# CVEs published 2019-06-19

95 CVEs were published on June 19, 2019: 2 critical, 2 high. Days are UTC.

- [CVE-2019-12904](https://cve.now/CVE-2019-12904.md): In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are avail (no CVSS)
- [CVE-2019-12903](https://cve.now/CVE-2019-12903.md): Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database co (no CVSS)
- [CVE-2019-12902](https://cve.now/CVE-2019-12902.md): Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. (no CVSS)
- [CVE-2019-12901](https://cve.now/CVE-2019-12901.md): Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete file (no CVSS)
- [CVE-2019-3787](https://cve.now/CVE-2019-3787.md): UAA defaults email address to an insecure domain (CVSS 8.3, Cloud Foundry UAA Release)
- [CVE-2019-3737](https://cve.now/CVE-2019-3737.md): Dell EMC Avamar Security Update for ADMe Web UI Vulnerability (CVSS 8.6, Dell EMC Avamar)
- [CVE-2019-2729](https://cve.now/CVE-2019-2729.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2019-12900](https://cve.now/CVE-2019-12900.md): BZ2\_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors. (CVSS 9.8, bzlib · bz2 +1)
- [CVE-2019-12899](https://cve.now/CVE-2019-12899.md): Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at ntdll!RtlQueueWorkItem+0x00000000000005e3. (no CVSS)
- [CVE-2019-12898](https://cve.now/CVE-2019-12898.md): Delta Electronics DeviceNet Builder 2.04 has a User Mode Write AV starting at image00400000+0x000000000017a45e. (no CVSS)
- [CVE-2019-12897](https://cve.now/CVE-2019-12897.md): Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074. (no CVSS)
- [CVE-2019-12896](https://cve.now/CVE-2019-12896.md): Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77. (no CVSS)
- [CVE-2019-12895](https://cve.now/CVE-2019-12895.md): In Alternate Pic View 2.600, the Exception Handler Chain is Corrupted starting at PicViewer!PerfgrapFinalize+0x00000000000b916d. (no CVSS)
- [CVE-2019-12894](https://cve.now/CVE-2019-12894.md): Alternate Pic View 2.600 has a Read Access Violation at the Instruction Pointer after a call from PicViewer!PerfgrapFinalize+0x00000000000a9 (no CVSS)
- [CVE-2019-12893](https://cve.now/CVE-2019-12893.md): Alternate Pic View 2.600 has a User Mode Write AV starting at PicViewer!PerfgrapFinalize+0x00000000000a8868. (no CVSS)
- [CVE-2017-14395](https://cve.now/CVE-2017-14395.md): Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctl (no CVSS)
- [CVE-2017-14394](https://cve.now/CVE-2017-14394.md): OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correct (no CVSS)
- [CVE-2018-9561](https://cve.now/CVE-2018-9561.md): In llcp\_util\_parse\_connect of llcp\_util.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2025](https://cve.now/CVE-2019-2025.md): In binder\_thread\_read of binder.c, there is a possible use-after-free due to improper locking. (no CVSS, Android)
- [CVE-2019-2024](https://cve.now/CVE-2019-2024.md): In em28xx\_unregister\_dvb of em28xx-dvb.c, there is a possible use after free issue. (no CVSS, Android)
- [CVE-2019-2023](https://cve.now/CVE-2019-2023.md): In ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller. (no CVSS, Android)
- [CVE-2019-2003](https://cve.now/CVE-2019-2003.md): In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. (no CVSS, Android)
- [CVE-2019-2022](https://cve.now/CVE-2019-2022.md): In rw\_t3t\_act\_handle\_fmt\_rsp and rw\_t3t\_act\_handle\_sro\_rsp of rw\_t3t.cc, there is a possible out-of-bound read due to a missing bounds check (no CVSS, Android)
- [CVE-2019-2021](https://cve.now/CVE-2019-2021.md): In rw\_t3t\_act\_handle\_ndef\_detect\_rsp of rw\_t3t.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2020](https://cve.now/CVE-2019-2020.md): In llcp\_dlc\_proc\_rr\_rnr\_pdu of llcp\_dlc.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2019](https://cve.now/CVE-2019-2019.md): In ce\_t4t\_data\_cback of ce\_t4t.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2018-9564](https://cve.now/CVE-2018-9564.md): In llcp\_util\_parse\_link\_params of llcp\_util.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2018-9563](https://cve.now/CVE-2018-9563.md): In llcp\_util\_parse\_cc of llcp\_util.cc, there is a possible out-of-bound read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2018](https://cve.now/CVE-2019-2018.md): In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root (no CVSS, Android)
- [CVE-2019-2017](https://cve.now/CVE-2019-2017.md): In rw\_t2t\_handle\_tlv\_detect\_rsp of rw\_t2t\_ndef.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2016](https://cve.now/CVE-2019-2016.md): In NFA\_SendRawFrame of nfa\_dm\_api.cc, there is a possible out-of-bound write due to improper input validation. (no CVSS, Android)
- [CVE-2019-2015](https://cve.now/CVE-2019-2015.md): In rw\_t3t\_act\_handle\_check\_rsp of rw\_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2014](https://cve.now/CVE-2019-2014.md): In rw\_t3t\_handle\_get\_sc\_poll\_rsp of rw\_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2013](https://cve.now/CVE-2019-2013.md): In rw\_t3t\_act\_handle\_sro\_rsp of rw\_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2012](https://cve.now/CVE-2019-2012.md): In rw\_t3t\_act\_handle\_fmt\_rsp of rw\_t3t.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2011](https://cve.now/CVE-2019-2011.md): In readNullableNativeHandleNoDup of Parcel.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2010](https://cve.now/CVE-2019-2010.md): In phNxpNciHal\_process\_ext\_rsp of phNxpNciHal\_ext.cc, there is a possible out-of-bound write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2009](https://cve.now/CVE-2019-2009.md): In l2c\_lcc\_proc\_pdu of l2c\_fcr.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2008](https://cve.now/CVE-2019-2008.md): In createEffect of AudioFlinger.cpp, there is a possible memory corruption due to a race condition. (no CVSS, Android)
- [CVE-2019-2007](https://cve.now/CVE-2019-2007.md): In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-2006](https://cve.now/CVE-2019-2006.md): In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2019-1990](https://cve.now/CVE-2019-1990.md): In ihevcd\_fmt\_conv\_420sp\_to\_420p of ihevcd\_fmt\_conv.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-1989](https://cve.now/CVE-2019-1989.md): In ih264d\_fmt\_conv\_420sp\_to\_420p of ih264d\_format\_conv.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2005](https://cve.now/CVE-2019-2005.md): In onPermissionGrantResult of GrantPermissionsActivity.java, there is a possible incorrectly granted permission due to a missing permission (no CVSS, Android)
- [CVE-2019-2004](https://cve.now/CVE-2019-2004.md): In publishKeyEvent, publishMotionEvent and sendUnchainedFinishedSignal of InputTransport.cpp, there are uninitialized data leading to local (no CVSS, Android)
- [CVE-2019-1985](https://cve.now/CVE-2019-1985.md): In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an un (no CVSS, Android)
- [CVE-2018-16593](https://cve.now/CVE-2018-16593.md): The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection. (no CVSS)
- [CVE-2018-16594](https://cve.now/CVE-2018-16594.md): The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal. (no CVSS)
- [CVE-2018-16595](https://cve.now/CVE-2018-16595.md): The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow. (no CVSS)
- [CVE-2019-12890](https://cve.now/CVE-2019-12890.md): RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.a (no CVSS)
- [CVE-2018-16613](https://cve.now/CVE-2018-16613.md): An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. (no CVSS)
- [CVE-2018-16618](https://cve.now/CVE-2018-16618.md): VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. (no CVSS)
- [CVE-2018-17079](https://cve.now/CVE-2018-17079.md): An issue was discovered in ZRLOG 2.0.1. (no CVSS)
- [CVE-2018-17146](https://cve.now/CVE-2018-17146.md): A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. (no CVSS)
- [CVE-2018-17148](https://cve.now/CVE-2018-17148.md): An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) (no CVSS)
- [CVE-2018-17374](https://cve.now/CVE-2018-17374.md): SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter\_order\_Dir or filter\_order parameter. (no CVSS)
- [CVE-2018-17381](https://cve.now/CVE-2018-17381.md): SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter\_order\_Dir or filter\_order parameter. (no CVSS)
- [CVE-2018-17386](https://cve.now/CVE-2018-17386.md): SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH\_INFO to mydeals/ or listdeals/. (no CVSS)
- [CVE-2018-17387](https://cve.now/CVE-2018-17387.md): CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account. (no CVSS)
- [CVE-2019-9763](https://cve.now/CVE-2019-9763.md): An issue was discovered in Openfind Mail2000 6.0 and 7.0 Webmail. (no CVSS)
- [CVE-2018-17388](https://cve.now/CVE-2018-17388.md): SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login\_check.php, or the id parameter to (no CVSS)
- [CVE-2018-17389](https://cve.now/CVE-2018-17389.md): CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account. (no CVSS)
- [CVE-2019-11233](https://cve.now/CVE-2019-11233.md): EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN\_ID element (no CVSS)
- [CVE-2019-11232](https://cve.now/CVE-2019-11232.md): EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP\_N (no CVSS)
- [CVE-2018-17393](https://cve.now/CVE-2018-17393.md): SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/pa (no CVSS)
- [CVE-2018-17398](https://cve.now/CVE-2018-17398.md): SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter\_category\_id parameter. (no CVSS)
- [CVE-2018-17399](https://cve.now/CVE-2018-17399.md): SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter. (no CVSS)
- [CVE-2018-17423](https://cve.now/CVE-2018-17423.md): An issue was discovered in e107 v2.1.9. (no CVSS)
- [CVE-2018-17840](https://cve.now/CVE-2018-17840.md): SQL injection exists in Scriptzee Education Website 1.0 via the college\_list.html subject, city, or country parameter. (no CVSS)
- [CVE-2018-15506](https://cve.now/CVE-2018-15506.md): In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) att (no CVSS)
- [CVE-2018-17841](https://cve.now/CVE-2018-17841.md): SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter. (no CVSS)
- [CVE-2019-11649](https://cve.now/CVE-2019-11649.md): KM03461174 Micro Focus Fortify Software Security Center Server, CVE-2019-11649 (CVSS 5.4, Micro Focus Fortify Software Security Center Server)
- [CVE-2018-17842](https://cve.now/CVE-2018-17842.md): SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h\_room\_type parameter. (no CVSS)
- [CVE-2018-18406](https://cve.now/CVE-2018-18406.md): An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). (no CVSS)
- [CVE-2018-18425](https://cve.now/CVE-2018-18425.md): The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship bet (no CVSS)
- [CVE-2019-6114](https://cve.now/CVE-2019-6114.md): An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. (no CVSS)
- [CVE-2019-9701](https://cve.now/CVE-2019-9701.md): DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attack (no CVSS, Data Loss Prevention)
- [CVE-2018-18471](https://cve.now/CVE-2018-18471.md): /api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability (no CVSS)
- [CVE-2018-18472](https://cve.now/CVE-2018-18472.md): Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in (no CVSS)
- [CVE-2019-12491](https://cve.now/CVE-2019-12491.md): OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on servers managed by OnApp (no CVSS)
- [CVE-2018-18757](https://cve.now/CVE-2018-18757.md): Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit\_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758. (no CVSS)
- [CVE-2018-18863](https://cve.now/CVE-2018-18863.md): NGA ResourceLink 20.0.2.1 allows local file inclusion. (no CVSS)
- [CVE-2018-18758](https://cve.now/CVE-2018-18758.md): Open Faculty Evaluation System 7 for PHP 7 allows submit\_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757. (no CVSS)
- [CVE-2018-19878](https://cve.now/CVE-2018-19878.md): An issue was discovered on Teltonika RTU950 R\_31.04.89 devices. (no CVSS)
- [CVE-2019-6972](https://cve.now/CVE-2019-6972.md): An issue was discovered on TP-Link TL-WR1043ND V2 devices. (no CVSS)
- [CVE-2019-6971](https://cve.now/CVE-2019-6971.md): An issue was discovered on TP-Link TL-WR1043ND V2 devices. (no CVSS)
- [CVE-2019-10257](https://cve.now/CVE-2019-10257.md): Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. (no CVSS)
- [CVE-2019-4385](https://cve.now/CVE-2019-4385.md): IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. (CVSS 5.9, IBM Spectrum Protect Plus)
- [CVE-2019-4384](https://cve.now/CVE-2019-4384.md): IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. (CVSS 4.3, IBM Campaign)
- [CVE-2019-4364](https://cve.now/CVE-2019-4364.md): IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary comman (CVSS 5.5, IBM Maximo Asset Management)
- [CVE-2019-4303](https://cve.now/CVE-2019-4303.md): IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Maximo Asset Management)
- [CVE-2017-1107](https://cve.now/CVE-2017-1107.md): IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated atta (CVSS 4.3, IBM Marketing Platform)
- [CVE-2019-12814](https://cve.now/CVE-2019-12814.md): A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. (CVSS 5.9, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2019-12436](https://cve.now/CVE-2019-12436.md): Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. (no CVSS)
- [CVE-2019-12435](https://cve.now/CVE-2019-12435.md): Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.