CVEs published July 23, 2019

244 CVEs were published on July 23, 2019: 1 critical, 2 high. 2 are now in CISA KEV.

Published: 244
Critical: 1
High: 2
Medium: 1
Low: 1
Unrated: 239
Now in CISA KEV: 2
Fix available: 64

Most affected products

Oracle MySQL Server: 42
Mozilla Firefox: 20
Oracle VM VirtualBox: 13
Mozilla Firefox ESR · Mozilla Firefox +1: 12
Mozilla Thunderbird · Mozilla Firefox: 12
Oracle Java: 9
Oracle Outside In Technology: 8
Oracle Solaris Operating System: 8
Oracle FLEXCUBE Universal Banking: 7
Oracle FLEXCUBE Investor Servicing: 6

Critical 1

CVE-2019-11708Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxeMozilla Firefox ESR · Mozilla Firefox +1Critical · 10.0KEVFix availableJul 23, 2019

High 2

CVE-2019-11707A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.Mozilla Firefox ESR · Mozilla Firefox +1High · 8.8KEVFix availableJul 23, 2019
CVE-2019-10173It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw.xstream · com.thoughtworks.xstream:xstreamHigh · 7.3Fix availableJul 23, 2019

Medium, low and unrated 241

CVE-2019-11273PKS Telemetry logs credentialsPivotal Container ServiceLow · 2.2Jul 23, 2019
CVE-2019-2877Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2878Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystOracle Sun ZFS Storage Appliance Kit (AK) SoftwareUnratedJul 23, 2019
CVE-2019-2879Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2863Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2864Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2865Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2866Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2867Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2868Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DBUnratedJul 23, 2019
CVE-2019-2869Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DBUnratedJul 23, 2019
CVE-2019-2870Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DBUnratedJul 23, 2019
CVE-2019-2871Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DBUnratedJul 23, 2019
CVE-2019-2873Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2874Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2875Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2876Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2852Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2853Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle TextMedium · 6.3Jul 23, 2019
CVE-2019-2854Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2855Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2856Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE).Oracle WebLogic ServerUnratedJul 23, 2019
CVE-2019-2857Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI FrameworkUnratedJul 23, 2019
CVE-2019-2858Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console).Oracle Identity ManagerUnratedJul 23, 2019
CVE-2019-2859Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2860Vulnerability in the Oracle Clusterware component of Oracle Support Tools (subcomponent: Trace File Analyzer (TFA) Collector).Oracle System UtilitiesUnratedJul 23, 2019
CVE-2019-2861Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security).Oracle Hyperion PlanningUnratedJul 23, 2019
CVE-2019-2862Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: Java).Oracle GraalVM Enterprise EditionUnratedJul 23, 2019
CVE-2019-2837Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface).Oracle CRM Technical FoundationUnratedJul 23, 2019
CVE-2019-2838Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2839Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2840Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2841Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2842Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE).Oracle JavaUnratedJul 23, 2019
CVE-2019-2843Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2844Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Client Tools).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2845Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2846Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2847Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2848Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2850Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBoxUnratedFix availableJul 23, 2019
CVE-2019-2824Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).Oracle WebLogic ServerUnratedJul 23, 2019
CVE-2019-2825Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces).Oracle Applications ManagerUnratedJul 23, 2019
CVE-2019-2826Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2827Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).Oracle WebLogic ServerUnratedJul 23, 2019
CVE-2019-2828Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless).Oracle Field ServiceUnratedJul 23, 2019
CVE-2019-2829Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Service Requests).Oracle iSupportUnratedJul 23, 2019
CVE-2019-2830Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2831Vulnerability in the PeopleSoft Enterprise FIN Project Costing component of Oracle PeopleSoft Products (subcomponent: Projects).Oracle PeopleSoft Enterprise FIN Project CostingUnratedJul 23, 2019
CVE-2019-2832Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2833Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications.Oracle Hospitality SimphonyUnratedJul 23, 2019
CVE-2019-2834Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2835Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2836Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications.Oracle Hospitality SimphonyUnratedJul 23, 2019
CVE-2019-2811Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2812Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2813Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: GraalVM).Oracle GraalVM Enterprise EditionUnratedJul 23, 2019
CVE-2019-2814Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2815Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2816Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).Oracle JavaUnratedJul 23, 2019
CVE-2019-2817Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments).Oracle Agile PLM FrameworkUnratedJul 23, 2019
CVE-2019-2818Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).Oracle JavaUnratedJul 23, 2019
CVE-2019-2819Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2820Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2821Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE).Oracle JavaUnratedJul 23, 2019
CVE-2019-2822Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Admin / InnoDB Cluster).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2823Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (sOracle Financial Services Analytical Applications Infrastru…UnratedJul 23, 2019
CVE-2019-2796Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2797Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2798Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2799Vulnerability in the Oracle ODBC Driver component of Oracle Database Server<span class=font-red><b> ***PRIVILEGE CANNOT BE NONE FOR AUTHENTIOracle ODBC DriverUnratedJul 23, 2019
CVE-2019-2800Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2801Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2802Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2803Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2804Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2805Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2807Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2808Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2809Vulnerability in the Oracle iRecruitment component of Oracle E-Business Suite (subcomponent: Password Reset).Oracle iRecruitmentUnratedJul 23, 2019
CVE-2019-2810Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2783Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission).Oracle PaymentsUnratedJul 23, 2019
CVE-2019-2784Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2785Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2786Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).Oracle JavaUnratedJul 23, 2019
CVE-2019-2787Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Automount).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2788Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Open Fabrics Tools).Oracle Solaris Operating SystemUnratedJul 23, 2019
CVE-2019-2789Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2790Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2791Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2792Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2793Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2794Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2795Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2769Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).Oracle JavaUnratedJul 23, 2019
CVE-2019-2770Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View).Oracle Hyperion PlanningUnratedJul 23, 2019
CVE-2019-2771Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).Oracle BI PublisherUnratedJul 23, 2019
CVE-2019-2772Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide).Oracle PeopleSoft Enterprise PT PeopleToolsUnratedJul 23, 2019
CVE-2019-2773Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission).Oracle PaymentsUnratedJul 23, 2019
CVE-2019-2774Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2775Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission).Oracle PaymentsUnratedJul 23, 2019
CVE-2019-2776Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle TextUnratedJul 23, 2019
CVE-2019-2777Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search).Oracle Siebel Core - Server FrameworkUnratedJul 23, 2019
CVE-2019-2778Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2779Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM (subcomponent: Email).Oracle Siebel Core - Common ComponentsUnratedJul 23, 2019
CVE-2019-2780Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2781Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface).Oracle Hospitality Suite8UnratedJul 23, 2019
CVE-2019-2782Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission).Oracle PaymentsUnratedJul 23, 2019
CVE-2019-2754Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2755Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2756Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2757Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2758Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2759Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2760Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DBUnratedJul 23, 2019
CVE-2019-2761Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload).Oracle Application Object LibraryUnratedJul 23, 2019
CVE-2019-2762Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities).Oracle JavaUnratedJul 23, 2019
CVE-2019-2763Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications.Oracle Hospitality Gift and LoyaltyUnratedJul 23, 2019
CVE-2019-2764Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In TechnologyUnratedJul 23, 2019
CVE-2019-2766Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).Oracle JavaUnratedJul 23, 2019
CVE-2019-2767Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).Oracle BI PublisherUnratedJul 23, 2019
CVE-2019-2768Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).Oracle BI PublisherUnratedJul 23, 2019
CVE-2019-2740Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2741Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2742Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).Oracle BI PublisherUnratedJul 23, 2019
CVE-2019-2743Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2744Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal BankingUnratedJul 23, 2019
CVE-2019-2745Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).Oracle JavaUnratedJul 23, 2019
CVE-2019-2746Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Data Dictionary).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2747Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2748Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server).Oracle PeopleSoft Enterprise PT PeopleToolsUnratedJul 23, 2019
CVE-2019-2749Vulnerability in the Java VM component of Oracle Database Server.Oracle DatabaseUnratedJul 23, 2019
CVE-2019-2750Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations).Oracle MICROS Retail-JUnratedJul 23, 2019
CVE-2019-2751Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OHS Config MBeans).Oracle HTTP ServerUnratedJul 23, 2019
CVE-2019-2752Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2753Vulnerability in the Oracle Text component of Oracle Database Server.Oracle TextUnratedJul 23, 2019
CVE-2019-2672Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server).Oracle One-to-One FulfillmentUnratedJul 23, 2019
CVE-2019-2727Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for Oracle Application Testing SuiteUnratedJul 23, 2019
CVE-2019-2728Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking).Oracle Enterprise Manager Ops CenterUnratedJul 23, 2019
CVE-2019-2730Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2731Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2732Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security).Oracle Demantra Demand ManagementUnratedJul 23, 2019
CVE-2019-2733Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security).Oracle Demantra Demand ManagementUnratedJul 23, 2019
CVE-2019-2735Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion (subcomponent: UI and Visualization).Oracle Hyperion BI+UnratedJul 23, 2019
CVE-2019-2736Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor ServicingUnratedJul 23, 2019
CVE-2019-2737Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2738Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2739Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL ServerUnratedJul 23, 2019
CVE-2019-2484Vulnerability in the Application Express component of Oracle Database Server.Oracle Application ExpressUnratedJul 23, 2019
CVE-2019-2561Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations).Oracle Retail Xstore OfficeUnratedJul 23, 2019
CVE-2019-2569Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle DatabaseUnratedJul 23, 2019
CVE-2019-2599Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard).Oracle PeopleSoft Enterprise PT PeopleToolsUnratedJul 23, 2019
CVE-2019-2666Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server).Oracle One-to-One FulfillmentUnratedJul 23, 2019
CVE-2019-2668Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server).Oracle One-to-One FulfillmentUnratedJul 23, 2019
CVE-2018-3315Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: CuOracle Retail Customer Management and Segmentation Foundati…UnratedJul 23, 2019
CVE-2018-3316Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: SeOracle Retail Customer Management and Segmentation Foundati…UnratedJul 23, 2019
CVE-2018-2883Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations).Oracle Retail Xstore OfficeUnratedJul 23, 2019
CVE-2018-3111Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations).Oracle Retail Xstore OfficeUnratedJul 23, 2019
CVE-2019-12164ubuntu-server.js in Status React Native Desktop before v0.57.8_mobile_ui allows Remote Code Execution.UnratedJul 23, 2019
CVE-2019-14243headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, github.com/mastercactapus/proxyprotocolUnratedFix availableJul 23, 2019
CVE-2019-1010199ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS).ServiceStack Framework · ServiceStackUnratedFix availableJul 23, 2019
CVE-2019-1010200Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: Voice BuilderUnratedJul 23, 2019
CVE-2019-1010201Jeesite 1.2.7 is affected by: SQL Injection.JeesiteUnratedJul 23, 2019
CVE-2018-18676GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameterUnratedJul 23, 2019
CVE-2019-13570The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.UnratedJul 23, 2019
CVE-2018-18675GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" parameteUnratedJul 23, 2019
CVE-2018-18672GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka tUnratedJul 23, 2019
CVE-2018-18670GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the adUnratedJul 23, 2019
CVE-2018-18673GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/menUnratedJul 23, 2019
CVE-2018-18671GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameterUnratedJul 23, 2019
CVE-2018-18669GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka UnratedJul 23, 2019
CVE-2019-12162Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code exUnratedJul 23, 2019
CVE-2019-1010173Jsish 2.4.84 2.0484 is affected by: Reachable Assertion.Jsish JsiUnratedJul 23, 2019
CVE-2019-1010202Jeesite 1.2.7 is affected by: XML External Entity (XXE).JeesiteUnratedJul 23, 2019
CVE-2019-1010171Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference.Jsish JsiUnratedJul 23, 2019
CVE-2019-1010170Jsish 2.4.77 2.0477 is affected by: Use After Free.Jsish JsiUnratedJul 23, 2019
CVE-2019-1010169Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read.Jsish JsiUnratedJul 23, 2019
CVE-2019-1010204GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-oGNU binutils goldUnratedJul 23, 2019
CVE-2019-1010205LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal.LINAGORA hublinUnratedJul 23, 2019
CVE-2019-1010206OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation.OSS Http Request · com.github.kevinsawicki:http-requestUnratedJul 23, 2019
CVE-2019-1010162jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference.jsiUnratedJul 23, 2019
CVE-2019-9800Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9811As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a brMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-9814Mozilla developers and community members reported memory safety bugs present in Firefox 66.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9815If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9816A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypasMozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9817Images from a different domain can be read using a canvas object in some circumstances.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9818A race condition is present in the crash generation server used to generate data for the crash reporter.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9819A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable cMozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9820A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-9821A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11691A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called aMozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11692A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a potenMozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11693The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux.Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11694A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making aMozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11695A custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when it should not be alloMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11696Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even thoughMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11697If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the installMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11698If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped Mozilla Thunderbird · Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11699A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11700A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution whMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11701The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11702A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with InMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11703A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser_get_next_char when processing certain email messages,Mozilla ThunderbirdUnratedFix availableJul 23, 2019
CVE-2019-11704A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory_strdup_and_dequote when processing certain email Mozilla ThunderbirdUnratedFix availableJul 23, 2019
CVE-2019-11705A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messMozilla ThunderbirdUnratedFix availableJul 23, 2019
CVE-2019-11706A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain emaiMozilla ThunderbirdUnratedFix availableJul 23, 2019
CVE-2019-11709Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7.Mozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11710Mozilla developers and community members reported memory safety bugs present in Firefox 67.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11711When an inner window is reused, it does not consider the use of document.domain for cross-origin protections.Mozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11712POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements.Mozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11713A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially explMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11714Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-1010155D-Link DSL-2750U 1.11 is affected by: Authentication Bypass.D-Link DSL-2750UUnratedJul 23, 2019
CVE-2019-11715Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards onMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11716Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropeMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11717A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11718Activity Stream can display content from sent from the Snippet Service website.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11719When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the NetwMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11720Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11721The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11723A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context.Mozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11724Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now rediMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11725When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but resMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11727A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures whenMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11728The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a usMozilla FirefoxUnratedFix availableJul 23, 2019
CVE-2019-11729Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-11730A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same direcMozilla Firefox ESR · Mozilla Firefox +1UnratedFix availableJul 23, 2019
CVE-2019-1010207Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS).Genetechsolutions Pie RegisterUnratedJul 23, 2019
CVE-2019-1010208IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow.IDRIX, Truecrypt Veracrypt, TruecryptUnratedJul 23, 2019
CVE-2019-1010153zzcms 8.3 and earlier is affected by: SQL Injection.zzcmsUnratedJul 23, 2019
CVE-2019-1010152zzcms 8.3 and earlier is affected by: File Delete to Code Execution.zzcmsUnratedJul 23, 2019
CVE-2019-1010150zzcms 8.3 and earlier is affected by: File Delete to Code Execution.zzcmsUnratedJul 23, 2019
CVE-2019-1010209GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434.GoUrl.io GoURL Wordpress PluginUnratedJul 23, 2019
CVE-2019-1010149zzcms version 8.3 and earlier is affected by: File Delete to Code Execution.zzcmsUnratedJul 23, 2019
CVE-2019-1010148zzcms version 8.3 and earlier is affected by: SQL Injection.zzcmsUnratedJul 23, 2019
CVE-2019-1010221LineageOS 16.0 and earlier is affected by: Incorrect Access Control.LineageOSUnratedJul 23, 2019
CVE-2019-1010123MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type.MODX Revolution GalleryUnratedJul 23, 2019
CVE-2019-14241HAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors related to htx_manage_client_side_cookies in protUnratedJul 23, 2019
CVE-2019-14240WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URUnratedJul 23, 2019
CVE-2019-1010124WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS).WebAppick WooCommerce Product FeedUnratedJul 23, 2019