# CVEs published 2019-07-06

19 CVEs were published on July 6, 2019: 0 critical, 5 high. Days are UTC.

- [CVE-2019-13375](https://cve.now/CVE-2019-13375.md): A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100\_BETA6 in PayAction.class.php with the index.php/Pay (no CVSS)
- [CVE-2019-13374](https://cve.now/CVE-2019-13374.md): A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100 (no CVSS)
- [CVE-2019-13373](https://cve.now/CVE-2019-13373.md): An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100\_BETA6. (no CVSS)
- [CVE-2019-13372](https://cve.now/CVE-2019-13372.md): /web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100\_BETA6 allows remote attackers to execute arb (no CVSS)
- [CVE-2019-13370](https://cve.now/CVE-2019-13370.md): index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator. (no CVSS)
- [CVE-2019-13362](https://cve.now/CVE-2019-13362.md): Codedoc v3.2 has a stack-based buffer overflow in add\_variable in codedoc.c, related to codedoc\_strlcpy. (no CVSS)
- [CVE-2019-1930](https://cve.now/CVE-2019-1930.md): Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities (CVSS 6.1, Cisco Firepower Management Center)
- [CVE-2019-1931](https://cve.now/CVE-2019-1931.md): Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities (CVSS 6.1, Cisco Firepower Management Center)
- [CVE-2019-1932](https://cve.now/CVE-2019-1932.md): Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability (CVSS 6.7, Cisco AMP for Endpoints)
- [CVE-2019-1933](https://cve.now/CVE-2019-1933.md): Cisco Email Security Appliance Content Filter Bypass Vulnerability (CVSS 5.8, Cisco Email Security Appliance)
- [CVE-2019-1921](https://cve.now/CVE-2019-1921.md): Cisco Email Security Appliance Content Filter Bypass Vulnerability (CVSS 5.8, Cisco Email Security Appliance)
- [CVE-2019-1922](https://cve.now/CVE-2019-1922.md): Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability (CVSS 5.3, Cisco IP Phone 8800 Series Software)
- [CVE-2019-1893](https://cve.now/CVE-2019-1893.md): Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability (CVSS 7.8, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2019-1894](https://cve.now/CVE-2019-1894.md): Cisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability (CVSS 7.2, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2019-1909](https://cve.now/CVE-2019-1909.md): Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability (CVSS 6.8, Cisco IOS XR Software)
- [CVE-2019-1911](https://cve.now/CVE-2019-1911.md): Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability (CVSS 5.3, Cisco Unified Communications Domain Manager)
- [CVE-2019-1887](https://cve.now/CVE-2019-1887.md): Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco Unified Communications Manager)
- [CVE-2019-1891](https://cve.now/CVE-2019-1891.md): Cisco Small Business Series Switches HTTP Denial of Service Vulnerability (CVSS 7.5, Cisco Small Business 300 Series Managed Switches)
- [CVE-2019-1892](https://cve.now/CVE-2019-1892.md): Cisco Small Business Series Switches Memory Corruption Vulnerability (CVSS 7.5, Cisco Small Business 300 Series Managed Switches)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.