# CVEs published 2019-06-13

38 CVEs were published on June 13, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-12813](https://cve.now/CVE-2019-12813.md): An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. (no CVSS)
- [CVE-2019-12802](https://cve.now/CVE-2019-12802.md): In radare2 through 3.5.1, the rcc\_context function of libr/egg/egg\_lang.c mishandles changing context. (no CVSS)
- [CVE-2019-10959](https://cve.now/CVE-2019-10959.md): BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impac (no CVSS, BD Alaris Gateway Workstation)
- [CVE-2019-10962](https://cve.now/CVE-2019-10962.md): BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway W (no CVSS, BD Alaris Gateway Workstation)
- [CVE-2019-12799](https://cve.now/CVE-2019-12799.md): In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, w (CVSS 6.5, shopware/shopware)
- [CVE-2018-10947](https://cve.now/CVE-2018-10947.md): An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is (no CVSS)
- [CVE-2018-10946](https://cve.now/CVE-2018-10946.md): An issue was discovered in versions earlier than 1.3.0-66872 for Polycom RealPresence Debut that allows attackers to arbitrarily read the ad (no CVSS)
- [CVE-2019-7321](https://cve.now/CVE-2019-7321.md): Usage of an uninitialized variable in the function fz\_load\_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allow (no CVSS)
- [CVE-2019-12798](https://cve.now/CVE-2019-12798.md): An issue was discovered in Artifex MuJS 1.0.5. (no CVSS)
- [CVE-2019-5245](https://cve.now/CVE-2019-5245.md): HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. (no CVSS, HiSuite)
- [CVE-2019-5286](https://cve.now/CVE-2019-5286.md): There is a reflection XSS vulnerability in the HedEx products. (no CVSS, HedEx Lite)
- [CVE-2019-5439](https://cve.now/CVE-2019-5439.md): A Buffer Overflow in VLC Media Player \< 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit. (no CVSS, VLC Media Player)
- [CVE-2019-0128](https://cve.now/CVE-2019-0128.md): Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authen (no CVSS, Intel(R) Chipset Device Software (INF Update Utility) Advis…)
- [CVE-2019-0130](https://cve.now/CVE-2019-0130.md): Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthentica (no CVSS, Intel(R) Accelerated Storage Manager in Intel® Rapid Storag…)
- [CVE-2019-0136](https://cve.now/CVE-2019-0136.md): Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to p (no CVSS, Intel® PROSet/Wireless WiFi Software)
- [CVE-2019-0157](https://cve.now/CVE-2019-0157.md): Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of service (no CVSS, Intel(R) SGX for Linux)
- [CVE-2019-0164](https://cve.now/CVE-2019-0164.md): Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenti (no CVSS, Intel(R) Turbo Boost Max Technology)
- [CVE-2019-0174](https://cve.now/CVE-2019-0174.md): Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information discl (no CVSS, Central Processing Units)
- [CVE-2019-0175](https://cve.now/CVE-2019-0175.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0177](https://cve.now/CVE-2019-0177.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0178](https://cve.now/CVE-2019-0178.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0179](https://cve.now/CVE-2019-0179.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0180](https://cve.now/CVE-2019-0180.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0181](https://cve.now/CVE-2019-0181.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0182](https://cve.now/CVE-2019-0182.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-0183](https://cve.now/CVE-2019-0183.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-11092](https://cve.now/CVE-2019-11092.md): Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information (no CVSS, Open Cloud Integrity Technology and OpenAttestation)
- [CVE-2019-11117](https://cve.now/CVE-2019-11117.md): Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to (no CVSS, Intel(R) Omni-Path Fabric Manager GUI)
- [CVE-2019-11119](https://cve.now/CVE-2019-11119.md): Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potential (no CVSS, Intel(R) RAID Web Console 3 for Windows\*)
- [CVE-2019-11123](https://cve.now/CVE-2019-11123.md): Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of priv (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11124](https://cve.now/CVE-2019-11124.md): Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11125](https://cve.now/CVE-2019-11125.md): Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11126](https://cve.now/CVE-2019-11126.md): Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11127](https://cve.now/CVE-2019-11127.md): Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial of (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11128](https://cve.now/CVE-2019-11128.md): Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil (no CVSS, Intel(R) NUC Firmware)
- [CVE-2019-11129](https://cve.now/CVE-2019-11129.md): Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d (no CVSS, Intel(R) NUC Firmware)
- [CVE-2018-12147](https://cve.now/CVE-2018-12147.md): Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Services before version 4.0 (no CVSS, Intel(R) CSME Assets Advisory)
- [CVE-2018-3702](https://cve.now/CVE-2018-3702.md): Improper permissions in the installer for the ITE Tech\* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0 may allow an authent (no CVSS, ITE Tech Consumer Infrared Driver for Windows 10 Advisory)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.