CVEs published July 5, 2019
59 CVEs were published on July 5, 2019: 0 critical, 0 high.
- Published
- 59
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 59
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- SiteBridge Joruri Mail
- 2
- Sony VAIO Update
- 2
- SUKIMALAB.COM Attendance Manager
- 2
- SUKIMALAB.COM Online Lesson Booking
- 2
- WESEEK GROWI
- 2
- Zoho SalesIQ Team Zoho SalesIQ
- 2
- A.T.WORKS iDoors Reader
- 1
- Chris Doerr Related YouTube Videos
- 1
- Contest-Gallery Contest Gallery
- 1
- Custom4Web WP Open Graph
- 1
Medium, low and unrated 59
- CVE-2019-10639The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a
- CVE-2019-10638In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less prot
- CVE-2019-13358lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.
- CVE-2018-16386An issue was discovered in SWIFT Alliance Web Platform 7.1.23.
- CVE-2018-14733The Odoo Community Association (OCA) dbfilter_from_header module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS (regular expression
- CVE-2018-14529Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes.
- CVE-2018-14528Invoxia NVX220 devices allow TELNET access as admin with a default password.
- CVE-2019-12971BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type.
- CVE-2019-13352WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature.
- CVE-2019-13351posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descript
- CVE-2018-12621An issue was discovered in Eventum 3.5.0.
- CVE-2019-13345The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
- CVE-2018-14027Digisol Wireless Wifi Home Router HR-3300 allows XSS via the userid or password parameter to the admin login page.
- CVE-2019-13344An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to
- CVE-2019-13341In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
- CVE-2019-13340In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the content box.
- CVE-2019-13339In MiniCMS V1.10, stored XSS was found in mc-admin/page-edit.php (content box), which can be used to get a user's cookie.
- CVE-2019-13314virt-bootstrap 1.1.0 allows local users to discover a root password by listing a process, because this password may be present in the --root
- CVE-2019-13313libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via
- CVE-2019-5982Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-midSony VAIO Update
- CVE-2019-5983Cross-site request forgery (CSRF) vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of adFla-shop.com HTML5 Maps
- CVE-2019-5984Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of WaspThemes Custom CSS Pro
- CVE-2019-5961The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-thTsukurito Android App 'Tootdon for Mastodon'
- CVE-2019-5962Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspZoho SalesIQ Team Zoho SalesIQ
- CVE-2019-5963Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of adZoho SalesIQ Team Zoho SalesIQ
- CVE-2019-5964iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console aA.T.WORKS iDoors Reader
- CVE-2019-5965Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phSiteBridge Joruri Mail
- CVE-2019-5966Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/diSiteBridge Joruri Mail
- CVE-2019-5967Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML viSiteBridge Joruri CMS
- CVE-2019-5968Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administWESEEK GROWI
- CVE-2019-5969Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishingWESEEK GROWI
- CVE-2019-5970Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML viSUKIMALAB.COM Attendance Manager
- CVE-2019-5971Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authenticationSUKIMALAB.COM Attendance Manager
- CVE-2019-5972Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTMLSUKIMALAB.COM Online Lesson Booking
- CVE-2019-5973Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authenticatSUKIMALAB.COM Online Lesson Booking
- CVE-2019-5974Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authenticaContest-Gallery Contest Gallery
- CVE-2019-5979Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the N-MEDIA Personalized WooCommerce Cart Page
- CVE-2019-5980Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authChris Doerr Related YouTube Videos
- CVE-2019-5981Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with adSony VAIO Update
- CVE-2019-5960Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of aCustom4Web WP Open Graph
- CVE-2019-13144myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection.
- CVE-2019-13312block_cmp() in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read.
- CVE-2019-13311ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
- CVE-2019-13310ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
- CVE-2019-13309ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in Ma
- CVE-2019-13308ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.
- CVE-2019-13307ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
- CVE-2019-13306ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
- CVE-2019-13305ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one
- CVE-2019-13304ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
- CVE-2019-13303ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.
- CVE-2019-13302ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
- CVE-2019-13301ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
- CVE-2019-13300ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
- CVE-2019-13299ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
- CVE-2019-13298ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enh
- CVE-2019-13297ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is m
- CVE-2019-13296ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation
- CVE-2019-13295ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mi