CVEs published August 6, 2019
64 CVEs were published on August 6, 2019: 0 critical, 1 high.
- Published
- 64
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 63
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Canon EOS series digital cameras, PowerShot SX740 HS, Powe…
- 6
- NVIDIA GPU Display Driver
- 5
- NVIDIA SHIELD TV
- 3
- MongoDB Server
- 1
- nilsteampassnet/teampass
- 1
High 1
Medium, low and unrated 63
- CVE-2019-14731An issue was discovered in ZenTao 11.5.1.
- CVE-2019-14698An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14699An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14700An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14701An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14702An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14703A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5
- CVE-2019-14704An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline
- CVE-2019-14705An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie
- CVE-2019-14706A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14707An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14708An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-14709A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5.
- CVE-2019-5682NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but doesNVIDIA SHIELD TV
- CVE-2019-5681NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user datNVIDIA SHIELD TV
- CVE-2019-5679NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is impropeNVIDIA SHIELD TV
- CVE-2019-5687NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape NVIDIA GPU Display Driver
- CVE-2019-5686NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape NVIDIA GPU Display Driver
- CVE-2019-5685NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause NVIDIA GPU Display Driver
- CVE-2019-5684NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause NVIDIA GPU Display Driver
- CVE-2019-5683NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video driver trace logger component.NVIDIA GPU Display Driver
- CVE-2019-13106Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack
- CVE-2019-13105Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.
- CVE-2019-13104In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including
- CVE-2019-5994Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKIICanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-5995Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmwarCanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-5998Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKIICanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-5999Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKIICanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-6000Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKIICanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-6001Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKIICanon EOS series digital cameras, PowerShot SX740 HS, Powe…
- CVE-2019-14473eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks.
- CVE-2019-13143An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3.
- CVE-2019-14347Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account
- CVE-2019-12950An issue was discovered in TeamPass 2.1.27.35.nilsteampassnet/teampass
- CVE-2019-14696Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.
- CVE-2019-14697musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory.
- CVE-2019-14346Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.
- CVE-2019-14695A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress.
- CVE-2016-10797cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133).
- CVE-2016-10796cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
- CVE-2016-10795cPanel before 59.9999.145 allows stored XSS in the WHM tail_upcp2.cgi interface (SEC-156).
- CVE-2016-10794cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154).
- CVE-2016-10793cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152).
- CVE-2016-10792cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141).
- CVE-2016-10791cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).
- CVE-2016-10790cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192).
- CVE-2016-10789cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191).
- CVE-2016-10788cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188).
- CVE-2016-10787The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187).
- CVE-2016-10786cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).
- CVE-2016-10785cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185).
- CVE-2016-10784cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184).
- CVE-2016-10783cPanel before 60.0.25 allows self stored XSS in SSL_listkeys (SEC-182).
- CVE-2016-10782cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181).
- CVE-2016-10781cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180).
- CVE-2016-10780cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180).
- CVE-2016-10779cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179).
- CVE-2016-10777cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177).
- CVE-2016-10778cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178).
- CVE-2016-10776cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174).
- CVE-2019-14692AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
- CVE-2019-14691AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
- CVE-2019-14690AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.