CVEs published July 15, 2019
85 CVEs were published on July 15, 2019: 0 critical, 2 high. 2 are now in CISA KEV.
- Published
- 85
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unrated
- 82
- Now in CISA KEV
- 2
- Fix available
- 7
Most affected products
- Microsoft Windows
- 19
- Linaro/OP-TEE OP-TEE
- 6
- Microsoft Internet Explorer
- 4
- GNU Libc glibc
- 3
- Microsoft Windows Server · Microsoft Windows Server,
- 3
- ProClima all versions prior to
- 3
- jhead
- 2
- Microsoft Edge · Microsoft ChakraCore +1
- 2
- Microsoft Multiple
- 2
- Microsoft Team Foundation Server · Microsoft Azure DevOps S…
- 2
High 2
- CVE-2019-1068A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'MicrMicrosoft SQL Server 2014 Service Pack 2 for 32-bit Systems…
- CVE-2019-0880A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of PrivilegMicrosoft Windows Server · Microsoft Windows
Medium, low and unrated 83
- CVE-2019-13611An issue was discovered in python-engineio through 3.8.2.python-engineio
- CVE-2019-0234A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller.Apache Roller
- CVE-2018-7838A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOCModicon M580 CPU - BMEP582040 all versions before V2.90 and…
- CVE-2019-6827A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a Interactive Graphical SCADA System (IGSS)
- CVE-2019-6822A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a speZelio Soft 2 V5.2 and prior
- CVE-2019-6825A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicProClima all versions prior to
- CVE-2019-6824A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attaProClima all versions prior to
- CVE-2019-6823A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remoteProClima all versions prior to
- CVE-2019-1083A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of SMicrosoft .NET Framework
- CVE-2019-1084An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.Microsoft Exchange Server · Microsoft Outlook +4
- CVE-2019-1085An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service ElevatioMicrosoft Windows
- CVE-2019-1086An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.Microsoft Windows
- CVE-2019-1087An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.Microsoft Windows
- CVE-2019-1088An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'.Microsoft Windows
- CVE-2019-1089An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request.Microsoft Multiple
- CVE-2019-1090An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrlvr.dll ElevatioMicrosoft Windows
- CVE-2019-1091An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll InfMicrosoft Windows
- CVE-2019-1092A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-1093An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite InformatioMicrosoft Windows
- CVE-2019-1094An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2019-1095An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2019-1096An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2019-1097An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite InformatioMicrosoft Windows
- CVE-2019-1001A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'ScriptingMicrosoft Internet Explorer · Microsoft Edge +1
- CVE-2019-1004A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2019-1006An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signMicrosoft Windows · Microsoft SharePoint Foundation +4
- CVE-2019-1037An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting ElevatioMicrosoft Windows
- CVE-2019-1056A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2019-1059A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2019-1062A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'CMicrosoft Edge · Microsoft ChakraCore +1
- CVE-2019-1063A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory CorMicrosoft Internet Explorer
- CVE-2019-1067An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2019-1071An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2019-1072A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'AzMicrosoft Team Foundation Server · Microsoft Azure DevOps S…
- CVE-2019-1073An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2019-1074An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to sMicrosoft Windows
- CVE-2019-1075A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.Microsoft ASP.NET Core · Microsoft.AspNetCore.App +3
- CVE-2019-1076A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team FounMicrosoft Team Foundation Server · Microsoft Azure DevOps S…
- CVE-2019-1077An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual StudiMicrosoft Visual Studio
- CVE-2019-1079An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Microsoft Visual Studio
- CVE-2019-1082An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to raceMicrosoft Windows
- CVE-2019-0811A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial Microsoft Windows Server · Microsoft Windows Server,
- CVE-2019-0865A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit thMicrosoft Windows
- CVE-2019-0887A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attackMicrosoft Multiple
- CVE-2019-0962An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure AutoMicrosoft Azure Automation
- CVE-2019-0966A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on Microsoft Windows Server · Microsoft Windows
- CVE-2019-0975A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2019-0999An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2019-0785A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failoMicrosoft Windows Server · Microsoft Windows Server,
- CVE-2019-5447A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.http-file-server
- CVE-2019-1010293Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing.Linaro/OP-TEE OP-TEE
- CVE-2019-1010294Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error.Linaro/OP-TEE OP-TEE
- CVE-2019-1010295Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.Linaro/OP-TEE OP-TEE
- CVE-2019-1010296Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.Linaro/OP-TEE OP-TEE
- CVE-2019-1010297Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.Linaro/OP-TEE OP-TEE
- CVE-2019-1010298Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.Linaro/OP-TEE OP-TEE
- CVE-2019-1010299The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure.The Rust Programming Language Standard Library
- CVE-2019-1010300mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow.mz-automation libiec61850
- CVE-2019-1010301jhead 3.03 is affected by: Buffer Overflow.jhead
- CVE-2019-1010302jhead 3.03 is affected by: Incorrect Access Control.jhead
- CVE-2019-1010307GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS).GLPI Product
- CVE-2019-1010308Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control.Aquaverde Aquarius CMS
- CVE-2019-1010044borg-reducer c6d5240 is affected by: Buffer Overflow.borg-reducer
- CVE-2019-1010304Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c.Saleor
- CVE-2019-1010305libmspack 0.9.1alpha is affected by: Buffer Overflow.libmspack
- CVE-2019-1010306Slanger 0.6.0 is affected by: Remote Code Execution (RCE).Slanger
- CVE-2019-13604There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24.
- CVE-2019-1010039uLaunchELF < commit 170827a is affected by: Buffer Overflow.uLaunchELF
- CVE-2019-1010038OpenModelica OMCompiler is affected by: Buffer Overflow.OpenModelica OMCompiler
- CVE-2014-10374On Fitbit activity-tracker devices, certain addresses never change.
- CVE-2019-1010034Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection.Deepwoods Software WebLibrarian
- CVE-2019-1010028phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS).PHP Scripts Mall Pvt. School College Portal with ERP Script
- CVE-2019-1010025GNU Libc current is affected by: Mitigation bypass.GNU Libc glibc
- CVE-2019-1010023GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file.GNU Libc glibc
- CVE-2019-1010024GNU Libc current is affected by: Mitigation bypass.GNU Libc glibc
- CVE-2019-1010022GNU Libc current is affected by: Mitigation bypass.GNU C Library glibc
- CVE-2019-1010017libnmap < v0.6.3 is affected by: XML Injection.libnmap · python-libnmap
- CVE-2019-1010016Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS).Dolibarr ERP & CRM Dolibarr · dolibarr/dolibarr
- CVE-2019-1010009DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions.DGLogik DGLux Server
- CVE-2019-1010008OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS).OpenEnergyMonitor Project Emoncms
- CVE-2019-1010006Evince 3.26.0 is affected by buffer overflow.Evince Team Evince
- CVE-2019-1010005HexoEditor v1.1.8-beta is affected by: XSS to code execution.HexoEditor
- CVE-2019-1010004SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read.Sourceforge SoX - Sound eXchange