# CVEs published 2019-08-14

173 CVEs were published on August 14, 2019: 10 critical, 43 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-15062](https://cve.now/CVE-2019-15062.md): An issue was discovered in Dolibarr 11.0.0-alpha. (no CVSS, dolibarr/dolibarr)
- [CVE-2019-14427](https://cve.now/CVE-2019-14427.md): XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted J (no CVSS)
- [CVE-2019-1228](https://cve.now/CVE-2019-1228.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1229](https://cve.now/CVE-2019-1229.md): Dynamics On-Premise Elevation of Privilege Vulnerability (no CVSS, Microsoft Dynamics 365 (on-premises))
- [CVE-2019-1258](https://cve.now/CVE-2019-1258.md): Azure Active Directory Authentication Library Elevation of Privilege Vulnerability (no CVSS, Microsoft ADAL.NET · Microsoft Nuget +1)
- [CVE-2019-1196](https://cve.now/CVE-2019-1196.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1197](https://cve.now/CVE-2019-1197.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1198](https://cve.now/CVE-2019-1198.md): Microsoft Windows Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2019-1199](https://cve.now/CVE-2019-1199.md): Microsoft Outlook Memory Corruption Vulnerability (no CVSS, Microsoft Office)
- [CVE-2019-1200](https://cve.now/CVE-2019-1200.md): Microsoft Outlook Remote Code Execution Vulnerability (no CVSS, Microsoft Office · Microsoft Outlook)
- [CVE-2019-1201](https://cve.now/CVE-2019-1201.md): Microsoft Word Remote Code Execution Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1202](https://cve.now/CVE-2019-1202.md): SharePoint Information Disclosure Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2019-1203](https://cve.now/CVE-2019-1203.md): Microsoft Office SharePoint XSS Vulnerability (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2019-1204](https://cve.now/CVE-2019-1204.md): Microsoft Outlook Elevation of Privilege Vulnerability (no CVSS, Microsoft Office · Microsoft Outlook)
- [CVE-2019-1205](https://cve.now/CVE-2019-1205.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 9.8, Microsoft SharePoint Server · Microsoft Office)
- [CVE-2019-1206](https://cve.now/CVE-2019-1206.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server, · Microsoft Windows Server)
- [CVE-2019-1211](https://cve.now/CVE-2019-1211.md): Git for Visual Studio Elevation of Privilege Vulnerability (no CVSS, Microsoft Visual Studio)
- [CVE-2019-1212](https://cve.now/CVE-2019-1212.md): Windows DHCP Server Denial of Service Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1213](https://cve.now/CVE-2019-1213.md): Windows DHCP Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 Service Pack · Microsoft Wind…)
- [CVE-2019-1218](https://cve.now/CVE-2019-1218.md): Outlook iOS Spoofing Vulnerability (no CVSS, Microsoft Outlook for iOS)
- [CVE-2019-1222](https://cve.now/CVE-2019-1222.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1223](https://cve.now/CVE-2019-1223.md): Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1224](https://cve.now/CVE-2019-1224.md): Remote Desktop Protocol Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1225](https://cve.now/CVE-2019-1225.md): Remote Desktop Protocol Server Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1226](https://cve.now/CVE-2019-1226.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-1227](https://cve.now/CVE-2019-1227.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1175](https://cve.now/CVE-2019-1175.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1176](https://cve.now/CVE-2019-1176.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1177](https://cve.now/CVE-2019-1177.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1178](https://cve.now/CVE-2019-1178.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1179](https://cve.now/CVE-2019-1179.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1180](https://cve.now/CVE-2019-1180.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1181](https://cve.now/CVE-2019-1181.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows · Microsoft Remote Desktop for Android +2)
- [CVE-2019-1182](https://cve.now/CVE-2019-1182.md): Remote Desktop Services Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows · Microsoft Remote Desktop for Android +2)
- [CVE-2019-1183](https://cve.now/CVE-2019-1183.md): Windows VBScript Engine Remote Code Execution Vulnerability (no CVSS, Microsoft None Available)
- [CVE-2019-1184](https://cve.now/CVE-2019-1184.md): Windows Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2019-1185](https://cve.now/CVE-2019-1185.md): Windows Subsystem for Linux Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2019-1186](https://cve.now/CVE-2019-1186.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1187](https://cve.now/CVE-2019-1187.md): XmlLite Runtime Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1188](https://cve.now/CVE-2019-1188.md): LNK Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1190](https://cve.now/CVE-2019-1190.md): Windows Image Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1192](https://cve.now/CVE-2019-1192.md): Microsoft Browsers Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1193](https://cve.now/CVE-2019-1193.md): Microsoft Browser Memory Corruption Vulnerability (CVSS 6.4, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-1194](https://cve.now/CVE-2019-1194.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1195](https://cve.now/CVE-2019-1195.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1151](https://cve.now/CVE-2019-1151.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1152](https://cve.now/CVE-2019-1152.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1153](https://cve.now/CVE-2019-1153.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1154](https://cve.now/CVE-2019-1154.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1155](https://cve.now/CVE-2019-1155.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows · Microsoft Office)
- [CVE-2019-1156](https://cve.now/CVE-2019-1156.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1157](https://cve.now/CVE-2019-1157.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1158](https://cve.now/CVE-2019-1158.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1159](https://cve.now/CVE-2019-1159.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1161](https://cve.now/CVE-2019-1161.md): Microsoft Defender Elevation of Privilege Vulnerability (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +4)
- [CVE-2019-1162](https://cve.now/CVE-2019-1162.md): Windows ALPC Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1163](https://cve.now/CVE-2019-1163.md): Windows File Signature Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1164](https://cve.now/CVE-2019-1164.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1168](https://cve.now/CVE-2019-1168.md): Microsoft Windows p2pimsvc Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1169](https://cve.now/CVE-2019-1169.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1170](https://cve.now/CVE-2019-1170.md): Windows NTFS Elevation of Privilege Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2019-1171](https://cve.now/CVE-2019-1171.md): SymCrypt Information Disclosure Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2019-1172](https://cve.now/CVE-2019-1172.md): Windows Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2019-1173](https://cve.now/CVE-2019-1173.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-1174](https://cve.now/CVE-2019-1174.md): Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2019-0720](https://cve.now/CVE-2019-0720.md): Hyper-V Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2019-0723](https://cve.now/CVE-2019-0723.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0736](https://cve.now/CVE-2019-0736.md): Windows DHCP Client Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2019-0965](https://cve.now/CVE-2019-0965.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.6, Microsoft Windows)
- [CVE-2019-1030](https://cve.now/CVE-2019-1030.md): Microsoft Edge based on Edge HTML Information Disclosure Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2019-1057](https://cve.now/CVE-2019-1057.md): MS XML Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2019-1078](https://cve.now/CVE-2019-1078.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1131](https://cve.now/CVE-2019-1131.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1133](https://cve.now/CVE-2019-1133.md): Scripting Engine Memory Corruption Vulnerability (CVSS 7.5, Microsoft Internet Explorer)
- [CVE-2019-1139](https://cve.now/CVE-2019-1139.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1140](https://cve.now/CVE-2019-1140.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 8.8, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1141](https://cve.now/CVE-2019-1141.md): Chakra Scripting Engine Memory Corruption Vulnerability (CVSS 4.2, Microsoft ChakraCore · Microsoft Edge +1)
- [CVE-2019-1143](https://cve.now/CVE-2019-1143.md): Windows Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2019-1144](https://cve.now/CVE-2019-1144.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1145](https://cve.now/CVE-2019-1145.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-1146](https://cve.now/CVE-2019-1146.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1147](https://cve.now/CVE-2019-1147.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2019-1148](https://cve.now/CVE-2019-1148.md): Microsoft Graphics Component Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1149](https://cve.now/CVE-2019-1149.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Office 2019 for Mac)
- [CVE-2019-1150](https://cve.now/CVE-2019-1150.md): Microsoft Graphics Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2019-0714](https://cve.now/CVE-2019-0714.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0715](https://cve.now/CVE-2019-0715.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0716](https://cve.now/CVE-2019-0716.md): Windows Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0717](https://cve.now/CVE-2019-0717.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-0718](https://cve.now/CVE-2019-0718.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.8, Microsoft Windows)
- [CVE-2019-14527](https://cve.now/CVE-2019-14527.md): An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. (no CVSS)
- [CVE-2019-14526](https://cve.now/CVE-2019-14526.md): An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. (no CVSS)
- [CVE-2019-12104](https://cve.now/CVE-2019-12104.md): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by several post-authentication command (no CVSS)
- [CVE-2019-15058](https://cve.now/CVE-2019-15058.md): stb\_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi\_\_tga\_load, leading to Information Disclosure or Denial (no CVSS)
- [CVE-2019-12103](https://cve.now/CVE-2019-12103.md): The web-based configuration interface of the TP-Link M7350 V3 with firmware before 190531 is affected by a pre-authentication command inject (no CVSS)
- [CVE-2019-13030](https://cve.now/CVE-2019-13030.md): eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node. (no CVSS)
- [CVE-2019-9585](https://cve.now/CVE-2019-9585.md): eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.\*\*\*Metadata related operat (no CVSS)
- [CVE-2019-9584](https://cve.now/CVE-2019-9584.md): eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, (no CVSS)
- [CVE-2019-14216](https://cve.now/CVE-2019-14216.md): An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. (no CVSS)
- [CVE-2019-9582](https://cve.now/CVE-2019-9582.md): eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. (no CVSS)
- [CVE-2019-9583](https://cve.now/CVE-2019-9583.md): eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. (no CVSS)
- [CVE-2019-15052](https://cve.now/CVE-2019-15052.md): The HTTP client in Gradle before 5.6 sends authentication credentials originally destined for the configured host. (CVSS 9.8)
- [CVE-2018-19386](https://cve.now/CVE-2018-19386.md): SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page param (no CVSS)
- [CVE-2019-12262](https://cve.now/CVE-2019-12262.md): Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. (no CVSS)
- [CVE-2019-9506](https://cve.now/CVE-2019-9506.md): Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation (CVSS 7.6, Bluetooth BR/EDR)
- [CVE-2019-3637](https://cve.now/CVE-2019-3637.md): Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209 (CVSS 4.1, McAfee FRP)
- [CVE-2019-3639](https://cve.now/CVE-2019-3639.md): MWG UI: Cross-Frame Scripting vulnerability (CVSS 7.1, McAfee Web Gateway)
- [CVE-2019-3635](https://cve.now/CVE-2019-3635.md): MWG Proxy: Cross-Frame Scripting vulnerability (CVSS 4.3, McAfee Web Gateway)
- [CVE-2019-10201](https://cve.now/CVE-2019-10201.md): It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. (CVSS 8.1, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2019-10199](https://cve.now/CVE-2019-10199.md): It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. (CVSS 4.6, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2019-15053](https://cve.now/CVE-2019-15053.md): The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection me (no CVSS)
- [CVE-2019-11652](https://cve.now/CVE-2019-11652.md): A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and (no CVSS, Micro Focus Self Service Password Reset)
- [CVE-2019-14974](https://cve.now/CVE-2019-14974.md): SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop\_url= XSS. (no CVSS)
- [CVE-2017-18510](https://cve.now/CVE-2017-18510.md): The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions. (no CVSS)
- [CVE-2017-18511](https://cve.now/CVE-2017-18511.md): The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10880](https://cve.now/CVE-2016-10880.md): The google-document-embedder plugin before 2.6.1 for WordPress has XSS. (no CVSS)
- [CVE-2016-10881](https://cve.now/CVE-2016-10881.md): The google-document-embedder plugin before 2.6.2 for WordPress has XSS. (no CVSS)
- [CVE-2016-10882](https://cve.now/CVE-2016-10882.md): The google-document-embedder plugin before 2.6.2 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18512](https://cve.now/CVE-2017-18512.md): The newsletter-by-supsystic plugin before 1.1.8 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18513](https://cve.now/CVE-2017-18513.md): The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface. (no CVSS)
- [CVE-2016-10883](https://cve.now/CVE-2016-10883.md): The simple-add-pages-or-posts plugin before 1.7 for WordPress has CSRF for deleting users. (no CVSS)
- [CVE-2013-7476](https://cve.now/CVE-2013-7476.md): The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. (no CVSS)
- [CVE-2016-10884](https://cve.now/CVE-2016-10884.md): The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. (no CVSS)
- [CVE-2016-10885](https://cve.now/CVE-2016-10885.md): The wp-editor plugin before 1.2.6 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10886](https://cve.now/CVE-2016-10886.md): The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. (no CVSS)
- [CVE-2015-9307](https://cve.now/CVE-2015-9307.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature. (no CVSS)
- [CVE-2015-9308](https://cve.now/CVE-2015-9308.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature. (no CVSS)
- [CVE-2015-9309](https://cve.now/CVE-2015-9309.md): The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature. (no CVSS)
- [CVE-2018-20967](https://cve.now/CVE-2018-20967.md): The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF. (no CVSS)
- [CVE-2018-20968](https://cve.now/CVE-2018-20968.md): The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10887](https://cve.now/CVE-2016-10887.md): The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2016-10888](https://cve.now/CVE-2016-10888.md): The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2015-9310](https://cve.now/CVE-2015-9310.md): The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues. (no CVSS)
- [CVE-2019-15047](https://cve.now/CVE-2019-15047.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15048](https://cve.now/CVE-2019-15048.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15049](https://cve.now/CVE-2019-15049.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2019-15050](https://cve.now/CVE-2019-15050.md): An issue was discovered in Bento4 1.5.1.0. (no CVSS)
- [CVE-2015-9311](https://cve.now/CVE-2015-9311.md): The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. (no CVSS)
- [CVE-2019-0349](https://cve.now/CVE-2019-0349.md): SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, (no CVSS, SAP SE SAP Kernel)
- [CVE-2015-9312](https://cve.now/CVE-2015-9312.md): The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. (no CVSS)
- [CVE-2015-9313](https://cve.now/CVE-2015-9313.md): The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. (no CVSS)
- [CVE-2015-9314](https://cve.now/CVE-2015-9314.md): The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. (no CVSS)
- [CVE-2019-7931](https://cve.now/CVE-2019-7931.md): Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Premiere Pro CC)
- [CVE-2015-9315](https://cve.now/CVE-2015-9315.md): The newstatpress plugin before 1.0.1 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-15046](https://cve.now/CVE-2019-15046.md): Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS) repli (no CVSS)
- [CVE-2016-10889](https://cve.now/CVE-2016-10889.md): The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. (no CVSS)
- [CVE-2019-15025](https://cve.now/CVE-2019-15025.md): The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page. (no CVSS)
- [CVE-2017-18514](https://cve.now/CVE-2017-18514.md): The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-7961](https://cve.now/CVE-2019-7961.md): Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Prelude CC)
- [CVE-2015-9316](https://cve.now/CVE-2015-9316.md): The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc\_wppolls\_ajax\_request via t (no CVSS)
- [CVE-2019-7870](https://cve.now/CVE-2019-7870.md): Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Character Animator)
- [CVE-2019-8062](https://cve.now/CVE-2019-8062.md): Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. (CVSS 7.8, Adobe After Effects)
- [CVE-2019-0351](https://cve.now/CVE-2019-0351.md): A remote code execution vulnerability exists in the SAP NetWeaver UDDI Server (Services Registry), versions 7.10, 7.20, 7.30, 7.31, 7.40, 7. (no CVSS, SAP SE SAP NetWeaver UDDI Server)
- [CVE-2019-0348](https://cve.now/CVE-2019-0348.md): SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, e (no CVSS, SAP SE SAP Business Objects Business Intelligence Platform)
- [CVE-2019-0346](https://cve.now/CVE-2019-0346.md): Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to d (no CVSS, SAP SE SAP Business Objects Business Intelligence Platform)
- [CVE-2019-0345](https://cve.now/CVE-2019-0345.md): A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), vers (no CVSS, SAP SE SAP NetWeaver Application Server for Java)
- [CVE-2019-0344](https://cve.now/CVE-2019-0344.md): Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possi (CVSS 9.8, KEV, SAP SE SAP Commerce Cloud)
- [CVE-2019-0343](https://cve.now/CVE-2019-0343.md): SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user t (no CVSS, SAP SE SAP Commerce Cloud)
- [CVE-2019-0340](https://cve.now/CVE-2019-0340.md): The XML parser, which is being used by SAP Enable Now, before version 1902, has not been hardened correctly, leading to Missing XML Validati (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0341](https://cve.now/CVE-2019-0341.md): The session cookie used by SAP Enable Now, version 1902, does not have the HttpOnly flag set. (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0338](https://cve.now/CVE-2019-0338.md): During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not prop (no CVSS, SAP SE SAP Gateway)
- [CVE-2019-0334](https://cve.now/CVE-2019-0334.md): When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0333](https://cve.now/CVE-2019-0333.md): In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4. (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0337](https://cve.now/CVE-2019-0337.md): Java Proxy Runtime of SAP NetWeaver Process Integration, versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-cont (no CVSS, SAP SE SAP NetWeaver Process Integration)
- [CVE-2019-0335](https://cve.now/CVE-2019-0335.md): Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0332](https://cve.now/CVE-2019-0332.md): SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0331](https://cve.now/CVE-2019-0331.md): Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to a (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2017-18515](https://cve.now/CVE-2017-18515.md): The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. (no CVSS)
- [CVE-2019-14975](https://cve.now/CVE-2019-14975.md): Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz\_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check f (no CVSS)
- [CVE-2019-15027](https://cve.now/CVE-2019-15027.md): The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arb (no CVSS)
- [CVE-2019-14973](https://cve.now/CVE-2019-14973.md): \_TIFFCheckMalloc and \_TIFFCheckRealloc in tif\_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compile (no CVSS)
- [CVE-2014-10375](https://cve.now/CVE-2014-10375.md): handle\_messages in eXtl\_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header. (no CVSS)
- [CVE-2019-15028](https://cve.now/CVE-2019-15028.md): In Joomla! before 3.9.11, inadequate checks in com\_contact could allow mail submission in disabled forms. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.