# CVEs published 2019-08-06

64 CVEs were published on August 6, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-14731](https://cve.now/CVE-2019-14731.md): An issue was discovered in ZenTao 11.5.1. (no CVSS)
- [CVE-2019-14698](https://cve.now/CVE-2019-14698.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14699](https://cve.now/CVE-2019-14699.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14700](https://cve.now/CVE-2019-14700.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14701](https://cve.now/CVE-2019-14701.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14702](https://cve.now/CVE-2019-14702.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14703](https://cve.now/CVE-2019-14703.md): A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 (no CVSS)
- [CVE-2019-14704](https://cve.now/CVE-2019-14704.md): An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline (no CVSS)
- [CVE-2019-14705](https://cve.now/CVE-2019-14705.md): An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie (no CVSS)
- [CVE-2019-14706](https://cve.now/CVE-2019-14706.md): A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14707](https://cve.now/CVE-2019-14707.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14708](https://cve.now/CVE-2019-14708.md): An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-14709](https://cve.now/CVE-2019-14709.md): A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. (no CVSS)
- [CVE-2019-5682](https://cve.now/CVE-2019-5682.md): NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but does (no CVSS, NVIDIA SHIELD TV)
- [CVE-2019-5681](https://cve.now/CVE-2019-5681.md): NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user dat (no CVSS, NVIDIA SHIELD TV)
- [CVE-2019-5679](https://cve.now/CVE-2019-5679.md): NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is imprope (no CVSS, NVIDIA SHIELD TV)
- [CVE-2019-5687](https://cve.now/CVE-2019-5687.md): NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2019-5686](https://cve.now/CVE-2019-5686.md): NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2019-5685](https://cve.now/CVE-2019-5685.md): NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2019-5684](https://cve.now/CVE-2019-5684.md): NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially crafted shader can cause (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2019-5683](https://cve.now/CVE-2019-5683.md): NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video driver trace logger component. (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2019-13106](https://cve.now/CVE-2019-13106.md): Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack (no CVSS)
- [CVE-2019-13105](https://cve.now/CVE-2019-13105.md): Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem. (no CVSS)
- [CVE-2019-13104](https://cve.now/CVE-2019-13104.md): In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including (no CVSS)
- [CVE-2019-5994](https://cve.now/CVE-2019-5994.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-5995](https://cve.now/CVE-2019-5995.md): Missing authorization vulnerability exists in EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmwar (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-5998](https://cve.now/CVE-2019-5998.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-5999](https://cve.now/CVE-2019-5999.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-6000](https://cve.now/CVE-2019-6000.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-6001](https://cve.now/CVE-2019-6001.md): Buffer overflow in PTP (Picture Transfer Protocol) of EOS series digital cameras (EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII (no CVSS, Canon EOS series digital cameras, PowerShot SX740 HS, Powe…)
- [CVE-2019-2386](https://cve.now/CVE-2019-2386.md): Authorization session conflation (CVSS 7.1, MongoDB Server)
- [CVE-2019-14473](https://cve.now/CVE-2019-14473.md): eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. (no CVSS)
- [CVE-2019-13143](https://cve.now/CVE-2019-13143.md): An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. (no CVSS)
- [CVE-2019-14347](https://cve.now/CVE-2019-14347.md): Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account (no CVSS)
- [CVE-2019-12950](https://cve.now/CVE-2019-12950.md): An issue was discovered in TeamPass 2.1.27.35. (no CVSS, nilsteampassnet/teampass)
- [CVE-2019-14696](https://cve.now/CVE-2019-14696.md): Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter. (no CVSS)
- [CVE-2019-14697](https://cve.now/CVE-2019-14697.md): musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. (no CVSS)
- [CVE-2019-14346](https://cve.now/CVE-2019-14346.md): Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password. (no CVSS)
- [CVE-2019-14695](https://cve.now/CVE-2019-14695.md): A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. (no CVSS)
- [CVE-2016-10797](https://cve.now/CVE-2016-10797.md): cPanel before 58.0.4 allows WHM "Purchase and Install an SSL Certificate" page visitors to list all server domains (SEC-133). (no CVSS)
- [CVE-2016-10796](https://cve.now/CVE-2016-10796.md): cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130). (no CVSS)
- [CVE-2016-10795](https://cve.now/CVE-2016-10795.md): cPanel before 59.9999.145 allows stored XSS in the WHM tail\_upcp2.cgi interface (SEC-156). (no CVSS)
- [CVE-2016-10794](https://cve.now/CVE-2016-10794.md): cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error (SEC-154). (no CVSS)
- [CVE-2016-10793](https://cve.now/CVE-2016-10793.md): cPanel before 59.9999.145 allows arbitrary code execution due to an incorrect #! in Mail::SPF scripts (SEC-152). (no CVSS)
- [CVE-2016-10792](https://cve.now/CVE-2016-10792.md): cPanel before 59.9999.145 allows code execution in the context of other accounts via mailman list archives (SEC-141). (no CVSS)
- [CVE-2016-10791](https://cve.now/CVE-2016-10791.md): cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559). (no CVSS)
- [CVE-2016-10790](https://cve.now/CVE-2016-10790.md): cPanel before 60.0.25 does not use TLS for HTTP POSTs to listinput.cpanel.net (SEC-192). (no CVSS)
- [CVE-2016-10789](https://cve.now/CVE-2016-10789.md): cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler (SEC-191). (no CVSS)
- [CVE-2016-10788](https://cve.now/CVE-2016-10788.md): cPanel before 60.0.25 allows arbitrary code execution via Maketext in PostgreSQL adminbin (SEC-188). (no CVSS)
- [CVE-2016-10787](https://cve.now/CVE-2016-10787.md): The Host Access Control feature in cPanel before 60.0.25 mishandles actionless host.deny entries (SEC-187). (no CVSS)
- [CVE-2016-10786](https://cve.now/CVE-2016-10786.md): cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186). (no CVSS)
- [CVE-2016-10785](https://cve.now/CVE-2016-10785.md): cPanel before 60.0.25 allows attackers to discover file contents during file copy operations (SEC-185). (no CVSS)
- [CVE-2016-10784](https://cve.now/CVE-2016-10784.md): cPanel before 60.0.25 allows self XSS in the alias upload interface (SEC-184). (no CVSS)
- [CVE-2016-10783](https://cve.now/CVE-2016-10783.md): cPanel before 60.0.25 allows self stored XSS in SSL\_listkeys (SEC-182). (no CVSS)
- [CVE-2016-10782](https://cve.now/CVE-2016-10782.md): cPanel before 60.0.25 allows self stored XSS in postgres API1 listdbs (SEC-181). (no CVSS)
- [CVE-2016-10781](https://cve.now/CVE-2016-10781.md): cPanel before 60.0.25 allows self XSS in the UI\_confirm API (SEC-180). (no CVSS)
- [CVE-2016-10780](https://cve.now/CVE-2016-10780.md): cPanel before 60.0.25 allows stored XSS in the ftp\_sessions API (SEC-180). (no CVSS)
- [CVE-2016-10779](https://cve.now/CVE-2016-10779.md): cPanel before 60.0.25 allows stored XSS in api1\_listautoresponders (SEC-179). (no CVSS)
- [CVE-2016-10777](https://cve.now/CVE-2016-10777.md): cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover\_host (SEC-177). (no CVSS)
- [CVE-2016-10778](https://cve.now/CVE-2016-10778.md): cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178). (no CVSS)
- [CVE-2016-10776](https://cve.now/CVE-2016-10776.md): cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174). (no CVSS)
- [CVE-2019-14692](https://cve.now/CVE-2019-14692.md): AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp. (no CVSS)
- [CVE-2019-14691](https://cve.now/CVE-2019-14691.md): AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp. (no CVSS)
- [CVE-2019-14690](https://cve.now/CVE-2019-14690.md): AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::\_\_bmf\_convert\_stream() in bmf.cpp. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.