# CVEs published 2019-06-27

106 CVEs were published on June 27, 2019: 2 critical, 6 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-10177](https://cve.now/CVE-2019-10177.md): A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9 and 5.10, due to user in (CVSS 6.5, Red Hat CloudForms)
- [CVE-2019-3632](https://cve.now/CVE-2019-3632.md): Directory Traversal vulnerability could lead to elevated privileges (CVSS 8.5, McAfee Enterprise Security Manager)
- [CVE-2019-3631](https://cve.now/CVE-2019-3631.md): Command Injection could allow authenticated users to execute arbitrary code (CVSS 8.0, McAfee Enterprise Security Manager)
- [CVE-2019-3630](https://cve.now/CVE-2019-3630.md): Command Injection could allow authenticated users to execute arbitrary code (CVSS 8.0, McAfee Enterprise Security Manager)
- [CVE-2019-3629](https://cve.now/CVE-2019-3629.md): Application protections bypass vulnerability could allow unauthenticated user to impersonate system users (CVSS 8.3, McAfee Enterprise Security Manager)
- [CVE-2018-15556](https://cve.now/CVE-2018-15556.md): The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty p (no CVSS)
- [CVE-2019-3628](https://cve.now/CVE-2019-3628.md): Privilege escalation could allow authenticated user to gain access to a core system (CVSS 7.5, McAfee Enterprise Security Manager)
- [CVE-2018-15557](https://cve.now/CVE-2018-15557.md): An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. (no CVSS)
- [CVE-2019-7225](https://cve.now/CVE-2019-7225.md): The ABB HMI components implement hidden administrative accounts that are used during the provisioning phase of the HMI interface. (no CVSS)
- [CVE-2019-5822](https://cve.now/CVE-2019-5822.md): Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a c (no CVSS, Google Chrome)
- [CVE-2019-5823](https://cve.now/CVE-2019-5823.md): Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation re (no CVSS, Google Chrome)
- [CVE-2019-5824](https://cve.now/CVE-2019-5824.md): Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption vi (no CVSS, Google Chrome)
- [CVE-2019-5827](https://cve.now/CVE-2019-5827.md): Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corrupti (no CVSS, Google Chrome)
- [CVE-2019-5828](https://cve.now/CVE-2019-5828.md): Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bound (no CVSS, Google Chrome)
- [CVE-2019-5829](https://cve.now/CVE-2019-5829.md): Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds m (no CVSS, Google Chrome)
- [CVE-2019-5830](https://cve.now/CVE-2019-5830.md): Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a cra (no CVSS, Google Chrome)
- [CVE-2019-5831](https://cve.now/CVE-2019-5831.md): Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a c (no CVSS, Google Chrome)
- [CVE-2019-5832](https://cve.now/CVE-2019-5832.md): Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data (no CVSS, Google Chrome)
- [CVE-2019-5833](https://cve.now/CVE-2019-5833.md): Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading se (no CVSS, Google Chrome)
- [CVE-2019-5834](https://cve.now/CVE-2019-5834.md): Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a craf (no CVSS, Google Chrome)
- [CVE-2019-5835](https://cve.now/CVE-2019-5835.md): Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds (no CVSS, Google Chrome)
- [CVE-2019-5836](https://cve.now/CVE-2019-5836.md): Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a (no CVSS, Google Chrome)
- [CVE-2019-5837](https://cve.now/CVE-2019-5837.md): Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a (no CVSS, Google Chrome)
- [CVE-2019-5838](https://cve.now/CVE-2019-5838.md): Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install (no CVSS, Google Chrome)
- [CVE-2019-5839](https://cve.now/CVE-2019-5839.md): Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL (no CVSS, Google Chrome)
- [CVE-2019-5840](https://cve.now/CVE-2019-5840.md): Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrict (no CVSS, Google Chrome)
- [CVE-2018-6168](https://cve.now/CVE-2018-6168.md): Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive informatio (no CVSS, Google Chrome)
- [CVE-2018-6171](https://cve.now/CVE-2018-6171.md): Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension (no CVSS, Google Chrome)
- [CVE-2018-6176](https://cve.now/CVE-2018-6176.md): Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised th (no CVSS, Google Chrome)
- [CVE-2018-6177](https://cve.now/CVE-2018-6177.md): Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HT (no CVSS, Google Chrome)
- [CVE-2019-5784](https://cve.now/CVE-2019-5784.md): Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corru (no CVSS, Google Chrome)
- [CVE-2019-5785](https://cve.now/CVE-2019-5785.md): Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory (no CVSS, Google Chrome)
- [CVE-2019-5786](https://cve.now/CVE-2019-5786.md): Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory (CVSS 6.5, KEV, Google Chrome · puppeteer)
- [CVE-2019-5805](https://cve.now/CVE-2019-5805.md): Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a craf (no CVSS, Google Chrome)
- [CVE-2019-5806](https://cve.now/CVE-2019-5806.md): Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruptio (no CVSS, Google Chrome)
- [CVE-2019-5807](https://cve.now/CVE-2019-5807.md): Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a c (no CVSS, Google Chrome)
- [CVE-2019-5808](https://cve.now/CVE-2019-5808.md): Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2019-5809](https://cve.now/CVE-2019-5809.md): Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to (no CVSS, Google Chrome)
- [CVE-2019-5810](https://cve.now/CVE-2019-5810.md): Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information f (no CVSS, Google Chrome)
- [CVE-2019-5811](https://cve.now/CVE-2019-5811.md): Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy v (no CVSS, Google Chrome)
- [CVE-2019-5812](https://cve.now/CVE-2019-5812.md): Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted (no CVSS, Google Chrome)
- [CVE-2019-5813](https://cve.now/CVE-2019-5813.md): Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted (no CVSS, Google Chrome)
- [CVE-2019-5814](https://cve.now/CVE-2019-5814.md): Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a c (no CVSS, Google Chrome)
- [CVE-2019-5816](https://cve.now/CVE-2019-5816.md): Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an expl (no CVSS, Google Chrome)
- [CVE-2019-5817](https://cve.now/CVE-2019-5817.md): Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corru (no CVSS, Google Chrome)
- [CVE-2019-5818](https://cve.now/CVE-2019-5818.md): Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information fr (no CVSS, Google Chrome)
- [CVE-2019-5819](https://cve.now/CVE-2019-5819.md): Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrar (no CVSS, Google Chrome)
- [CVE-2019-5820](https://cve.now/CVE-2019-5820.md): Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2019-5821](https://cve.now/CVE-2019-5821.md): Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2018-20073](https://cve.now/CVE-2018-20073.md): Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesy (no CVSS, Google Chrome)
- [CVE-2018-6118](https://cve.now/CVE-2018-6118.md): A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remo (no CVSS, Google Chrome)
- [CVE-2018-6121](https://cve.now/CVE-2018-6121.md): Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation (no CVSS, Google Chrome)
- [CVE-2018-6128](https://cve.now/CVE-2018-6128.md): Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a cra (no CVSS, Google Chrome)
- [CVE-2018-6129](https://cve.now/CVE-2018-6129.md): Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds m (no CVSS, Google Chrome)
- [CVE-2018-6130](https://cve.now/CVE-2018-6130.md): Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out (no CVSS, Google Chrome)
- [CVE-2018-6131](https://cve.now/CVE-2018-6131.md): Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruptio (no CVSS, Google Chrome)
- [CVE-2018-6132](https://cve.now/CVE-2018-6132.md): Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information fr (no CVSS, Google Chrome)
- [CVE-2018-6134](https://cve.now/CVE-2018-6134.md): Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML p (no CVSS, Google Chrome)
- [CVE-2018-6136](https://cve.now/CVE-2018-6136.md): Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a craf (no CVSS, Google Chrome)
- [CVE-2018-6138](https://cve.now/CVE-2018-6138.md): Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install (no CVSS, Google Chrome)
- [CVE-2018-6142](https://cve.now/CVE-2018-6142.md): Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read vi (no CVSS, Google Chrome)
- [CVE-2018-6145](https://cve.now/CVE-2018-6145.md): Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy vi (no CVSS, Google Chrome)
- [CVE-2018-6148](https://cve.now/CVE-2018-6148.md): Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation re (no CVSS, Google Chrome)
- [CVE-2018-6149](https://cve.now/CVE-2018-6149.md): Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a (no CVSS, Google Chrome)
- [CVE-2018-6150](https://cve.now/CVE-2018-6150.md): Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via (no CVSS, Google Chrome)
- [CVE-2018-6154](https://cve.now/CVE-2018-6154.md): Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruptio (no CVSS, Google Chrome)
- [CVE-2018-6155](https://cve.now/CVE-2018-6155.md): Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap (no CVSS, Google Chrome)
- [CVE-2018-6156](https://cve.now/CVE-2018-6156.md): Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit hea (no CVSS, Google Chrome)
- [CVE-2018-6157](https://cve.now/CVE-2018-6157.md): Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2018-6159](https://cve.now/CVE-2018-6159.md): Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sens (no CVSS, Google Chrome)
- [CVE-2018-6161](https://cve.now/CVE-2018-6161.md): Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a (no CVSS, Google Chrome)
- [CVE-2017-5028](https://cve.now/CVE-2017-5028.md): Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted (no CVSS, Google Chrome)
- [CVE-2018-16064](https://cve.now/CVE-2018-16064.md): Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a (no CVSS, Google Chrome)
- [CVE-2018-16069](https://cve.now/CVE-2018-16069.md): Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-o (no CVSS, Google Chrome)
- [CVE-2018-16070](https://cve.now/CVE-2018-16070.md): Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a craf (no CVSS, Google Chrome)
- [CVE-2018-16073](https://cve.now/CVE-2018-16073.md): Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation (no CVSS, Google Chrome)
- [CVE-2018-16074](https://cve.now/CVE-2018-16074.md): Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation (no CVSS, Google Chrome)
- [CVE-2018-16075](https://cve.now/CVE-2018-16075.md): Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a (no CVSS, Google Chrome)
- [CVE-2018-16077](https://cve.now/CVE-2018-16077.md): Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a cra (no CVSS, Google Chrome)
- [CVE-2018-16086](https://cve.now/CVE-2018-16086.md): Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install (no CVSS, Google Chrome)
- [CVE-2018-17460](https://cve.now/CVE-2018-17460.md): Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of th (no CVSS, Google Chrome)
- [CVE-2018-17478](https://cve.now/CVE-2018-17478.md): Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object (no CVSS, Google Chrome)
- [CVE-2018-17479](https://cve.now/CVE-2018-17479.md): Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit (no CVSS, Google Chrome)
- [CVE-2019-7226](https://cve.now/CVE-2019-7226.md): The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to pr (no CVSS)
- [CVE-2019-7227](https://cve.now/CVE-2019-7227.md): In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the (no CVSS)
- [CVE-2019-7228](https://cve.now/CVE-2019-7228.md): The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. (no CVSS)
- [CVE-2019-12581](https://cve.now/CVE-2019-12581.md): A reflective Cross-site scripting (XSS) vulnerability in the free\_time\_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices (no CVSS)
- [CVE-2019-12583](https://cve.now/CVE-2019-12583.md): Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest (no CVSS)
- [CVE-2019-4252](https://cve.now/CVE-2019-4252.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. (CVSS 6.5, IBM Rational Collaborative Lifecycle Management)
- [CVE-2019-4250](https://cve.now/CVE-2019-4250.md): IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2019-4249](https://cve.now/CVE-2019-4249.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2019-4084](https://cve.now/CVE-2019-4084.md): IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obta (CVSS 4.3, IBM Rational Collaborative Lifecycle Management)
- [CVE-2019-4083](https://cve.now/CVE-2019-4083.md): IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1893](https://cve.now/CVE-2018-1893.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1892](https://cve.now/CVE-2018-1892.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1828](https://cve.now/CVE-2018-1828.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1827](https://cve.now/CVE-2018-1827.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1826](https://cve.now/CVE-2018-1826.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1760](https://cve.now/CVE-2018-1760.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1758](https://cve.now/CVE-2018-1758.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1734](https://cve.now/CVE-2018-1734.md): IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a (CVSS 4.3, IBM Rational Collaborative Lifecycle Management)
- [CVE-2019-12887](https://cve.now/CVE-2019-12887.md): KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2). (no CVSS, linotp)
- [CVE-2019-1620](https://cve.now/CVE-2019-1620.md): Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability (CVSS 9.8, Cisco Data Center Network Manager)
- [CVE-2019-1621](https://cve.now/CVE-2019-1621.md): Cisco Data Center Network Manager Arbitrary File Download Vulnerability (CVSS 7.5, Cisco Data Center Network Manager)
- [CVE-2019-1622](https://cve.now/CVE-2019-1622.md): Cisco Data Center Network Manager Information Disclosure Vulnerability (CVSS 5.3, Cisco Data Center Network Manager)
- [CVE-2019-1619](https://cve.now/CVE-2019-1619.md): Cisco Data Center Network Manager Authentication Bypass Vulnerability (CVSS 9.8, Cisco Data Center Network Manager)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.