CVEs published June 25, 2019
26 CVEs were published on June 25, 2019: 0 critical, 2 high.
- Published
- 26
- Critical
- 0
- High
- 2
- Medium
- 11
- Low
- 1
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM Security Access Manager
- 9
- IBM API Connect
- 4
- HP Support Assistant
- 2
- IBM Sterling B2B Integrator
- 1
- Tenable Nessus
- 1
High 2
- CVE-2019-4145IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used IBM Security Access Manager
- CVE-2019-4135IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate IBM Security Access Manager
Medium, low and unrated 24
- CVE-2019-12280PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
- CVE-2019-3961Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input.Tenable Nessus
- CVE-2019-9836Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP)
- CVE-2019-6329HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.HP Support Assistant
- CVE-2019-6328HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.HP Support Assistant
- CVE-2019-4382IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using speciaIBM API Connect
- CVE-2019-4377IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks againIBM Sterling B2B Integrator
- CVE-2019-4158IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resourcesIBM Security Access Manager
- CVE-2019-4157IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting.IBM Security Access Manager
- CVE-2019-4156IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hIBM Security Access Manager
- CVE-2019-4153IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Security Access Manager
- CVE-2019-4152IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner.IBM Security Access Manager
- CVE-2019-4151IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hIBM Security Access Manager
- CVE-2019-4150IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to IBM Security Access Manager
- CVE-2018-2013IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks agaIBM API Connect
- CVE-2018-2011IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request thatIBM API Connect
- CVE-2018-1858IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and uIBM API Connect
- CVE-2019-12964LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
- CVE-2019-12963LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
- CVE-2019-12962LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
- CVE-2019-12961LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
- CVE-2019-12960LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.
- CVE-2019-12817arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read
- CVE-2019-12949In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an