CVEs published July 24, 2019
20 CVEs were published on July 24, 2019: 0 critical, 1 high.
- Published
- 20
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 2
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Delta Electronics CNCSoft ScreenEditor
- 2
- mgetty
- 2
- Fred MODX Revolution
- 1
- GNU gdb
- 1
- hisiphp
- 1
- Jsish Jsi
- 1
- marginalia
- 1
- McAfee Data Loss Prevention (DLPe) for Windows
- 1
- McAfee Data Loss Prevention ePO extension
- 1
- McAfee DLP Endpoint ePO extension
- 1
High 1
Medium, low and unrated 19
- CVE-2019-3485ArcSight Logger stored cross site script issue in version prior to 6.7.1Micro Focus ArcSight Logger
- CVE-2019-10992Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior.Delta Electronics CNCSoft ScreenEditor
- CVE-2019-10982Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior.Delta Electronics CNCSoft ScreenEditor
- CVE-2019-10968Philips Holter 2010 Plus, all versions.Philips Holter 2010 Plus
- CVE-2019-3591DLP Endpoint ePO extension vulnerable to XSSMcAfee Data Loss Prevention ePO extension
- CVE-2019-3595DLP Endpoint ePO extension not sanitizing CSV exportsMcAfee DLP Endpoint ePO extension
- CVE-2019-1010178Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648.Fred MODX Revolution
- CVE-2019-1010179PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a CommandPHKP
- CVE-2019-1010189mgetty prior to version 1.2.1 is affected by: Infinite Loop.mgetty
- CVE-2019-1010191marginalia < 1.6 is affected by: SQL Injection.marginalia
- CVE-2019-1010193hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS).hisiphp
- CVE-2019-1010190mgetty prior to 1.2.1 is affected by: out-of-bounds read.mgetty
- CVE-2019-1010180GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access.GNU gdb
- CVE-2019-1010177Jsish 2.4.70 2.047 is affected by: Use After Free.Jsish Jsi
- CVE-2019-1010163Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service.Socusoft Photo 2 Video Converter
- CVE-2019-14250An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32.
- CVE-2019-14249dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with
- CVE-2019-14248In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and
- CVE-2019-14247The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.