CVEs published June 13, 2019
38 CVEs were published on June 13, 2019: 0 critical, 0 high.
- Published
- 38
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Open Cloud Integrity Technology and OpenAttestation
- 9
- Intel(R) NUC Firmware
- 7
- BD Alaris Gateway Workstation
- 2
- Central Processing Units
- 1
- HedEx Lite
- 1
- HiSuite
- 1
- Intel(R) Accelerated Storage Manager in Intel® Rapid Storag…
- 1
- Intel(R) Chipset Device Software (INF Update Utility) Advis…
- 1
- Intel(R) CSME Assets Advisory
- 1
- Intel(R) Omni-Path Fabric Manager GUI
- 1
Medium, low and unrated 38
- CVE-2019-12813An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24.
- CVE-2019-12802In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context.
- CVE-2019-10959BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impacBD Alaris Gateway Workstation
- CVE-2019-10962BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway WBD Alaris Gateway Workstation
- CVE-2019-12799In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, wshopware/shopware
- CVE-2018-10947An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is
- CVE-2018-10946An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the ad
- CVE-2019-7321Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allow
- CVE-2019-12798An issue was discovered in Artifex MuJS 1.0.5.
- CVE-2019-5245HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability.HiSuite
- CVE-2019-5286There is a reflection XSS vulnerability in the HedEx products.HedEx Lite
- CVE-2019-5439A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.VLC Media Player
- CVE-2019-0128Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenIntel(R) Chipset Device Software (INF Update Utility) Advis…
- CVE-2019-0130Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticaIntel(R) Accelerated Storage Manager in Intel® Rapid Storag…
- CVE-2019-0136Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to pIntel® PROSet/Wireless WiFi Software
- CVE-2019-0157Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of serviceIntel(R) SGX for Linux
- CVE-2019-0164Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authentiIntel(R) Turbo Boost Max Technology
- CVE-2019-0174Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclCentral Processing Units
- CVE-2019-0175Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0177Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0178Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0179Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0180Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0181Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0182Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-0183Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-11092Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information Open Cloud Integrity Technology and OpenAttestation
- CVE-2019-11117Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user toIntel(R) Omni-Path Fabric Manager GUI
- CVE-2019-11119Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potentialIntel(R) RAID Web Console 3 for Windows*
- CVE-2019-11123Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privIntel(R) NUC Firmware
- CVE-2019-11124Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, dIntel(R) NUC Firmware
- CVE-2019-11125Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilIntel(R) NUC Firmware
- CVE-2019-11126Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denialIntel(R) NUC Firmware
- CVE-2019-11127Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial ofIntel(R) NUC Firmware
- CVE-2019-11128Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilIntel(R) NUC Firmware
- CVE-2019-11129Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, dIntel(R) NUC Firmware
- CVE-2018-12147Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0Intel(R) CSME Assets Advisory
- CVE-2018-3702Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authentITE Tech Consumer Infrared Driver for Windows 10 Advisory