CVEs published August 19, 2019
42 CVEs were published on August 19, 2019: 1 critical, 2 high.
- Published
- 42
- Critical
- 1
- High
- 2
- Medium
- 4
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Intel(R) Driver & Support Assistant Advisory
- 2
- IBM legacy System x IMM (IMM v1) firmware
- 1
- Intel(R) Authenticate Advisory
- 1
- Intel(R) Computing Improvement Program Advisory
- 1
- Intel(R) NUC Advisory
- 1
- Intel(R) Processor Identification Utility for Windows* Advi…
- 1
- Intel(R) RAID Web Console 2 Advisory
- 1
- Intel(R) Remote Displays SDK Advisory
- 1
- Iomega and LenovoEMC NAS products
- 1
- Lenovo BIOS
- 1
Critical 1
High 2
Medium, low and unrated 39
- CVE-2019-15232Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session
- CVE-2019-15229FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console.
- CVE-2019-15228FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console.
- CVE-2019-15225In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation.
- CVE-2019-15224The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third prest-client · cron_parser +8
- CVE-2019-15211An issue was discovered in the Linux kernel before 5.2.6.
- CVE-2019-15212An issue was discovered in the Linux kernel before 5.1.8.
- CVE-2019-15213An issue was discovered in the Linux kernel before 5.2.3.
- CVE-2019-15214An issue was discovered in the Linux kernel before 5.0.10.
- CVE-2019-15215An issue was discovered in the Linux kernel before 5.2.6.
- CVE-2019-15216An issue was discovered in the Linux kernel before 5.0.14.
- CVE-2019-15217An issue was discovered in the Linux kernel before 5.2.3.
- CVE-2019-15218An issue was discovered in the Linux kernel before 5.1.8.
- CVE-2019-15219An issue was discovered in the Linux kernel before 5.1.8.
- CVE-2019-15220An issue was discovered in the Linux kernel before 5.2.1.
- CVE-2019-15221An issue was discovered in the Linux kernel before 5.1.17.
- CVE-2019-15222An issue was discovered in the Linux kernel before 5.2.8.
- CVE-2019-15223An issue was discovered in the Linux kernel before 5.1.8.
- CVE-2019-0173Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially eIntel(R) RAID Web Console 2 Advisory
- CVE-2019-11140Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilegIntel(R) NUC Advisory
- CVE-2019-11143Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable esIntel(R) Authenticate Advisory
- CVE-2019-11146Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalIntel(R) Driver & Support Assistant Advisory
- CVE-2019-11145Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escalIntel(R) Driver & Support Assistant Advisory
- CVE-2019-11148Improper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentiallIntel(R) Remote Displays SDK Advisory
- CVE-2019-11163Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows before version 6.1.07Intel(R) Processor Identification Utility for Windows* Advi…
- CVE-2019-11162Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 mayIntel(R) Computing Improvement Program Advisory
- CVE-2019-6178An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names Iomega and LenovoEMC NAS products
- CVE-2019-6171A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or phLenovo BIOS
- CVE-2019-11276Apps Manager sends tokens to Spring apps via HTTPPivotal Application Service
- CVE-2019-15160The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption
- CVE-2019-15150In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in
- CVE-2018-20976An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18.
- CVE-2016-10905An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8.
- CVE-2016-10906An issue was discovered in drivers/net/ethernet/arc/emac_main.c in the Linux kernel before 4.5.
- CVE-2017-18549An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13.
- CVE-2017-18550An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13.
- CVE-2016-10907An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6.
- CVE-2017-18551An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15.
- CVE-2017-18552An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11.