CVEs published August 8, 2019
59 CVEs were published on August 8, 2019: 0 critical, 2 high.
- Published
- 59
- Critical
- 0
- High
- 2
- Medium
- 17
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Cisco Enterprise NFV Infrastructure Software
- 9
- Huawei PCManager
- 3
- Apache Software Foundation Apache Ranger · org.apache.range…
- 1
- backpack/crud
- 1
- Cisco Email Security Appliance
- 1
- Cisco Firepower Management Center
- 1
- Cisco Firepower Threat Defense Software
- 1
- Cisco HyperFlex HX-Series
- 1
- Cisco IoT Field Network Director
- 1
- Cisco SD-WAN Solution
- 1
High 2
Medium, low and unrated 57
- CVE-2019-14783On Samsung mobile devices with N(7.x), and O(8.x), P(9.0) software, FotaAgent allows a malicious application to create privileged files.
- CVE-2016-10862Neet AirStream NAS1.1 devices have a password of ifconfig for the root account.
- CVE-2018-20954The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
- CVE-2018-20955Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root.
- CVE-2018-20956Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset.
- CVE-2018-20957The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.
- CVE-2018-20960Nespresso Prodigio devices lack Bluetooth connection security.
- CVE-2017-18484Cognitoys Dino devices allow XSS via the SSID.
- CVE-2017-18485Cognitoys Dino devices allow profiles_add.html CSRF.
- CVE-2016-10863Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.
- CVE-2015-92926kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
- CVE-2019-14679core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.
- CVE-2019-14680The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/a
- CVE-2019-14681The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF.
- CVE-2019-14682The acf-better-search (aka ACF: Better Search) plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbs_admin_page C
- CVE-2019-14683The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attac
- CVE-2018-20962The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.backpack/crud
- CVE-2019-14773admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action
- CVE-2019-14774The woo-variation-swatches (aka Variation Swatches for WooCommerce) plugin 1.0.61 for WordPress allows XSS via the wp-admin/admin.php?page=w
- CVE-2019-14353On Trezor One devices before 1.8.2, a side channel for the row-based OLED display was found.
- CVE-2019-12959Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in
- CVE-2019-12994Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a
- CVE-2019-12397Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2019-5239Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have an information leak vulnerability.Huawei PCManager
- CVE-2019-5238Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability.Huawei PCManager
- CVE-2019-5237Huawei PCManager with the versions before 9.0.1.66 (Oversea) and versions before 9.0.1.70 (China) have a code execution vulnerability.Huawei PCManager
- CVE-2019-5301Huawei smart phones Honor V20 with the versions before 9.0.1.161(C00E161R2P2) have an information leak vulnerability.Huawei Honor
- CVE-2019-5236Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.1Huawei Emily-L29C
- CVE-2019-11208TIBCO API Exchange Processes OAuth IncorrectlyTIBCO Software TIBCO API Exchange Gateway
- CVE-2019-13176An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2.
- CVE-2019-14335An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices.
- CVE-2019-14772verdaccio before 3.12.0 allows XSS.verdaccio
- CVE-2018-19855UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features
- CVE-2016-10864NETGEAR EX7000 V1.0.0.42_1.0.94 devices allow XSS via the SSID.
- CVE-2019-14255A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to inter
- CVE-2019-142211CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.
- CVE-2019-14754Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.
- CVE-2019-13101An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices.
- CVE-2019-1973Cisco Enterprise NFV Infrastructure Software Cross-site Scripting VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-1959Cisco Enterprise NFV Infrastructure Software Arbitrary File Read VulnerabilitiesCisco Enterprise NFV Infrastructure Software
- CVE-2019-1960Cisco Enterprise NFV Infrastructure Software Arbitrary File Read VulnerabilitiesCisco Enterprise NFV Infrastructure Software
- CVE-2019-1961Cisco Enterprise NFV Infrastructure Software Web Portal Arbitrary File Read VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-1970Cisco Firepower Threat Defense Software File Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-1972Cisco Enterprise NFV Infrastructure Software Privilege Escalation VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-1953Cisco Enterprise NFV Infrastructure Software Password Recovery VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-1954Cisco Webex Meetings Server Open Redirection VulnerabilityCisco WebEx Meetings Server
- CVE-2019-1955Cisco Email Security Appliance Header Injection VulnerabilityCisco Email Security Appliance
- CVE-2019-1956Cisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting VulnerabilityCisco SPA112 2-Port Phone Adapter
- CVE-2019-1957Cisco IoT Field Network Director TLS Renegotiation Denial of Service VulnerabilityCisco IoT Field Network Director
- CVE-2019-1958Cisco HyperFlex Software Cross-Site Request Forgery VulnerabilityCisco HyperFlex HX-Series
- CVE-2019-1949Cisco Firepower Management Center Persistent Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2019-1951Cisco SD-WAN Solution Packet Filtering Bypass VulnerabilityCisco SD-WAN Solution
- CVE-2019-1952Cisco Enterprise NFV Infrastructure Software Path Traversal VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-1946Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass VulnerabilityCisco Enterprise NFV Infrastructure Software
- CVE-2019-14769Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 doesn't sufficiently filter output when displaying certain block labels created b
- CVE-2019-14770In Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3, some menu links within the administration bar may be crafted to execute JavaS
- CVE-2019-14771Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interfac