CVEs published July 16, 2019
36 CVEs were published on July 16, 2019: 1 critical, 3 high. 2 are now in CISA KEV.
- Published
- 36
- Critical
- 1
- High
- 3
- Medium
- 2
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 2
- Fix available
- 2
Most affected products
- CZ.NIC knot-resolver
- 2
- Palo Alto Networks PAN-OS
- 2
- Babel: Multilingual site Babel
- 1
- Facebook WhatsApp Desktop
- 1
- Iomega and LenovoEMC NAS products
- 1
- Linaro/OP-TEE OP-TEE
- 1
- NASA CFITSIO
- 1
- nfdump
- 1
- Norton Password Manager
- 1
- pluck-cms PluckCMS
- 1
Critical 1
High 3
- CVE-2019-6160A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares vIomega and LenovoEMC NAS products
- CVE-2019-12834In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO
- CVE-2019-12991Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
Medium, low and unrated 32
- CVE-2019-3571An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that woFacebook WhatsApp Desktop
- CVE-2019-9700Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue.Norton Password Manager
- CVE-2018-13442SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntit
- CVE-2019-12985Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).
- CVE-2019-10191A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-securCZ.NIC knot-resolver
- CVE-2019-10190A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers tCZ.NIC knot-resolver
- CVE-2019-12986Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).
- CVE-2019-12987Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).
- CVE-2019-12988Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).
- CVE-2019-12990Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.
- CVE-2019-12992Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).
- CVE-2019-13359In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to
- CVE-2019-13360In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging k
- CVE-2019-13383In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by read
- CVE-2019-13603An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework d
- CVE-2019-13605In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by
- CVE-2019-13618In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in med
- CVE-2019-13617njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstra
- CVE-2019-13615libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in Ebm
- CVE-2018-19629A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to cras
- CVE-2019-1010290Babel: Multilingual site Babel All is affected by: Open Redirection.Babel: Multilingual site Babel
- CVE-2019-1575Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier maPalo Alto Networks PAN-OS
- CVE-2019-1576Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentiallPalo Alto Networks PAN-OS
- CVE-2019-1010292Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks.Linaro/OP-TEE OP-TEE
- CVE-2019-1010043Quake3e < 5ed740d is affected by: Buffer Overflow.Quake3e
- CVE-2019-1010018Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80.Zammad
- CVE-2019-13612MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB
- CVE-2019-1010062PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type.pluck-cms PluckCMS
- CVE-2019-1010060NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow.NASA CFITSIO
- CVE-2019-1010057nfdump 1.6.16 and earlier is affected by: Buffer Overflow.nfdump
- CVE-2019-13115In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an
- CVE-2019-13616SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when