# CVEs published 2019-06-20

52 CVEs were published on June 20, 2019: 1 critical, 8 high. Days are UTC.

- [CVE-2019-3735](https://cve.now/CVE-2019-3735.md): Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1 (CVSS 7.0, Dell SupportAssist for Business PCs · Dell SupportAssist fo…)
- [CVE-2019-12920](https://cve.now/CVE-2019-12920.md): On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain (no CVSS)
- [CVE-2019-12919](https://cve.now/CVE-2019-12919.md): On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the local network has unauthenticated access to the i (no CVSS)
- [CVE-2018-15913](https://cve.now/CVE-2018-15913.md): An issue was discovered in Cloudera Manager 5.x through 5.15.0. (no CVSS)
- [CVE-2018-15890](https://cve.now/CVE-2018-15890.md): An issue was discovered in EthereumJ 1.8.2. (no CVSS, org.ethereum:ethereumj-core)
- [CVE-2019-8459](https://cve.now/CVE-2019-8459.md): Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the pa (no CVSS, Check Point Endpoint Security Client for Windows, VPN blade)
- [CVE-2019-8458](https://cve.now/CVE-2019-8458.md): Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL (no CVSS, Check Point Endpoint Security Client for Windows, Anti-Malw…)
- [CVE-2018-15891](https://cve.now/CVE-2018-15891.md): An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. (no CVSS)
- [CVE-2018-15892](https://cve.now/CVE-2018-15892.md): FreePBX 13 and 14 has SQL Injection in the DISA module via the hangup variable on the /admin/config.php?display=disa&view=form page. (no CVSS)
- [CVE-2019-12745](https://cve.now/CVE-2019-12745.md): out/out.UsrMgr.php in SeedDMS before 5.1.11 allows Stored Cross-Site Scripting (XSS) via the name field. (no CVSS)
- [CVE-2019-12744](https://cve.now/CVE-2019-12744.md): SeedDMS before 5.1.11 allows Remote Command Execution (RCE) because of unvalidated file upload of PHP scripts, a different vulnerability tha (no CVSS)
- [CVE-2018-16116](https://cve.now/CVE-2018-16116.md): SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to e (no CVSS)
- [CVE-2018-16117](https://cve.now/CVE-2018-16117.md): A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attacker (no CVSS)
- [CVE-2018-16118](https://cve.now/CVE-2018-16118.md): A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote (no CVSS)
- [CVE-2018-16119](https://cve.now/CVE-2018-16119.md): Stack-based buffer overflow in the httpd server of TP-Link WR1043nd (Firmware Version 3) allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2018-16247](https://cve.now/CVE-2018-16247.md): YzmCMS 5.1 has XSS via the admin/system\_manage/user\_config\_add.html title parameter. (no CVSS)
- [CVE-2018-16248](https://cve.now/CVE-2018-16248.md): b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, whi (no CVSS)
- [CVE-2019-12905](https://cve.now/CVE-2019-12905.md): FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. (no CVSS)
- [CVE-2017-17944](https://cve.now/CVE-2017-17944.md): The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation. (no CVSS)
- [CVE-2018-16249](https://cve.now/CVE-2018-16249.md): In Symphony before 3.3.0, there is XSS in the Title under Post. (no CVSS)
- [CVE-2019-6964](https://cve.now/CVE-2019-6964.md): A heap-based buffer over-read in Service\_SetParamStringValue in cosa\_x\_cisco\_com\_ddns\_dml.c of the RDK RDKB-20181217-1 CcspPandM module may (no CVSS)
- [CVE-2019-6963](https://cve.now/CVE-2019-6963.md): A heap-based buffer overflow in cosa\_dhcpv4\_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to (no CVSS)
- [CVE-2019-6962](https://cve.now/CVE-2019-6962.md): A shell injection issue in cosa\_wifi\_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execu (no CVSS)
- [CVE-2019-6961](https://cve.now/CVE-2019-6961.md): Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, R (no CVSS)
- [CVE-2018-16250](https://cve.now/CVE-2018-16250.md): The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first na (no CVSS)
- [CVE-2018-16251](https://cve.now/CVE-2018-16251.md): A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. (no CVSS)
- [CVE-2018-16514](https://cve.now/CVE-2018-16514.md): A cross-site scripting (XSS) vulnerability in the View Filters page (view\_filters\_page.php) and Edit Filter page (manage\_filter\_edit\_page.ph (no CVSS, mantisbt/mantisbt)
- [CVE-2018-16553](https://cve.now/CVE-2018-16553.md): In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin. (no CVSS)
- [CVE-2019-1899](https://cve.now/CVE-2019-1899.md): Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability (CVSS 5.3, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2019-1903](https://cve.now/CVE-2019-1903.md): Cisco Security Manager XML Entity Expansion Vulnerability (CVSS 6.5, Cisco Security Manager)
- [CVE-2019-1905](https://cve.now/CVE-2019-1905.md): Cisco Email Security Appliance GZIP Content Filter Bypass Vulnerability (CVSS 5.8, Cisco Email Security Appliance)
- [CVE-2019-1906](https://cve.now/CVE-2019-1906.md): Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability (CVSS 4.3, Cisco Prime Infrastructure)
- [CVE-2019-1878](https://cve.now/CVE-2019-1878.md): Cisco TelePresence Endpoint Command Shell Injection Vulnerability (CVSS 7.5, Cisco TelePresence TC Software)
- [CVE-2019-1879](https://cve.now/CVE-2019-1879.md): Cisco Integrated Management Controller CLI Command Injection Vulnerability (CVSS 6.4, Cisco Unified Computing System)
- [CVE-2019-1897](https://cve.now/CVE-2019-1897.md): Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability (CVSS 5.3, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2019-1898](https://cve.now/CVE-2019-1898.md): Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability (CVSS 5.3, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2019-1874](https://cve.now/CVE-2019-1874.md): Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability (CVSS 8.8, Cisco Prime Service Catalog)
- [CVE-2019-1875](https://cve.now/CVE-2019-1875.md): Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Prime Service Catalog)
- [CVE-2019-1876](https://cve.now/CVE-2019-1876.md): Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerability (CVSS 4.0, Cisco Wide Area Application Services)
- [CVE-2019-1631](https://cve.now/CVE-2019-1631.md): Cisco Integrated Management Controller Information Disclosure Vulnerability (CVSS 5.3, Cisco Unified Computing System)
- [CVE-2019-1632](https://cve.now/CVE-2019-1632.md): Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability (CVSS 4.6, Cisco Unified Computing System)
- [CVE-2019-1843](https://cve.now/CVE-2019-1843.md): Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerability (CVSS 8.6, Cisco RV130W Wireless-N Multifunction VPN Router Firmware)
- [CVE-2019-1848](https://cve.now/CVE-2019-1848.md): Cisco DNA Center Authentication Bypass Vulnerability (CVSS 9.3, Cisco Digital Network Architecture Center)
- [CVE-2019-1869](https://cve.now/CVE-2019-1869.md): Cisco StarOS Denial of Service Vulnerability (CVSS 8.6, Cisco ASR 5000 Series Software)
- [CVE-2019-1627](https://cve.now/CVE-2019-1627.md): Cisco Integrated Management Controller Information Disclosure Vulnerability (CVSS 6.5, Cisco Unified Computing System)
- [CVE-2019-1628](https://cve.now/CVE-2019-1628.md): Cisco Integrated Management Controller Denial of Service Vulnerability (CVSS 5.5, Cisco Unified Computing System)
- [CVE-2019-1629](https://cve.now/CVE-2019-1629.md): Cisco Integrated Management Controller Arbitrary File Write Vulnerability (CVSS 5.3, Cisco Unified Computing System)
- [CVE-2019-1630](https://cve.now/CVE-2019-1630.md): Cisco Integrated Management Controller Denial of Service Vulnerability (CVSS 5.5, Cisco Unified Computing System)
- [CVE-2019-1624](https://cve.now/CVE-2019-1624.md): Cisco SD-WAN Solution Command Injection Vulnerability (CVSS 8.8, Cisco SD-WAN Solution)
- [CVE-2019-1625](https://cve.now/CVE-2019-1625.md): Cisco SD-WAN Solution Privilege Escalation Vulnerability (CVSS 7.8, Cisco SD-WAN Solution)
- [CVE-2019-1626](https://cve.now/CVE-2019-1626.md): Cisco SD-WAN Solution Privilege Escalation Vulnerability (CVSS 8.8, Cisco SD-WAN Solution)
- [CVE-2019-1623](https://cve.now/CVE-2019-1623.md): Cisco Meeting Server CLI Command Injection Vulnerability (CVSS 6.7, Cisco Meeting Server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.