CVEs published July 2, 2019
68 CVEs were published on July 2, 2019: 2 critical, 3 high. 1 is now in CISA KEV.
- Published
- 68
- Critical
- 2
- High
- 3
- Medium
- 4
- Low
- 1
- Unrated
- 58
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- IBM Spectrum Protect
- 4
- F5 BIG-IP
- 3
- BIG-IP · BIG-IQ
- 1
- curl
- 1
- django-rest-registration
- 1
- F5 BIG-IP, BIG-IQ
- 1
- FreeBSD
- 1
- fstream
- 1
- Fuji Electric Alpha7 PC Loader
- 1
- IBM Daeja ViewONE
- 1
Critical 2
High 3
- CVE-2019-10137A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens.spacewalkproject spacewalk-proxy
- CVE-2019-4292IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary codeIBM Security Guardium
- CVE-2019-4088IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused bIBM Spectrum Protect
Medium, low and unrated 63
- CVE-2019-13179Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a
- CVE-2019-13178modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyf
- CVE-2019-13177verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.django-rest-registration
- CVE-2019-6623On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server mF5 BIG-IP
- CVE-2019-6624On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual F5 BIG-IP
- CVE-2017-11580Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service.
- CVE-2017-11579In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device.
- CVE-2017-11578It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect
- CVE-2017-8416An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2019-6622On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl REST worker is vulnF5 BIG-IP
- CVE-2019-6621On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG-IQ 7.0.0-7.1.0.2, 6BIG-IP · BIG-IQ
- CVE-2017-8413An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2019-6620On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, an uF5 BIG-IP, BIG-IQ
- CVE-2017-8415An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2017-8412An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2017-8417An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2019-5599In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attackerFreeBSD
- CVE-2017-8414An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2019-13175Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used.
- CVE-2017-8410An issue was discovered on D-Link DCS-1100 and DCS-1130 devices.
- CVE-2017-8405An issue was discovered on D-Link DCS-1130 and DCS-1100 devices.
- CVE-2019-10136It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums.spacewalkproject spacewalk
- CVE-2019-13173fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite.fstream
- CVE-2019-10975An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the systemFuji Electric Alpha7 PC Loader
- CVE-2017-8409An issue was discovered on D-Link DCS-1130 devices.
- CVE-2017-8406An issue was discovered on D-Link DCS-1130 devices.
- CVE-2019-7252Linear eMerge E3-Series devices have Default Credentials.
- CVE-2019-7253Linear eMerge E3-Series devices allow Directory Traversal.
- CVE-2017-8407An issue was discovered on D-Link DCS-1130 devices.
- CVE-2019-7254Linear eMerge E3-Series devices allow File Inclusion.
- CVE-2017-8404An issue was discovered on D-Link DCS-1130 devices.
- CVE-2017-8411An issue was discovered on D-Link DCS-1130 devices.
- CVE-2019-7255Linear eMerge E3-Series devices allow XSS.
- CVE-2019-5443A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= curl
- CVE-2019-7257Linear eMerge E3-Series devices allow Unrestricted File Upload.
- CVE-2019-7258Linear eMerge E3-Series devices allow Privilege Escalation.
- CVE-2019-7259Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
- CVE-2019-7260Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
- CVE-2019-7261Linear eMerge E3-Series devices have Hard-coded Credentials.
- CVE-2019-7262Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
- CVE-2019-7263Linear eMerge E3-Series devices have a Version Control Failure.
- CVE-2019-7264Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
- CVE-2019-7265Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
- CVE-2019-7266Linear eMerge 50P/5000P devices allow Authentication Bypass.
- CVE-2019-7267Linear eMerge 50P/5000P devices allow Cookie Path Traversal.
- CVE-2019-7268Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.
- CVE-2019-7269Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.
- CVE-2019-7270Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
- CVE-2019-12594DOSBox 0.74-2 has Incorrect Access Control.
- CVE-2017-8408An issue was discovered on D-Link DCS-1130 devices.
- CVE-2019-13056An issue was discovered in CyberPanel through 1.8.4.
- CVE-2019-4260IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in IBM Daeja ViewONE
- CVE-2019-4140IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring oldIBM Spectrum Protect
- CVE-2019-4134IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.IBM Planning Analytics Local
- CVE-2019-4129IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error messageIBM Spectrum Protect
- CVE-2019-13155An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13154An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13153An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13152An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13151An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13150An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13149An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.
- CVE-2019-13148An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11.