# CVEs published 2019-08-19

42 CVEs were published on August 19, 2019: 1 critical, 2 high. Days are UTC.

- [CVE-2019-15232](https://cve.now/CVE-2019-15232.md): Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session (no CVSS)
- [CVE-2019-15229](https://cve.now/CVE-2019-15229.md): FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. (no CVSS)
- [CVE-2019-15228](https://cve.now/CVE-2019-15228.md): FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. (no CVSS)
- [CVE-2019-15225](https://cve.now/CVE-2019-15225.md): In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. (no CVSS)
- [CVE-2019-15224](https://cve.now/CVE-2019-15224.md): The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third p (no CVSS, rest-client · cron\_parser +8)
- [CVE-2019-15211](https://cve.now/CVE-2019-15211.md): An issue was discovered in the Linux kernel before 5.2.6. (no CVSS)
- [CVE-2019-15212](https://cve.now/CVE-2019-15212.md): An issue was discovered in the Linux kernel before 5.1.8. (no CVSS)
- [CVE-2019-15213](https://cve.now/CVE-2019-15213.md): An issue was discovered in the Linux kernel before 5.2.3. (CVSS 4.6)
- [CVE-2019-15214](https://cve.now/CVE-2019-15214.md): An issue was discovered in the Linux kernel before 5.0.10. (no CVSS)
- [CVE-2019-15215](https://cve.now/CVE-2019-15215.md): An issue was discovered in the Linux kernel before 5.2.6. (no CVSS)
- [CVE-2019-15216](https://cve.now/CVE-2019-15216.md): An issue was discovered in the Linux kernel before 5.0.14. (no CVSS)
- [CVE-2019-15217](https://cve.now/CVE-2019-15217.md): An issue was discovered in the Linux kernel before 5.2.3. (no CVSS)
- [CVE-2019-15218](https://cve.now/CVE-2019-15218.md): An issue was discovered in the Linux kernel before 5.1.8. (no CVSS)
- [CVE-2019-15219](https://cve.now/CVE-2019-15219.md): An issue was discovered in the Linux kernel before 5.1.8. (no CVSS)
- [CVE-2019-15220](https://cve.now/CVE-2019-15220.md): An issue was discovered in the Linux kernel before 5.2.1. (no CVSS)
- [CVE-2019-15221](https://cve.now/CVE-2019-15221.md): An issue was discovered in the Linux kernel before 5.1.17. (no CVSS)
- [CVE-2019-15222](https://cve.now/CVE-2019-15222.md): An issue was discovered in the Linux kernel before 5.2.8. (no CVSS)
- [CVE-2019-15223](https://cve.now/CVE-2019-15223.md): An issue was discovered in the Linux kernel before 5.1.8. (no CVSS)
- [CVE-2019-0173](https://cve.now/CVE-2019-0173.md): Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially e (no CVSS, Intel(R) RAID Web Console 2 Advisory)
- [CVE-2019-11140](https://cve.now/CVE-2019-11140.md): Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privileg (no CVSS, Intel(R) NUC Advisory)
- [CVE-2019-11143](https://cve.now/CVE-2019-11143.md): Improper permissions in the software installer for Intel(R) Authenticate before 3.8 may allow an authenticated user to potentially enable es (no CVSS, Intel(R) Authenticate Advisory)
- [CVE-2019-11146](https://cve.now/CVE-2019-11146.md): Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal (no CVSS, Intel(R) Driver & Support Assistant Advisory)
- [CVE-2019-11145](https://cve.now/CVE-2019-11145.md): Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to potentially enable escal (no CVSS, Intel(R) Driver & Support Assistant Advisory)
- [CVE-2019-11148](https://cve.now/CVE-2019-11148.md): Improper permissions in the installer for Intel(R) Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentiall (no CVSS, Intel(R) Remote Displays SDK Advisory)
- [CVE-2019-11163](https://cve.now/CVE-2019-11163.md): Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows before version 6.1.07 (no CVSS, Intel(R) Processor Identification Utility for Windows\* Advi…)
- [CVE-2019-11162](https://cve.now/CVE-2019-11162.md): Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may (no CVSS, Intel(R) Computing Improvement Program Advisory)
- [CVE-2019-6178](https://cve.now/CVE-2019-6178.md): An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names (CVSS 5.3, Iomega and LenovoEMC NAS products)
- [CVE-2019-6171](https://cve.now/CVE-2019-6171.md): A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or ph (CVSS 6.4, Lenovo BIOS)
- [CVE-2019-6165](https://cve.now/CVE-2019-6165.md): A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. (CVSS 7.3, Lenovo PaperDisplay Hotkey Service)
- [CVE-2019-6159](https://cve.now/CVE-2019-6159.md): A stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IMM v1) embedded Baseb (CVSS 9.6, IBM legacy System x IMM (IMM v1) firmware)
- [CVE-2019-11276](https://cve.now/CVE-2019-11276.md): Apps Manager sends tokens to Spring apps via HTTP (CVSS 5.4, Pivotal Application Service)
- [CVE-2019-5631](https://cve.now/CVE-2019-5631.md): Rapid7 InsightAppSec Local Privilege Escalation (CVSS 7.8, Rapid7 InsightAppSec)
- [CVE-2019-15160](https://cve.now/CVE-2019-15160.md): The SweetXml (aka sweet\_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption (no CVSS)
- [CVE-2019-15150](https://cve.now/CVE-2019-15150.md): In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in (no CVSS)
- [CVE-2018-20976](https://cve.now/CVE-2018-20976.md): An issue was discovered in fs/xfs/xfs\_super.c in the Linux kernel before 4.18. (no CVSS)
- [CVE-2016-10905](https://cve.now/CVE-2016-10905.md): An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. (no CVSS)
- [CVE-2016-10906](https://cve.now/CVE-2016-10906.md): An issue was discovered in drivers/net/ethernet/arc/emac\_main.c in the Linux kernel before 4.5. (no CVSS)
- [CVE-2017-18549](https://cve.now/CVE-2017-18549.md): An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. (no CVSS)
- [CVE-2017-18550](https://cve.now/CVE-2017-18550.md): An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. (no CVSS)
- [CVE-2016-10907](https://cve.now/CVE-2016-10907.md): An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. (no CVSS)
- [CVE-2017-18551](https://cve.now/CVE-2017-18551.md): An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. (no CVSS)
- [CVE-2017-18552](https://cve.now/CVE-2017-18552.md): An issue was discovered in net/rds/af\_rds.c in the Linux kernel before 4.11. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.