CVEs published July 4, 2019
48 CVEs were published on July 4, 2019: 0 critical, 5 high.
- Published
- 48
- Critical
- 0
- High
- 5
- Medium
- 0
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Cisco Web Security Appliance
- 2
- Cisco Application Policy Infrastructure Controller
- 1
- Cisco Jabber for Windows
- 1
- Cisco NX-OS System Software in ACI Mode
- 1
High 5
- CVE-2019-1890Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access VulnerabilityCisco NX-OS System Software in ACI Mode
- CVE-2019-1889Cisco Application Policy Infrastructure Controller REST API Privilege Escalation VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1855Cisco Jabber for Windows DLL Preloading VulnerabilityCisco Jabber for Windows
- CVE-2019-1884Cisco Web Security Appliance Web Proxy Denial of Service VulnerabilityCisco Web Security Appliance
- CVE-2019-1886Cisco Web Security Appliance HTTPS Certificate Denial of Service VulnerabilityCisco Web Security Appliance
Medium, low and unrated 43
- CVE-2019-13294AROX School-ERP Pro has a command execution vulnerability.
- CVE-2019-13292A SQL Injection issue was discovered in webERP 4.15.
- CVE-2019-13291In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc.
- CVE-2019-13290Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to
- CVE-2019-13289In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc.
- CVE-2019-13288In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file.
- CVE-2019-13287In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc.
- CVE-2019-13286In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc.
- CVE-2019-13283In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not
- CVE-2019-13282In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for
- CVE-2019-13281In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory.
- CVE-2019-13275An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress.
- CVE-2019-13262XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
- CVE-2019-13261XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.
- CVE-2019-13260XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.
- CVE-2019-13259XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.
- CVE-2019-13258XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.
- CVE-2019-13257XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.
- CVE-2019-13256XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.
- CVE-2019-13255XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.
- CVE-2019-13254XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.
- CVE-2019-13253XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.
- CVE-2019-13252ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0.
- CVE-2019-13251ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff.
- CVE-2019-13250ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f.
- CVE-2019-13249ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a.
- CVE-2019-13248ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450.
- CVE-2019-13247ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000024ed.
- CVE-2019-13246FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.
- CVE-2019-13245FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.
- CVE-2019-13244FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.
- CVE-2019-13243IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6.
- CVE-2019-13242IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98.
- CVE-2019-13241FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) i
- CVE-2019-13239inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.
- CVE-2019-13238An issue was discovered in Bento4 1.5.1.0.
- CVE-2018-20850Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server.
- CVE-2019-13233In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race conditi
- CVE-2019-13232Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "b
- CVE-2019-13229deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, a
- CVE-2019-13228deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks th
- CVE-2019-13227In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows symlinks there.
- CVE-2019-13226deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() functi