CVEs published June 26, 2019
35 CVEs were published on June 26, 2019: 0 critical, 4 high.
- Published
- 35
- Critical
- 0
- High
- 4
- Medium
- 9
- Low
- 1
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- IBM PureApplication System
- 5
- Lenovo Service Bridge
- 4
- moodle · moodle/moodle
- 3
- Atlassian Jira
- 1
- Facebook HHVM
- 1
- github.com/couchbase/sync_gateway
- 1
- Lenovo System Update
- 1
- PostgreSQL
- 1
- Spring Security · org.springframework.security:spring-se… +1
- 1
High 4
- CVE-2019-10164PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow.PostgreSQL
- CVE-2019-4241IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain aIBM PureApplication System
- CVE-2019-6168A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.Lenovo Service Bridge
- CVE-2019-6167A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.Lenovo Service Bridge
Medium, low and unrated 31
- CVE-2019-9039In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements github.com/couchbase/sync_gateway
- CVE-2019-10154A flaw was found in Moodle before versions 3.7, 3.6.4.moodle · moodle/moodle
- CVE-2019-10134A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18.moodle · moodle/moodle
- CVE-2019-10133A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18.moodle · moodle/moodle
- CVE-2019-12984A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13
- CVE-2019-12982Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a.
- CVE-2019-12981Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.
- CVE-2019-12980In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in block
- CVE-2019-12979ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c.
- CVE-2019-12978ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.
- CVE-2019-12977ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.
- CVE-2019-12976ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
- CVE-2019-12975ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
- CVE-2019-12974A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0
- CVE-2019-12973In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c.
- CVE-2018-20847An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3
- CVE-2018-20846Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi
- CVE-2018-20845Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 all
- CVE-2019-11583The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnAtlassian Jira
- CVE-2019-3569HHVM, when used with FastCGI, would bind by default to all available interfaces.Facebook HHVM
- CVE-2019-4235IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easieIBM PureApplication System
- CVE-2019-4234IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor.IBM PureApplication System
- CVE-2019-4225IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user.IBM PureApplication System
- CVE-2019-4224IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection.IBM PureApplication System
- CVE-2019-6169A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.Lenovo Service Bridge
- CVE-2019-6166A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.Lenovo Service Bridge
- CVE-2019-6163A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be wriLenovo System Update
- CVE-2019-11272PlaintextPasswordEncoder authenticates encoded passwords that are nullSpring Security · org.springframework.security:spring-se… +1
- CVE-2019-12972An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
- CVE-2019-12968A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2.
- CVE-2019-12966FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(