# CVEs published 2019-07-12

11 CVEs were published on July 12, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-13161](https://cve.now/CVE-2019-13161.md): An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asteri (no CVSS)
- [CVE-2019-12827](https://cve.now/CVE-2019-12827.md): Buffer overflow in res\_pjsip\_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authentica (no CVSS)
- [CVE-2019-11242](https://cve.now/CVE-2019-11242.md): A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. (no CVSS)
- [CVE-2019-1010310](https://cve.now/CVE-2019-1010310.md): GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description (no CVSS, GLPI Product)
- [CVE-2019-12731](https://cve.now/CVE-2019-12731.md): The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow local attackers to esca (no CVSS)
- [CVE-2019-8998](https://cve.now/CVE-2019-8998.md): An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of (CVSS 7.8, BlackBerry QNX Software Development Platform)
- [CVE-2019-13027](https://cve.now/CVE-2019-13027.md): Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via (no CVSS)
- [CVE-2019-11360](https://cve.now/CVE-2019-11360.md): A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain cod (no CVSS)
- [CVE-2019-13494](https://cve.now/CVE-2019-13494.md): nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Ma (no CVSS)
- [CVE-2019-13567](https://cve.now/CVE-2019-13567.md): The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. (no CVSS)
- [CVE-2019-13574](https://cve.now/CVE-2019-13574.md): In lib/mini\_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.o (no CVSS, mini\_magick)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.