# CVEs published 2019-08-18 17 CVEs were published on August 18, 2019: 0 critical, 0 high. Days are UTC. - [CVE-2019-15151](https://cve.now/CVE-2019-15151.md): AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h. (no CVSS, adplug) - [CVE-2019-15149](https://cve.now/CVE-2019-15149.md): core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiat (no CVSS, mitogen) - [CVE-2019-15139](https://cve.now/CVE-2019-15139.md): The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-serv (no CVSS) - [CVE-2019-15140](https://cve.now/CVE-2019-15140.md): coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or poss (no CVSS) - [CVE-2019-15141](https://cve.now/CVE-2019-15141.md): WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from (no CVSS) - [CVE-2019-15142](https://cve.now/CVE-2019-15142.md): In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep (no CVSS) - [CVE-2019-15143](https://cve.now/CVE-2019-15143.md): In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitma (no CVSS) - [CVE-2019-15144](https://cve.now/CVE-2019-15144.md): In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate\::sort) allows attackers to cause a denial-of-service (application c (no CVSS) - [CVE-2019-15145](https://cve.now/CVE-2019-15145.md): DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted (no CVSS) - [CVE-2019-15146](https://cve.now/CVE-2019-15146.md): GoPro GPMF-parser 1.2.2 has a heap-based buffer over-read (4 bytes) in GPMF\_Next in GPMF\_parser.c. (no CVSS) - [CVE-2019-15147](https://cve.now/CVE-2019-15147.md): GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMF\_Next in GPMF\_parser.c. (no CVSS) - [CVE-2019-15148](https://cve.now/CVE-2019-15148.md): GoPro GPMF-parser 1.2.2 has an out-of-bounds write in OpenMP4Source in demo/GPMF\_mp4reader.c. (no CVSS) - [CVE-2019-15130](https://cve.now/CVE-2019-15130.md): The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candid (no CVSS) - [CVE-2019-15129](https://cve.now/CVE-2019-15129.md): The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in (no CVSS) - [CVE-2019-15137](https://cve.now/CVE-2019-15137.md): The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permiss (no CVSS) - [CVE-2019-15136](https://cve.now/CVE-2019-15136.md): The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, whic (no CVSS) - [CVE-2019-15135](https://cve.now/CVE-2019-15135.md): The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a part (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-08-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.