# CVEs published 2019-07-27

20 CVEs were published on July 27, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-14298](https://cve.now/CVE-2019-14298.md): Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOn (no CVSS)
- [CVE-2019-14297](https://cve.now/CVE-2019-14297.md): Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerRead (no CVSS)
- [CVE-2007-6762](https://cve.now/CVE-2007-6762.md): In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel\_cipso\_v4.c where it is possible to overflow the doi\_d (no CVSS)
- [CVE-2011-5327](https://cve.now/CVE-2011-5327.md): In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm\_loop.c tcm\_loop\_make\_naa\_tpg() function could result in at (no CVSS)
- [CVE-2012-6712](https://cve.now/CVE-2012-6712.md): In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory cor (no CVSS)
- [CVE-2015-9289](https://cve.now/CVE-2015-9289.md): In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. (no CVSS)
- [CVE-2017-18379](https://cve.now/CVE-2017-18379.md): In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. (no CVSS)
- [CVE-2016-10764](https://cve.now/CVE-2016-10764.md): In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi\_setup\_flash() function. (no CVSS)
- [CVE-2010-5332](https://cve.now/CVE-2010-5332.md): In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. (no CVSS)
- [CVE-2010-5331](https://cve.now/CVE-2010-5331.md): In the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could cause an off by one (buffer overflow) prob (no CVSS)
- [CVE-2019-14296](https://cve.now/CVE-2019-14296.md): canUnpack in p\_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (SEGV or buffer overflow, and application crash) (no CVSS)
- [CVE-2019-14295](https://cve.now/CVE-2019-14295.md): An Integer overflow in the getElfSections function in p\_vmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2019-14294](https://cve.now/CVE-2019-14294.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14293](https://cve.now/CVE-2019-14293.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14292](https://cve.now/CVE-2019-14292.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14291](https://cve.now/CVE-2019-14291.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14290](https://cve.now/CVE-2019-14290.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14289](https://cve.now/CVE-2019-14289.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14288](https://cve.now/CVE-2019-14288.md): An issue was discovered in Xpdf 4.01.01. (no CVSS)
- [CVE-2019-14286](https://cve.now/CVE-2019-14286.md): In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event gr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.