# CVEs published 2019-06-14

45 CVEs were published on June 14, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-12828](https://cve.now/CVE-2019-12828.md): An issue was discovered in Electronic Arts Origin before 10.5.39. (no CVSS)
- [CVE-2019-9842](https://cve.now/CVE-2019-9842.md): madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, becau (no CVSS)
- [CVE-2019-0316](https://cve.now/CVE-2019-0316.md): SAP NetWeaver Process Integration, versions: SAP\_XIESR: 7.20, SAP\_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently valida (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-0303](https://cve.now/CVE-2019-0303.md): SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2018-20655](https://cve.now/CVE-2018-20655.md): When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. (no CVSS, Facebook WhatsApp for iOS · Facebook WhatsApp Business for…)
- [CVE-2018-6339](https://cve.now/CVE-2018-6339.md): When receiving calls using WhatsApp on Android, a stack allocation failed to properly account for the amount of data being passed in. (no CVSS, Facebook WhatsApp for Android · Facebook WhatsApp Business…)
- [CVE-2018-6349](https://cve.now/CVE-2018-6349.md): When receiving calls using WhatsApp for Android, a missing size check when parsing a sender-provided packet allowed for a stack-based overfl (no CVSS, Facebook WhatsApp for Android · Facebook WhatsApp Business…)
- [CVE-2018-6350](https://cve.now/CVE-2018-6350.md): An out-of-bounds read was possible in WhatsApp due to incorrect parsing of RTP extension headers. (no CVSS, Facebook WhatsApp for Android · Facebook WhatsApp Busine… +3)
- [CVE-2018-13919](https://cve.now/CVE-2018-13919.md): Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-3583](https://cve.now/CVE-2018-3583.md): A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-5883](https://cve.now/CVE-2018-5883.md): Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-5903](https://cve.now/CVE-2018-5903.md): Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-5911](https://cve.now/CVE-2018-5911.md): Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-5913](https://cve.now/CVE-2018-5913.md): A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2255](https://cve.now/CVE-2019-2255.md): An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2256](https://cve.now/CVE-2019-2256.md): An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdrago (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-2257](https://cve.now/CVE-2019-2257.md): Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2019-2259](https://cve.now/CVE-2019-2259.md): Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2017-8252](https://cve.now/CVE-2017-8252.md): Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-11819](https://cve.now/CVE-2018-11819.md): Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-11929](https://cve.now/CVE-2018-11929.md): Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indust (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-11934](https://cve.now/CVE-2018-11934.md): Possible out of bounds write due to improper input validation while processing DO\_ACS vendor command in Snapdragon Auto, Snapdragon Consumer (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-11939](https://cve.now/CVE-2018-11939.md): Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-11942](https://cve.now/CVE-2018-11942.md): Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2018-11947](https://cve.now/CVE-2018-11947.md): The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-11955](https://cve.now/CVE-2018-11955.md): Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer Electronics C…)
- [CVE-2018-13898](https://cve.now/CVE-2018-13898.md): Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Conne (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13901](https://cve.now/CVE-2018-13901.md): Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2018-13902](https://cve.now/CVE-2018-13902.md): Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13906](https://cve.now/CVE-2018-13906.md): The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application messag (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13907](https://cve.now/CVE-2018-13907.md): While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13908](https://cve.now/CVE-2018-13908.md): Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Com (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13909](https://cve.now/CVE-2018-13909.md): Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected beh (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2018-13910](https://cve.now/CVE-2018-13910.md): Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Cons (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2018-13911](https://cve.now/CVE-2018-13911.md): Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2019-4403](https://cve.now/CVE-2019-4403.md): IBM Connections 6.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Connections)
- [CVE-2019-4381](https://cve.now/CVE-2019-4381.md): IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection u (CVSS 5.9, IBM i)
- [CVE-2019-4239](https://cve.now/CVE-2019-4239.md): IBM MQ Advanced Cloud Pak (IBM Cloud Private 1.0.0 through 3.0.1) stores user credentials in plain in clear text which can be read by a loca (CVSS 6.2, MQ Advanced Cloud Pak)
- [CVE-2019-10126](https://cve.now/CVE-2019-10126.md): A flaw was found in the Linux kernel. (CVSS 5.9, kernel)
- [CVE-2019-11582](https://cve.now/CVE-2019-11582.md): An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attack (no CVSS, Atlassian Sourcetree for Windows)
- [CVE-2019-11770](https://cve.now/CVE-2019-11770.md): In Eclipse Buildship versions prior to 3.1.1, the build files indicate that this project is resolving dependencies over HTTP instead of HTTP (no CVSS, The Eclipse Foundation Eclipse Buildship)
- [CVE-2019-10159](https://cve.now/CVE-2019-10159.md): cfme-gemset versions 5.10.4.3 and below, 5.9.9.3 and below are vulnerable to a data leak, due to an improper authorization in the migration (CVSS 4.3, Red Hat cfme)
- [CVE-2019-12822](https://cve.now/CVE-2019-12822.md): In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds me (no CVSS)
- [CVE-2019-12819](https://cve.now/CVE-2019-12819.md): An issue was discovered in the Linux kernel before 5.0. (no CVSS)
- [CVE-2019-12818](https://cve.now/CVE-2019-12818.md): An issue was discovered in the Linux kernel before 4.20.15. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.