# CVEs published 2019-07-02

68 CVEs were published on July 2, 2019: 2 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-13179](https://cve.now/CVE-2019-13179.md): Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto\_keyfile.bin (mode 0600 owned by root) to /boot within a (no CVSS)
- [CVE-2019-13178](https://cve.now/CVE-2019-13178.md): modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyf (no CVSS)
- [CVE-2019-13177](https://cve.now/CVE-2019-13177.md): verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i. (no CVSS, django-rest-registration)
- [CVE-2019-6623](https://cve.now/CVE-2019-6623.md): On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server m (no CVSS, F5 BIG-IP)
- [CVE-2019-6624](https://cve.now/CVE-2019-6624.md): On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual (no CVSS, F5 BIG-IP)
- [CVE-2017-11580](https://cve.now/CVE-2017-11580.md): Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. (no CVSS)
- [CVE-2017-11579](https://cve.now/CVE-2017-11579.md): In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. (no CVSS)
- [CVE-2017-11578](https://cve.now/CVE-2017-11578.md): It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect (no CVSS)
- [CVE-2017-8416](https://cve.now/CVE-2017-8416.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2019-6622](https://cve.now/CVE-2019-6622.md): On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl REST worker is vuln (no CVSS, F5 BIG-IP)
- [CVE-2019-6621](https://cve.now/CVE-2019-6621.md): On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG-IQ 7.0.0-7.1.0.2, 6 (no CVSS, BIG-IP · BIG-IQ)
- [CVE-2017-8413](https://cve.now/CVE-2017-8413.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2019-6620](https://cve.now/CVE-2019-6620.md): On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4 and BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, an u (no CVSS, F5 BIG-IP, BIG-IQ)
- [CVE-2017-8415](https://cve.now/CVE-2017-8415.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2017-8412](https://cve.now/CVE-2017-8412.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2017-8417](https://cve.now/CVE-2017-8417.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2019-5599](https://cve.now/CVE-2019-5599.md): In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker (no CVSS, FreeBSD)
- [CVE-2017-8414](https://cve.now/CVE-2017-8414.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2019-13175](https://cve.now/CVE-2019-13175.md): Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. (no CVSS)
- [CVE-2017-8410](https://cve.now/CVE-2017-8410.md): An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. (no CVSS)
- [CVE-2017-8405](https://cve.now/CVE-2017-8405.md): An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. (no CVSS)
- [CVE-2019-10136](https://cve.now/CVE-2019-10136.md): It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. (CVSS 4.3, spacewalkproject spacewalk)
- [CVE-2019-10137](https://cve.now/CVE-2019-10137.md): A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. (CVSS 8.1, spacewalkproject spacewalk-proxy)
- [CVE-2019-13173](https://cve.now/CVE-2019-13173.md): fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. (no CVSS, fstream)
- [CVE-2019-10975](https://cve.now/CVE-2019-10975.md): An out-of-bounds read vulnerability has been identified in Fuji Electric Alpha7 PC Loader Versions 1.1 and prior, which may crash the system (no CVSS, Fuji Electric Alpha7 PC Loader)
- [CVE-2017-8409](https://cve.now/CVE-2017-8409.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2017-8406](https://cve.now/CVE-2017-8406.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2019-7252](https://cve.now/CVE-2019-7252.md): Linear eMerge E3-Series devices have Default Credentials. (no CVSS)
- [CVE-2019-7253](https://cve.now/CVE-2019-7253.md): Linear eMerge E3-Series devices allow Directory Traversal. (no CVSS)
- [CVE-2017-8407](https://cve.now/CVE-2017-8407.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2019-7254](https://cve.now/CVE-2019-7254.md): Linear eMerge E3-Series devices allow File Inclusion. (no CVSS)
- [CVE-2017-8404](https://cve.now/CVE-2017-8404.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2017-8411](https://cve.now/CVE-2017-8411.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2019-7255](https://cve.now/CVE-2019-7255.md): Linear eMerge E3-Series devices allow XSS. (no CVSS)
- [CVE-2019-5443](https://cve.now/CVE-2019-5443.md): A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl \<= (no CVSS, curl)
- [CVE-2019-7257](https://cve.now/CVE-2019-7257.md): Linear eMerge E3-Series devices allow Unrestricted File Upload. (no CVSS)
- [CVE-2019-7258](https://cve.now/CVE-2019-7258.md): Linear eMerge E3-Series devices allow Privilege Escalation. (no CVSS)
- [CVE-2019-7259](https://cve.now/CVE-2019-7259.md): Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure. (no CVSS)
- [CVE-2019-7260](https://cve.now/CVE-2019-7260.md): Linear eMerge E3-Series devices have Cleartext Credentials in a Database. (no CVSS)
- [CVE-2019-7261](https://cve.now/CVE-2019-7261.md): Linear eMerge E3-Series devices have Hard-coded Credentials. (no CVSS)
- [CVE-2019-7262](https://cve.now/CVE-2019-7262.md): Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF). (no CVSS)
- [CVE-2019-7263](https://cve.now/CVE-2019-7263.md): Linear eMerge E3-Series devices have a Version Control Failure. (no CVSS)
- [CVE-2019-7264](https://cve.now/CVE-2019-7264.md): Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform. (no CVSS)
- [CVE-2019-7265](https://cve.now/CVE-2019-7265.md): Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH). (no CVSS)
- [CVE-2019-7266](https://cve.now/CVE-2019-7266.md): Linear eMerge 50P/5000P devices allow Authentication Bypass. (no CVSS)
- [CVE-2019-7267](https://cve.now/CVE-2019-7267.md): Linear eMerge 50P/5000P devices allow Cookie Path Traversal. (no CVSS)
- [CVE-2019-7268](https://cve.now/CVE-2019-7268.md): Linear eMerge 50P/5000P devices allow Unauthenticated File Upload. (no CVSS)
- [CVE-2019-7269](https://cve.now/CVE-2019-7269.md): Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution. (no CVSS)
- [CVE-2019-7270](https://cve.now/CVE-2019-7270.md): Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF). (no CVSS)
- [CVE-2019-12594](https://cve.now/CVE-2019-12594.md): DOSBox 0.74-2 has Incorrect Access Control. (no CVSS)
- [CVE-2017-8408](https://cve.now/CVE-2017-8408.md): An issue was discovered on D-Link DCS-1130 devices. (no CVSS)
- [CVE-2019-13056](https://cve.now/CVE-2019-13056.md): An issue was discovered in CyberPanel through 1.8.4. (no CVSS)
- [CVE-2019-4292](https://cve.now/CVE-2019-4292.md): IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code (CVSS 8.8, IBM Security Guardium)
- [CVE-2019-4260](https://cve.now/CVE-2019-4260.md): IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in (CVSS 5.3, IBM Daeja ViewONE)
- [CVE-2019-4140](https://cve.now/CVE-2019-4140.md): IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old (CVSS 6.3, IBM Spectrum Protect)
- [CVE-2019-4134](https://cve.now/CVE-2019-4134.md): IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Planning Analytics Local)
- [CVE-2019-4129](https://cve.now/CVE-2019-4129.md): IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message (CVSS 3.1, IBM Spectrum Protect)
- [CVE-2019-4088](https://cve.now/CVE-2019-4088.md): IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused b (CVSS 7.4, IBM Spectrum Protect)
- [CVE-2019-4087](https://cve.now/CVE-2019-4087.md): IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents are vulnerable to a stack-based buffer overflow, caused by improper bounds check (CVSS 9.8, IBM Spectrum Protect)
- [CVE-2019-13155](https://cve.now/CVE-2019-13155.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13154](https://cve.now/CVE-2019-13154.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13153](https://cve.now/CVE-2019-13153.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13152](https://cve.now/CVE-2019-13152.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13151](https://cve.now/CVE-2019-13151.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13150](https://cve.now/CVE-2019-13150.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13149](https://cve.now/CVE-2019-13149.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-13148](https://cve.now/CVE-2019-13148.md): An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. (no CVSS)
- [CVE-2019-7256](https://cve.now/CVE-2019-7256.md): Linear eMerge E3-Series devices allow Command Injections. (CVSS 9.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.