# CVEs published 2019-07-24

20 CVEs were published on July 24, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-3622](https://cve.now/CVE-2019-3622.md): DLP Endpoint log file redirection to arbitrary locations (CVSS 7.5, McAfee Data Loss Prevention (DLPe) for Windows)
- [CVE-2019-3485](https://cve.now/CVE-2019-3485.md): ArcSight Logger stored cross site script issue in version prior to 6.7.1 (CVSS 4.6, Micro Focus ArcSight Logger)
- [CVE-2019-10992](https://cve.now/CVE-2019-10992.md): Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. (no CVSS, Delta Electronics CNCSoft ScreenEditor)
- [CVE-2019-10982](https://cve.now/CVE-2019-10982.md): Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. (no CVSS, Delta Electronics CNCSoft ScreenEditor)
- [CVE-2019-10968](https://cve.now/CVE-2019-10968.md): Philips Holter 2010 Plus, all versions. (no CVSS, Philips Holter 2010 Plus)
- [CVE-2019-3591](https://cve.now/CVE-2019-3591.md): DLP Endpoint ePO extension vulnerable to XSS (CVSS 3.9, McAfee Data Loss Prevention ePO extension)
- [CVE-2019-3595](https://cve.now/CVE-2019-3595.md): DLP Endpoint ePO extension not sanitizing CSV exports (CVSS 2.0, McAfee DLP Endpoint ePO extension)
- [CVE-2019-1010178](https://cve.now/CVE-2019-1010178.md): Fred MODX Revolution \< 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. (no CVSS, Fred MODX Revolution)
- [CVE-2019-1010179](https://cve.now/CVE-2019-1010179.md): PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command (no CVSS, PHKP)
- [CVE-2019-1010189](https://cve.now/CVE-2019-1010189.md): mgetty prior to version 1.2.1 is affected by: Infinite Loop. (no CVSS, mgetty)
- [CVE-2019-1010191](https://cve.now/CVE-2019-1010191.md): marginalia \< 1.6 is affected by: SQL Injection. (no CVSS, marginalia)
- [CVE-2019-1010193](https://cve.now/CVE-2019-1010193.md): hisiphp 1.0.8 is affected by: Cross Site Scripting (XSS). (no CVSS, hisiphp)
- [CVE-2019-1010190](https://cve.now/CVE-2019-1010190.md): mgetty prior to 1.2.1 is affected by: out-of-bounds read. (no CVSS, mgetty)
- [CVE-2019-1010180](https://cve.now/CVE-2019-1010180.md): GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. (no CVSS, GNU gdb)
- [CVE-2019-1010177](https://cve.now/CVE-2019-1010177.md): Jsish 2.4.70 2.047 is affected by: Use After Free. (no CVSS, Jsish Jsi)
- [CVE-2019-1010163](https://cve.now/CVE-2019-1010163.md): Socusoft Co Photo 2 Video Converter 8.0.0 is affected by: Buffer Overflow - Local shell-code execution and Denial of Service. (no CVSS, Socusoft Photo 2 Video Converter)
- [CVE-2019-14250](https://cve.now/CVE-2019-14250.md): An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-14249](https://cve.now/CVE-2019-14249.md): dwarf\_elf\_load\_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with (no CVSS)
- [CVE-2019-14248](https://cve.now/CVE-2019-14248.md): In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process\_pragma, search\_pragma\_list, and (no CVSS)
- [CVE-2019-14247](https://cve.now/CVE-2019-14247.md): The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.