# CVEs published 2019-07-29

87 CVEs were published on July 29, 2019: 3 critical, 5 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2018-18570](https://cve.now/CVE-2018-18570.md): Planon before Live Build 41 has XSS. (no CVSS)
- [CVE-2019-3948](https://cve.now/CVE-2019-3948.md): The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX8 (no CVSS, Dahua IPC-XXBXX · Dahua IPC HX5X3X and HX4X3X +6)
- [CVE-2019-14431](https://cve.now/CVE-2019-14431.md): In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of (CVSS 9.8)
- [CVE-2019-14418](https://cve.now/CVE-2019-14418.md): An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. (CVSS 9.1)
- [CVE-2019-14417](https://cve.now/CVE-2019-14417.md): An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. (CVSS 7.2)
- [CVE-2019-14416](https://cve.now/CVE-2019-14416.md): An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. (CVSS 7.2)
- [CVE-2019-14415](https://cve.now/CVE-2019-14415.md): An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. (CVSS 5.9)
- [CVE-2019-13655](https://cve.now/CVE-2019-13655.md): Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to sp (no CVSS)
- [CVE-2018-11772](https://cve.now/CVE-2018-11772.md): Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if any) was previously selected in the (no CVSS, Apache VCL)
- [CVE-2018-11774](https://cve.now/CVE-2018-11774.md): Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. (no CVSS, Apache VCL)
- [CVE-2018-11773](https://cve.now/CVE-2018-11773.md): Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. (no CVSS, Apache VCL)
- [CVE-2018-17213](https://cve.now/CVE-2018-17213.md): An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. (no CVSS)
- [CVE-2018-17211](https://cve.now/CVE-2018-17211.md): An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. (no CVSS)
- [CVE-2019-13571](https://cve.now/CVE-2019-13571.md): A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. (no CVSS)
- [CVE-2019-14271](https://cve.now/CVE-2019-14271.md): In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamical (no CVSS, github.com/docker/docker · github.com/moby/moby)
- [CVE-2019-11868](https://cve.now/CVE-2019-11868.md): See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to (no CVSS)
- [CVE-2016-10766](https://cve.now/CVE-2016-10766.md): edx-platform before 2016-06-06 allows CSRF. (no CVSS)
- [CVE-2016-10765](https://cve.now/CVE-2016-10765.md): edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address. (no CVSS)
- [CVE-2019-13126](https://cve.now/CVE-2019-13126.md): An integer overflow in NATS Server before 2.0.2 allows a remote attacker to crash the server by sending a crafted request. (no CVSS, github.com/nats-io/nats-server · github.com/nats-io/nats-se…)
- [CVE-2019-13498](https://cve.now/CVE-2019-13498.md): One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks (no CVSS)
- [CVE-2015-5601](https://cve.now/CVE-2015-5601.md): edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files. (no CVSS)
- [CVE-2019-11201](https://cve.now/CVE-2019-11201.md): Dolibarr ERP/CRM 9.0.1 provides a module named website that provides for creation of public websites with a WYSIWYG editor. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-11200](https://cve.now/CVE-2019-11200.md): Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-11199](https://cve.now/CVE-2019-11199.md): Dolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. (no CVSS)
- [CVE-2015-6253](https://cve.now/CVE-2015-6253.md): edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. (no CVSS)
- [CVE-2015-6960](https://cve.now/CVE-2015-6960.md): edx-platform before 2015-09-17 allows XSS via a team name. (no CVSS)
- [CVE-2015-9288](https://cve.now/CVE-2015-9288.md): The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's (no CVSS)
- [CVE-2019-12743](https://cve.now/CVE-2019-12743.md): HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (includin (no CVSS)
- [CVE-2019-6726](https://cve.now/CVE-2019-6726.md): The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp\_postratings\_clear\_fas (no CVSS)
- [CVE-2019-12948](https://cve.now/CVE-2019-12948.md): A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC S (no CVSS)
- [CVE-2019-14267](https://cve.now/CVE-2019-14267.md): PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled. (no CVSS)
- [CVE-2019-13103](https://cve.now/CVE-2019-13103.md): A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the sta (no CVSS)
- [CVE-2019-1020002](https://cve.now/CVE-2019-1020002.md): Pterodactyl before 0.7.14 with 2FA allows credential sniffing. (no CVSS, Pterodactyl Panel · pterodactyl/panel)
- [CVE-2019-1020004](https://cve.now/CVE-2019-1020004.md): Tridactyl before 1.16.0 allows fake key events. (no CVSS, Tridactyl)
- [CVE-2019-1020007](https://cve.now/CVE-2019-1020007.md): Dependency-Track before 3.5.1 allows XSS. (no CVSS, Dependency-Track)
- [CVE-2019-1020009](https://cve.now/CVE-2019-1020009.md): Fleet before 2.1.2 allows exposure of SMTP credentials. (no CVSS, Fleet)
- [CVE-2019-1020008](https://cve.now/CVE-2019-1020008.md): stacktable.js before 1.0.4 allows XSS. (no CVSS, stacktable.js)
- [CVE-2019-1137](https://cve.now/CVE-2019-1137.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request (no CVSS, Microsoft Exchange Server)
- [CVE-2019-1136](https://cve.now/CVE-2019-1136.md): An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi (no CVSS, Microsoft Exchange Server)
- [CVE-2019-1134](https://cve.now/CVE-2019-1134.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2019-1132](https://cve.now/CVE-2019-1132.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2019-1130](https://cve.now/CVE-2019-1130.md): An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El (CVSS 7.8, KEV, Microsoft Windows Server · Microsoft Windows)
- [CVE-2019-1129](https://cve.now/CVE-2019-1129.md): An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2019-1128](https://cve.now/CVE-2019-1128.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1127](https://cve.now/CVE-2019-1127.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1126](https://cve.now/CVE-2019-1126.md): A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the ex (no CVSS, Microsoft Windows Server · Microsoft Windows Server,)
- [CVE-2019-1124](https://cve.now/CVE-2019-1124.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1123](https://cve.now/CVE-2019-1123.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1122](https://cve.now/CVE-2019-1122.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1121](https://cve.now/CVE-2019-1121.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1120](https://cve.now/CVE-2019-1120.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1119](https://cve.now/CVE-2019-1119.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1118](https://cve.now/CVE-2019-1118.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1117](https://cve.now/CVE-2019-1117.md): A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V (no CVSS, Microsoft Windows)
- [CVE-2019-1116](https://cve.now/CVE-2019-1116.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-1020006](https://cve.now/CVE-2019-1020006.md): invenio-app before 1.1.1 allows host header injection. (no CVSS, invenio-app)
- [CVE-2019-1113](https://cve.now/CVE-2019-1113.md): A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s (no CVSS, Microsoft .NET Framework · Microsoft Visual Studio)
- [CVE-2019-1112](https://cve.now/CVE-2019-1112.md): An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In (no CVSS, Microsoft Office)
- [CVE-2019-1111](https://cve.now/CVE-2019-1111.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft Excel · Microsoft Office)
- [CVE-2019-1110](https://cve.now/CVE-2019-1110.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft Excel · Microsoft Office)
- [CVE-2019-1109](https://cve.now/CVE-2019-1109.md): A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office docu (no CVSS, Microsoft Office)
- [CVE-2019-1108](https://cve.now/CVE-2019-1108.md): An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desk (no CVSS, Microsoft Windows)
- [CVE-2019-1107](https://cve.now/CVE-2019-1107.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1106](https://cve.now/CVE-2019-1106.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1105](https://cve.now/CVE-2019-1105.md): Outlook for Android Spoofing Vulnerability (no CVSS, Microsoft Outlook for Android)
- [CVE-2019-1020005](https://cve.now/CVE-2019-1020005.md): invenio-communities before 1.0.0a20 allows XSS. (no CVSS, invenio-communities)
- [CVE-2019-1104](https://cve.now/CVE-2019-1104.md): A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corr (no CVSS, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1020003](https://cve.now/CVE-2019-1020003.md): invenio-records before 1.2.2 allows XSS. (no CVSS, invenio-records)
- [CVE-2019-1103](https://cve.now/CVE-2019-1103.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'C (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-1102](https://cve.now/CVE-2019-1102.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows)
- [CVE-2019-1101](https://cve.now/CVE-2019-1101.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-1100](https://cve.now/CVE-2019-1100.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-1099](https://cve.now/CVE-2019-1099.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-1098](https://cve.now/CVE-2019-1098.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-1020019](https://cve.now/CVE-2019-1020019.md): invenio-previewer before 1.0.0a12 allows XSS. (no CVSS, invenio-previewer)
- [CVE-2019-1020018](https://cve.now/CVE-2019-1020018.md): Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link. (no CVSS, Discourse)
- [CVE-2019-1020017](https://cve.now/CVE-2019-1020017.md): Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP. (no CVSS, Discourse)
- [CVE-2019-1020016](https://cve.now/CVE-2019-1020016.md): ASH-AIO before 2.0.0.3 allows an open redirect. (no CVSS, ASH-AIO)
- [CVE-2019-1020015](https://cve.now/CVE-2019-1020015.md): graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT. (no CVSS, graphql-engine)
- [CVE-2019-1020014](https://cve.now/CVE-2019-1020014.md): docker-credential-helpers before 0.6.3 has a double free in the List functions. (no CVSS, docker-credential-helpers)
- [CVE-2019-1020013](https://cve.now/CVE-2019-1020013.md): parse-server before 3.6.0 allows account enumeration. (no CVSS, parse-server)
- [CVE-2019-1020012](https://cve.now/CVE-2019-1020012.md): parse-server before 3.4.1 allows DoS after any POST to a volatile class. (no CVSS, parse-server)
- [CVE-2019-1020011](https://cve.now/CVE-2019-1020011.md): SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority. (CVSS 9.0, SmokeDetector)
- [CVE-2019-1020010](https://cve.now/CVE-2019-1020010.md): Misskey before 10.102.4 allows hijacking a user's token. (no CVSS, Misskey)
- [CVE-2019-14379](https://cve.now/CVE-2019-14379.md): SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2019-14378](https://cve.now/CVE-2019-14378.md): ip\_reass in ip\_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the firs (no CVSS)
- [CVE-2019-1020001](https://cve.now/CVE-2019-1020001.md): yard before 0.9.20 allows path traversal. (no CVSS, yard)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.