Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0710](https://cve.now/CVE-2019-0710.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2019-0711](https://cve.now/CVE-2019-0711.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2019-0713](https://cve.now/CVE-2019-0713.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2019-0722](https://cve.now/CVE-2019-0722.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-0888](https://cve.now/CVE-2019-0888.md): ActiveX Data Objects (ADO) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-0904](https://cve.now/CVE-2019-0904.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0905](https://cve.now/CVE-2019-0905.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0906](https://cve.now/CVE-2019-0906.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0907](https://cve.now/CVE-2019-0907.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0908](https://cve.now/CVE-2019-0908.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0909](https://cve.now/CVE-2019-0909.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-0920](https://cve.now/CVE-2019-0920.md): Scripting Engine Memory Corruption Vulnerability (CVSS 4.3, Microsoft Internet Explorer)
- [CVE-2019-0941](https://cve.now/CVE-2019-0941.md): Microsoft IIS Server Denial of Service Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2019-0943](https://cve.now/CVE-2019-0943.md): Windows ALPC Elevation of Privilege Vulnerability (no CVSS, Microsoft Windows)
- [CVE-2019-0948](https://cve.now/CVE-2019-0948.md): Windows Event Viewer Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-0959](https://cve.now/CVE-2019-0959.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-0960](https://cve.now/CVE-2019-0960.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-0968](https://cve.now/CVE-2019-0968.md): Windows GDI Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-0972](https://cve.now/CVE-2019-0972.md): Local Security Authority Subsystem Service Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2019-0973](https://cve.now/CVE-2019-0973.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0974](https://cve.now/CVE-2019-0974.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0977](https://cve.now/CVE-2019-0977.md): Windows GDI Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2019-0983](https://cve.now/CVE-2019-0983.md): Windows Storage Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0984](https://cve.now/CVE-2019-0984.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-0985](https://cve.now/CVE-2019-0985.md): Microsoft Speech API Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-0620](https://cve.now/CVE-2019-0620.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.6, Microsoft Windows)
- [CVE-2019-0709](https://cve.now/CVE-2019-0709.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.6, Microsoft Windows)
- [CVE-2019-10157](https://cve.now/CVE-2019-10157.md): It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its back (CVSS 4.7, Red Hat keycloak · keycloak-connect)
- [CVE-2019-6580](https://cve.now/CVE-2019-6580.md): A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions \< V11.2a), Siveillance VMS 2018 R1 (All versions \< V12.1a), Siv (no CVSS, Siemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3)
- [CVE-2019-6581](https://cve.now/CVE-2019-6581.md): A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions \< V11.2a), Siveillance VMS 2018 R1 (All versions \< V12.1a), Siv (no CVSS, Siemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3)
- [CVE-2019-6582](https://cve.now/CVE-2019-6582.md): A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions \< V11.2a), Siveillance VMS 2018 R1 (All versions \< V12.1a), Siv (no CVSS, Siemens AG Siveillance VMS 2017 R2 · Siemens AG Siveilla… +3)
- [CVE-2019-6584](https://cve.now/CVE-2019-6584.md): A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS (no CVSS, Siemens AG SIEMENS LOGO!8)
- [CVE-2019-10925](https://cve.now/CVE-2019-10925.md): A vulnerability has been identified in SIMATIC MV400 family (All Versions \< V7.0.6). (no CVSS, Siemens SIMATIC MV400 family)
- [CVE-2019-10926](https://cve.now/CVE-2019-10926.md): A vulnerability has been identified in SIMATIC MV400 family (All Versions \< V7.0.6). (no CVSS, Siemens SIMATIC MV400 family)
- [CVE-2019-6567](https://cve.now/CVE-2019-6567.md): A vulnerability has been identified in SCALANCE X-200 switch family (incl. (no CVSS, Siemens SCALANCE X-200 switch family · Siemens SCALANCE… +2)
- [CVE-2019-6571](https://cve.now/CVE-2019-6571.md): A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS (no CVSS, Siemens AG SIEMENS LOGO!8)
- [CVE-2019-3872](https://cve.now/CVE-2019-3872.md): It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x an (CVSS 5.4, Red Hat picketlink)
- [CVE-2019-3888](https://cve.now/CVE-2019-3888.md): A vulnerability was found in Undertow web server before 2.0.21. (CVSS 5.3, Red Hat undertow · io.undertow:undertow-core)
- [CVE-2019-3873](https://cve.now/CVE-2019-3873.md): It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XM (CVSS 6.4, Red Hat picketlink)
- [CVE-2019-10150](https://cve.now/CVE-2019-10150.md): It was found that OpenShift Container Platform versions 3.6.x - 4.6.0 does not perform SSH Host Key checking when using ssh key authenticati (CVSS 5.9, redhat atomic-openshift)
- [CVE-2017-15123](https://cve.now/CVE-2017-15123.md): A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated (CVSS 5.3, redhat CloudForms)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.