# CVEs published 2019-07-14

6 CVEs were published on July 14, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-13602](https://cve.now/CVE-2019-13602.md): An Integer Underflow in MP4\_EIA608\_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers (no CVSS)
- [CVE-2019-13598](https://cve.now/CVE-2019-13598.md): LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to (no CVSS)
- [CVE-2019-13597](https://cve.now/CVE-2019-13597.md): \_s\_/sprm/\_s\_/dyn/Player\_setScriptFile in Sahi Pro 8.0.0 allows command execution. (no CVSS)
- [CVE-2019-13594](https://cve.now/CVE-2019-13594.md): In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST reque (no CVSS, saleor)
- [CVE-2019-13589](https://cve.now/CVE-2019-13589.md): The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. (no CVSS, paranoid2)
- [CVE-2019-13590](https://cve.now/CVE-2019-13590.md): An issue was discovered in libsox.a in SoX 14.4.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.