CVEs published June 20, 2019
52 CVEs were published on June 20, 2019: 1 critical, 8 high.
- Published
- 52
- Critical
- 1
- High
- 8
- Medium
- 16
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 19
Most affected products
- Cisco Unified Computing System
- 7
- Cisco RV130W Wireless-N Multifunction VPN Router Firmware
- 4
- Cisco SD-WAN Solution
- 3
- Cisco Prime Service Catalog
- 2
- Check Point Endpoint Security Client for Windows, Anti-Malw…
- 1
- Check Point Endpoint Security Client for Windows, VPN blade
- 1
- Cisco ASR 5000 Series Software
- 1
- Cisco Digital Network Architecture Center
- 1
- Cisco Email Security Appliance
- 1
- Cisco Meeting Server
- 1
Critical 1
High 8
- CVE-2019-3735Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1Dell SupportAssist for Business PCs · Dell SupportAssist fo…
- CVE-2019-1878Cisco TelePresence Endpoint Command Shell Injection VulnerabilityCisco TelePresence TC Software
- CVE-2019-1874Cisco Prime Service Catalog Cross-Site Request Forgery VulnerabilityCisco Prime Service Catalog
- CVE-2019-1843Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2019-1869Cisco StarOS Denial of Service VulnerabilityCisco ASR 5000 Series Software
- CVE-2019-1624Cisco SD-WAN Solution Command Injection VulnerabilityCisco SD-WAN Solution
- CVE-2019-1625Cisco SD-WAN Solution Privilege Escalation VulnerabilityCisco SD-WAN Solution
- CVE-2019-1626Cisco SD-WAN Solution Privilege Escalation VulnerabilityCisco SD-WAN Solution
Medium, low and unrated 43
- CVE-2019-12920On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain
- CVE-2019-12919On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the i
- CVE-2018-15913An issue was discovered in Cloudera Manager 5.x through 5.15.0.
- CVE-2018-15890An issue was discovered in EthereumJ 1.8.2.org.ethereum:ethereumj-core
- CVE-2019-8459Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the paCheck Point Endpoint Security Client for Windows, VPN blade
- CVE-2019-8458Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLLCheck Point Endpoint Security Client for Windows, Anti-Malw…
- CVE-2018-15891An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4.
- CVE-2018-15892FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page.
- CVE-2019-12745out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field.
- CVE-2019-12744SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability tha
- CVE-2018-16116SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to e
- CVE-2018-16117A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attacker
- CVE-2018-16118A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote
- CVE-2018-16119Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code v
- CVE-2018-16247YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter.
- CVE-2018-16248b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, whi
- CVE-2019-12905FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman§ion=do&page=up URI.
- CVE-2017-17944The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.
- CVE-2018-16249In Symphony before 3.3.0, there is XSS in the Title under Post.
- CVE-2019-6964A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may
- CVE-2019-6963A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to
- CVE-2019-6962A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execu
- CVE-2019-6961Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, R
- CVE-2018-16250The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first na
- CVE-2018-16251A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu.
- CVE-2018-16514A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.phmantisbt/mantisbt
- CVE-2018-16553In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.
- CVE-2019-1899Cisco RV110W, RV130W, and RV215W Routers Information Disclosure VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2019-1903Cisco Security Manager XML Entity Expansion VulnerabilityCisco Security Manager
- CVE-2019-1905Cisco Email Security Appliance GZIP Content Filter Bypass VulnerabilityCisco Email Security Appliance
- CVE-2019-1906Cisco Prime Infrastructure Virtual Domain Privilege Escalation VulnerabilityCisco Prime Infrastructure
- CVE-2019-1879Cisco Integrated Management Controller CLI Command Injection VulnerabilityCisco Unified Computing System
- CVE-2019-1897Cisco RV110W, RV130W, and RV215W Routers Denial of Service VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2019-1898Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access VulnerabilityCisco RV130W Wireless-N Multifunction VPN Router Firmware
- CVE-2019-1875Cisco Prime Service Catalog Cross-Site Scripting VulnerabilityCisco Prime Service Catalog
- CVE-2019-1876Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass VulnerabilityCisco Wide Area Application Services
- CVE-2019-1631Cisco Integrated Management Controller Information Disclosure VulnerabilityCisco Unified Computing System
- CVE-2019-1632Cisco Integrated Management Controller Cross-Site Request Forgery VulnerabilityCisco Unified Computing System
- CVE-2019-1627Cisco Integrated Management Controller Information Disclosure VulnerabilityCisco Unified Computing System
- CVE-2019-1628Cisco Integrated Management Controller Denial of Service VulnerabilityCisco Unified Computing System
- CVE-2019-1629Cisco Integrated Management Controller Arbitrary File Write VulnerabilityCisco Unified Computing System
- CVE-2019-1630Cisco Integrated Management Controller Denial of Service VulnerabilityCisco Unified Computing System
- CVE-2019-1623Cisco Meeting Server CLI Command Injection VulnerabilityCisco Meeting Server