# CVEs published 2019-07-23

244 CVEs were published on July 23, 2019: 1 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-11273](https://cve.now/CVE-2019-11273.md): PKS Telemetry logs credentials (CVSS 2.2, Pivotal Container Service)
- [CVE-2019-2877](https://cve.now/CVE-2019-2877.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2878](https://cve.now/CVE-2019-2878.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsyst (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2019-2879](https://cve.now/CVE-2019-2879.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2863](https://cve.now/CVE-2019-2863.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2864](https://cve.now/CVE-2019-2864.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2865](https://cve.now/CVE-2019-2865.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2866](https://cve.now/CVE-2019-2866.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2867](https://cve.now/CVE-2019-2867.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2868](https://cve.now/CVE-2019-2868.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2869](https://cve.now/CVE-2019-2869.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2870](https://cve.now/CVE-2019-2870.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2871](https://cve.now/CVE-2019-2871.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2873](https://cve.now/CVE-2019-2873.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2874](https://cve.now/CVE-2019-2874.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2875](https://cve.now/CVE-2019-2875.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2876](https://cve.now/CVE-2019-2876.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2852](https://cve.now/CVE-2019-2852.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2853](https://cve.now/CVE-2019-2853.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (CVSS 6.3, Oracle Text)
- [CVE-2019-2854](https://cve.now/CVE-2019-2854.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2855](https://cve.now/CVE-2019-2855.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2856](https://cve.now/CVE-2019-2856.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2857](https://cve.now/CVE-2019-2857.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2019-2858](https://cve.now/CVE-2019-2858.md): Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). (no CVSS, Oracle Identity Manager)
- [CVE-2019-2859](https://cve.now/CVE-2019-2859.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2860](https://cve.now/CVE-2019-2860.md): Vulnerability in the Oracle Clusterware component of Oracle Support Tools (subcomponent: Trace File Analyzer (TFA) Collector). (no CVSS, Oracle System Utilities)
- [CVE-2019-2861](https://cve.now/CVE-2019-2861.md): Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Security). (no CVSS, Oracle Hyperion Planning)
- [CVE-2019-2862](https://cve.now/CVE-2019-2862.md): Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: Java). (no CVSS, Oracle GraalVM Enterprise Edition)
- [CVE-2019-2837](https://cve.now/CVE-2019-2837.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2019-2838](https://cve.now/CVE-2019-2838.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2839](https://cve.now/CVE-2019-2839.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2840](https://cve.now/CVE-2019-2840.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2841](https://cve.now/CVE-2019-2841.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2842](https://cve.now/CVE-2019-2842.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). (no CVSS, Oracle Java)
- [CVE-2019-2843](https://cve.now/CVE-2019-2843.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2844](https://cve.now/CVE-2019-2844.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Client Tools). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2845](https://cve.now/CVE-2019-2845.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2846](https://cve.now/CVE-2019-2846.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2847](https://cve.now/CVE-2019-2847.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2848](https://cve.now/CVE-2019-2848.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2850](https://cve.now/CVE-2019-2850.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2019-2824](https://cve.now/CVE-2019-2824.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2825](https://cve.now/CVE-2019-2825.md): Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces). (no CVSS, Oracle Applications Manager)
- [CVE-2019-2826](https://cve.now/CVE-2019-2826.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2827](https://cve.now/CVE-2019-2827.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2019-2828](https://cve.now/CVE-2019-2828.md): Vulnerability in the Oracle Field Service component of Oracle E-Business Suite (subcomponent: Wireless). (no CVSS, Oracle Field Service)
- [CVE-2019-2829](https://cve.now/CVE-2019-2829.md): Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Service Requests). (no CVSS, Oracle iSupport)
- [CVE-2019-2830](https://cve.now/CVE-2019-2830.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2831](https://cve.now/CVE-2019-2831.md): Vulnerability in the PeopleSoft Enterprise FIN Project Costing component of Oracle PeopleSoft Products (subcomponent: Projects). (no CVSS, Oracle PeopleSoft Enterprise FIN Project Costing)
- [CVE-2019-2832](https://cve.now/CVE-2019-2832.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2833](https://cve.now/CVE-2019-2833.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Simphony)
- [CVE-2019-2834](https://cve.now/CVE-2019-2834.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2835](https://cve.now/CVE-2019-2835.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2836](https://cve.now/CVE-2019-2836.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Simphony)
- [CVE-2019-2811](https://cve.now/CVE-2019-2811.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2812](https://cve.now/CVE-2019-2812.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2813](https://cve.now/CVE-2019-2813.md): Vulnerability in the Oracle GraalVM Enterprise Edition component of Oracle GraalVM (subcomponent: GraalVM). (no CVSS, Oracle GraalVM Enterprise Edition)
- [CVE-2019-2814](https://cve.now/CVE-2019-2814.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2815](https://cve.now/CVE-2019-2815.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2816](https://cve.now/CVE-2019-2816.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2019-2817](https://cve.now/CVE-2019-2817.md): Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments). (no CVSS, Oracle Agile PLM Framework)
- [CVE-2019-2818](https://cve.now/CVE-2019-2818.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2019-2819](https://cve.now/CVE-2019-2819.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2820](https://cve.now/CVE-2019-2820.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gnuplot). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2821](https://cve.now/CVE-2019-2821.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). (no CVSS, Oracle Java)
- [CVE-2019-2822](https://cve.now/CVE-2019-2822.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Admin / InnoDB Cluster). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2823](https://cve.now/CVE-2019-2823.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (s (no CVSS, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2019-2796](https://cve.now/CVE-2019-2796.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2797](https://cve.now/CVE-2019-2797.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2798](https://cve.now/CVE-2019-2798.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2799](https://cve.now/CVE-2019-2799.md): Vulnerability in the Oracle ODBC Driver component of Oracle Database Server\<span class=font-red\>\<b\> \*\*\*PRIVILEGE CANNOT BE NONE FOR AUTHENTI (no CVSS, Oracle ODBC Driver)
- [CVE-2019-2800](https://cve.now/CVE-2019-2800.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2801](https://cve.now/CVE-2019-2801.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2802](https://cve.now/CVE-2019-2802.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2803](https://cve.now/CVE-2019-2803.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2804](https://cve.now/CVE-2019-2804.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2805](https://cve.now/CVE-2019-2805.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2807](https://cve.now/CVE-2019-2807.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2808](https://cve.now/CVE-2019-2808.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2809](https://cve.now/CVE-2019-2809.md): Vulnerability in the Oracle iRecruitment component of Oracle E-Business Suite (subcomponent: Password Reset). (no CVSS, Oracle iRecruitment)
- [CVE-2019-2810](https://cve.now/CVE-2019-2810.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2783](https://cve.now/CVE-2019-2783.md): Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). (no CVSS, Oracle Payments)
- [CVE-2019-2784](https://cve.now/CVE-2019-2784.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2785](https://cve.now/CVE-2019-2785.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2786](https://cve.now/CVE-2019-2786.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2019-2787](https://cve.now/CVE-2019-2787.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Automount). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2788](https://cve.now/CVE-2019-2788.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Open Fabrics Tools). (no CVSS, Oracle Solaris Operating System)
- [CVE-2019-2789](https://cve.now/CVE-2019-2789.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2790](https://cve.now/CVE-2019-2790.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2791](https://cve.now/CVE-2019-2791.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2792](https://cve.now/CVE-2019-2792.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2793](https://cve.now/CVE-2019-2793.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2794](https://cve.now/CVE-2019-2794.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2795](https://cve.now/CVE-2019-2795.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2769](https://cve.now/CVE-2019-2769.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). (no CVSS, Oracle Java)
- [CVE-2019-2770](https://cve.now/CVE-2019-2770.md): Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View). (no CVSS, Oracle Hyperion Planning)
- [CVE-2019-2771](https://cve.now/CVE-2019-2771.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2772](https://cve.now/CVE-2019-2772.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2773](https://cve.now/CVE-2019-2773.md): Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). (no CVSS, Oracle Payments)
- [CVE-2019-2774](https://cve.now/CVE-2019-2774.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2775](https://cve.now/CVE-2019-2775.md): Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). (no CVSS, Oracle Payments)
- [CVE-2019-2776](https://cve.now/CVE-2019-2776.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Text)
- [CVE-2019-2777](https://cve.now/CVE-2019-2777.md): Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Search). (no CVSS, Oracle Siebel Core - Server Framework)
- [CVE-2019-2778](https://cve.now/CVE-2019-2778.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2779](https://cve.now/CVE-2019-2779.md): Vulnerability in the Siebel Core - Common Components component of Oracle Siebel CRM (subcomponent: Email). (no CVSS, Oracle Siebel Core - Common Components)
- [CVE-2019-2780](https://cve.now/CVE-2019-2780.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2781](https://cve.now/CVE-2019-2781.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2019-2782](https://cve.now/CVE-2019-2782.md): Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). (no CVSS, Oracle Payments)
- [CVE-2019-2754](https://cve.now/CVE-2019-2754.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2755](https://cve.now/CVE-2019-2755.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2756](https://cve.now/CVE-2019-2756.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2757](https://cve.now/CVE-2019-2757.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2758](https://cve.now/CVE-2019-2758.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2759](https://cve.now/CVE-2019-2759.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2760](https://cve.now/CVE-2019-2760.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2019-2761](https://cve.now/CVE-2019-2761.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). (no CVSS, Oracle Application Object Library)
- [CVE-2019-2762](https://cve.now/CVE-2019-2762.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). (no CVSS, Oracle Java)
- [CVE-2019-2763](https://cve.now/CVE-2019-2763.md): Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Gift and Loyalty)
- [CVE-2019-2764](https://cve.now/CVE-2019-2764.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2019-2766](https://cve.now/CVE-2019-2766.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2019-2767](https://cve.now/CVE-2019-2767.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2768](https://cve.now/CVE-2019-2768.md): Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2740](https://cve.now/CVE-2019-2740.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2741](https://cve.now/CVE-2019-2741.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2742](https://cve.now/CVE-2019-2742.md): Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). (no CVSS, Oracle BI Publisher)
- [CVE-2019-2743](https://cve.now/CVE-2019-2743.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2744](https://cve.now/CVE-2019-2744.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2019-2745](https://cve.now/CVE-2019-2745.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2019-2746](https://cve.now/CVE-2019-2746.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Data Dictionary). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2747](https://cve.now/CVE-2019-2747.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2748](https://cve.now/CVE-2019-2748.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2749](https://cve.now/CVE-2019-2749.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2750](https://cve.now/CVE-2019-2750.md): Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). (no CVSS, Oracle MICROS Retail-J)
- [CVE-2019-2751](https://cve.now/CVE-2019-2751.md): Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OHS Config MBeans). (no CVSS, Oracle HTTP Server)
- [CVE-2019-2752](https://cve.now/CVE-2019-2752.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2753](https://cve.now/CVE-2019-2753.md): Vulnerability in the Oracle Text component of Oracle Database Server. (no CVSS, Oracle Text)
- [CVE-2019-2672](https://cve.now/CVE-2019-2672.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2727](https://cve.now/CVE-2019-2727.md): Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for (no CVSS, Oracle Application Testing Suite)
- [CVE-2019-2728](https://cve.now/CVE-2019-2728.md): Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). (no CVSS, Oracle Enterprise Manager Ops Center)
- [CVE-2019-2730](https://cve.now/CVE-2019-2730.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2731](https://cve.now/CVE-2019-2731.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2732](https://cve.now/CVE-2019-2732.md): Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). (no CVSS, Oracle Demantra Demand Management)
- [CVE-2019-2733](https://cve.now/CVE-2019-2733.md): Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). (no CVSS, Oracle Demantra Demand Management)
- [CVE-2019-2735](https://cve.now/CVE-2019-2735.md): Vulnerability in the Oracle Hyperion Workspace component of Oracle Hyperion (subcomponent: UI and Visualization). (no CVSS, Oracle Hyperion BI+)
- [CVE-2019-2736](https://cve.now/CVE-2019-2736.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2019-2737](https://cve.now/CVE-2019-2737.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2738](https://cve.now/CVE-2019-2738.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2739](https://cve.now/CVE-2019-2739.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2019-2484](https://cve.now/CVE-2019-2484.md): Vulnerability in the Application Express component of Oracle Database Server. (no CVSS, Oracle Application Express)
- [CVE-2019-2561](https://cve.now/CVE-2019-2561.md): Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). (no CVSS, Oracle Retail Xstore Office)
- [CVE-2019-2569](https://cve.now/CVE-2019-2569.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2019-2599](https://cve.now/CVE-2019-2599.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Pagelet Wizard). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2019-2666](https://cve.now/CVE-2019-2666.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2019-2668](https://cve.now/CVE-2019-2668.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2018-3315](https://cve.now/CVE-2018-3315.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Cu (no CVSS, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2018-3316](https://cve.now/CVE-2018-3316.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: Se (no CVSS, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2018-2883](https://cve.now/CVE-2018-2883.md): Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). (no CVSS, Oracle Retail Xstore Office)
- [CVE-2018-3111](https://cve.now/CVE-2018-3111.md): Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications (subcomponent: Internal Operations). (no CVSS, Oracle Retail Xstore Office)
- [CVE-2019-12164](https://cve.now/CVE-2019-12164.md): ubuntu-server.js in Status React Native Desktop before v0.57.8\_mobile\_ui allows Remote Code Execution. (no CVSS)
- [CVE-2019-14243](https://cve.now/CVE-2019-14243.md): headerv2.go in mastercactapus proxyprotocol before 0.0.2, as used in the mastercactapus caddy-proxyprotocol plugin through 0.0.2 for Caddy, (no CVSS, github.com/mastercactapus/proxyprotocol)
- [CVE-2019-1010199](https://cve.now/CVE-2019-1010199.md): ServiceStack ServiceStack Framework 4.5.14 is affected by: Cross Site Scripting (XSS). (no CVSS, ServiceStack Framework · ServiceStack)
- [CVE-2019-1010200](https://cve.now/CVE-2019-1010200.md): Voice Builder Prior to commit c145d4604df67e6fc625992412eef0bf9a85e26b and f6660e6d8f0d1d931359d591dbdec580fef36d36 is affected by: CWE-78: (no CVSS, Voice Builder)
- [CVE-2019-1010201](https://cve.now/CVE-2019-1010201.md): Jeesite 1.2.7 is affected by: SQL Injection. (no CVSS, Jeesite)
- [CVE-2018-18676](https://cve.now/CVE-2018-18676.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board tail contents" parameter (no CVSS)
- [CVE-2019-13570](https://cve.now/CVE-2019-13570.md): The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection. (no CVSS)
- [CVE-2018-18675](https://cve.now/CVE-2018-18675.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board title contents" paramete (no CVSS)
- [CVE-2018-18672](https://cve.now/CVE-2018-18672.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka t (no CVSS)
- [CVE-2018-18670](https://cve.now/CVE-2018-18670.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Extra Contents" parameter, aka the ad (no CVSS)
- [CVE-2018-18673](https://cve.now/CVE-2018-18673.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "Menu Link" parameter, aka the adm/men (no CVSS)
- [CVE-2018-18671](https://cve.now/CVE-2018-18671.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter (no CVSS)
- [CVE-2018-18669](https://cve.now/CVE-2018-18669.md): GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka (no CVSS)
- [CVE-2019-12162](https://cve.now/CVE-2019-12162.md): Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code ex (no CVSS)
- [CVE-2019-1010173](https://cve.now/CVE-2019-1010173.md): Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. (no CVSS, Jsish Jsi)
- [CVE-2019-1010202](https://cve.now/CVE-2019-1010202.md): Jeesite 1.2.7 is affected by: XML External Entity (XXE). (no CVSS, Jeesite)
- [CVE-2019-1010171](https://cve.now/CVE-2019-1010171.md): Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. (no CVSS, Jsish Jsi)
- [CVE-2019-1010170](https://cve.now/CVE-2019-1010170.md): Jsish 2.4.77 2.0477 is affected by: Use After Free. (no CVSS, Jsish Jsi)
- [CVE-2019-1010169](https://cve.now/CVE-2019-1010169.md): Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. (no CVSS, Jsish Jsi)
- [CVE-2019-1010204](https://cve.now/CVE-2019-1010204.md): GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-o (no CVSS, GNU binutils gold)
- [CVE-2019-1010205](https://cve.now/CVE-2019-1010205.md): LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. (no CVSS, LINAGORA hublin)
- [CVE-2019-1010206](https://cve.now/CVE-2019-1010206.md): OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. (no CVSS, OSS Http Request · com.github.kevinsawicki:http-request)
- [CVE-2019-1010162](https://cve.now/CVE-2019-1010162.md): jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. (no CVSS, jsi)
- [CVE-2019-9800](https://cve.now/CVE-2019-9800.md): Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9811](https://cve.now/CVE-2019-9811.md): As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a br (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-9814](https://cve.now/CVE-2019-9814.md): Mozilla developers and community members reported memory safety bugs present in Firefox 66. (no CVSS, Mozilla Firefox)
- [CVE-2019-9815](https://cve.now/CVE-2019-9815.md): If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9816](https://cve.now/CVE-2019-9816.md): A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypas (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9817](https://cve.now/CVE-2019-9817.md): Images from a different domain can be read using a canvas object in some circumstances. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9818](https://cve.now/CVE-2019-9818.md): A race condition is present in the crash generation server used to generate data for the crash reporter. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9819](https://cve.now/CVE-2019-9819.md): A vulnerability where a JavaScript compartment mismatch can occur while working with the fetch API, resulting in a potentially exploitable c (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9820](https://cve.now/CVE-2019-9820.md): A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-9821](https://cve.now/CVE-2019-9821.md): A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. (no CVSS, Mozilla Firefox)
- [CVE-2019-11691](https://cve.now/CVE-2019-11691.md): A use-after-free vulnerability can occur when working with XMLHttpRequest (XHR) in an event loop, causing the XHR main thread to be called a (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-11692](https://cve.now/CVE-2019-11692.md): A use-after-free vulnerability can occur when listeners are removed from the event listener manager while still in use, resulting in a poten (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-11693](https://cve.now/CVE-2019-11693.md): The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-11694](https://cve.now/CVE-2019-11694.md): A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-11695](https://cve.now/CVE-2019-11695.md): A custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when it should not be allo (no CVSS, Mozilla Firefox)
- [CVE-2019-11696](https://cve.now/CVE-2019-11696.md): Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though (no CVSS, Mozilla Firefox)
- [CVE-2019-11697](https://cve.now/CVE-2019-11697.md): If the ALT and "a" keys are pressed when users receive an extension installation prompt, the extension will be installed without the install (no CVSS, Mozilla Firefox)
- [CVE-2019-11698](https://cve.now/CVE-2019-11698.md): If a crafted hyperlink is dragged and dropped to the bookmark bar or sidebar and the resulting bookmark is subsequently dragged and dropped (no CVSS, Mozilla Thunderbird · Mozilla Firefox)
- [CVE-2019-11699](https://cve.now/CVE-2019-11699.md): A malicious page can briefly cause the wrong name to be highlighted as the domain name in the addressbar during page navigations. (no CVSS, Mozilla Firefox)
- [CVE-2019-11700](https://cve.now/CVE-2019-11700.md): A hyperlink using the res: protocol can be used to open local files at a known location in Internet Explorer if a user approves execution wh (no CVSS, Mozilla Firefox)
- [CVE-2019-11701](https://cve.now/CVE-2019-11701.md): The default webcal: protocol handler will load a web site vulnerable to cross-site scripting (XSS) attacks. (no CVSS, Mozilla Firefox)
- [CVE-2019-11702](https://cve.now/CVE-2019-11702.md): A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with In (no CVSS, Mozilla Firefox)
- [CVE-2019-11703](https://cve.now/CVE-2019-11703.md): A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in parser\_get\_next\_char when processing certain email messages, (no CVSS, Mozilla Thunderbird)
- [CVE-2019-11704](https://cve.now/CVE-2019-11704.md): A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemory\_strdup\_and\_dequote when processing certain email (no CVSS, Mozilla Thunderbird)
- [CVE-2019-11705](https://cve.now/CVE-2019-11705.md): A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur\_add\_bydayrules when processing certain email mess (no CVSS, Mozilla Thunderbird)
- [CVE-2019-11706](https://cve.now/CVE-2019-11706.md): A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone\_get\_vtimezone\_properties when processing certain emai (no CVSS, Mozilla Thunderbird)
- [CVE-2019-11707](https://cve.now/CVE-2019-11707.md): A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. (CVSS 8.8, KEV, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11708](https://cve.now/CVE-2019-11708.md): Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxe (CVSS 10.0, KEV, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11709](https://cve.now/CVE-2019-11709.md): Mozilla developers and community members reported memory safety bugs present in Firefox 67 and Firefox ESR 60.7. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11710](https://cve.now/CVE-2019-11710.md): Mozilla developers and community members reported memory safety bugs present in Firefox 67. (no CVSS, Mozilla Firefox)
- [CVE-2019-11711](https://cve.now/CVE-2019-11711.md): When an inner window is reused, it does not consider the use of document.domain for cross-origin protections. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11712](https://cve.now/CVE-2019-11712.md): POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11713](https://cve.now/CVE-2019-11713.md): A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially expl (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11714](https://cve.now/CVE-2019-11714.md): Necko can access a child on the wrong thread during UDP connections, resulting in a potentially exploitable crash in some instances. (no CVSS, Mozilla Firefox)
- [CVE-2019-1010155](https://cve.now/CVE-2019-1010155.md): D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. (no CVSS, D-Link DSL-2750U)
- [CVE-2019-11715](https://cve.now/CVE-2019-11715.md): Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11716](https://cve.now/CVE-2019-11716.md): Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPrope (no CVSS, Mozilla Firefox)
- [CVE-2019-11717](https://cve.now/CVE-2019-11717.md): A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, all (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11718](https://cve.now/CVE-2019-11718.md): Activity Stream can display content from sent from the Snippet Service website. (no CVSS, Mozilla Firefox)
- [CVE-2019-11719](https://cve.now/CVE-2019-11719.md): When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Netw (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11720](https://cve.now/CVE-2019-11720.md): Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. (no CVSS, Mozilla Firefox)
- [CVE-2019-11721](https://cve.now/CVE-2019-11721.md): The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. (no CVSS, Mozilla Firefox)
- [CVE-2019-11723](https://cve.now/CVE-2019-11723.md): A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. (no CVSS, Mozilla Firefox)
- [CVE-2019-11724](https://cve.now/CVE-2019-11724.md): Application permissions give additional remote troubleshooting permission to the site input.mozilla.org, which has been retired and now redi (no CVSS, Mozilla Firefox)
- [CVE-2019-11725](https://cve.now/CVE-2019-11725.md): When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but res (no CVSS, Mozilla Firefox)
- [CVE-2019-11727](https://cve.now/CVE-2019-11727.md): A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when (no CVSS, Mozilla Firefox)
- [CVE-2019-11728](https://cve.now/CVE-2019-11728.md): The HTTP Alternative Services header, Alt-Svc, can be used by a malicious site to scan all TCP ports of any host that the accessible to a us (no CVSS, Mozilla Firefox)
- [CVE-2019-11729](https://cve.now/CVE-2019-11729.md): Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into mem (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-11730](https://cve.now/CVE-2019-11730.md): A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same direc (no CVSS, Mozilla Firefox ESR · Mozilla Firefox +1)
- [CVE-2019-1010207](https://cve.now/CVE-2019-1010207.md): Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). (no CVSS, Genetechsolutions Pie Register)
- [CVE-2019-1010208](https://cve.now/CVE-2019-1010208.md): IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow. (no CVSS, IDRIX, Truecrypt Veracrypt, Truecrypt)
- [CVE-2019-1010153](https://cve.now/CVE-2019-1010153.md): zzcms 8.3 and earlier is affected by: SQL Injection. (no CVSS, zzcms)
- [CVE-2019-1010152](https://cve.now/CVE-2019-1010152.md): zzcms 8.3 and earlier is affected by: File Delete to Code Execution. (no CVSS, zzcms)
- [CVE-2019-1010150](https://cve.now/CVE-2019-1010150.md): zzcms 8.3 and earlier is affected by: File Delete to Code Execution. (no CVSS, zzcms)
- [CVE-2019-1010209](https://cve.now/CVE-2019-1010209.md): GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. (no CVSS, GoUrl.io GoURL Wordpress Plugin)
- [CVE-2019-1010149](https://cve.now/CVE-2019-1010149.md): zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. (no CVSS, zzcms)
- [CVE-2019-1010148](https://cve.now/CVE-2019-1010148.md): zzcms version 8.3 and earlier is affected by: SQL Injection. (no CVSS, zzcms)
- [CVE-2019-1010221](https://cve.now/CVE-2019-1010221.md): LineageOS 16.0 and earlier is affected by: Incorrect Access Control. (no CVSS, LineageOS)
- [CVE-2019-10173](https://cve.now/CVE-2019-10173.md): It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. (CVSS 7.3, xstream · com.thoughtworks.xstream:xstream)
- [CVE-2019-1010123](https://cve.now/CVE-2019-1010123.md): MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. (no CVSS, MODX Revolution Gallery)
- [CVE-2019-14241](https://cve.now/CVE-2019-14241.md): HAProxy through 2.0.2 allows attackers to cause a denial of service (ha\_panic) via vectors related to htx\_manage\_client\_side\_cookies in prot (no CVSS)
- [CVE-2019-14240](https://cve.now/CVE-2019-14240.md): WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html UR (no CVSS)
- [CVE-2019-1010124](https://cve.now/CVE-2019-1010124.md): WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). (no CVSS, WebAppick WooCommerce Product Feed)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.