CVEs published August 20, 2019
197 CVEs were published on August 20, 2019: 1 critical, 27 high.
- Published
- 197
- Critical
- 1
- High
- 27
- Medium
- 14
- Low
- 0
- Unrated
- 155
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Adobe Acrobat and Reader
- 75
- Android
- 16
- IBM Informix Dynamic Server Enterprise Edition
- 9
- Nest Labs
- 7
- OpenEMR
- 6
- IBM API Connect
- 3
- IBM Security Guardium Big Data Intelligence
- 3
- IBM Business Automation Workflow
- 2
- IBM Cloud Private
- 2
- IBM Contract Management · IBM Emptoris Spend Analysis +1
- 2
Critical 1
High 27
- CVE-2019-5036An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002.Nest Labs
- CVE-2019-5040An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQNest Labs
- CVE-2019-5037An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4Nest Labs
- CVE-2019-5039An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2.Nest Labs
- CVE-2019-5038An exploitable command execution vulnerability exists in the print-tlv command of Weave tool.Nest Labs
- CVE-2019-4437IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger.IBM API Connect
- CVE-2019-4424IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXEIBM Business Automation Workflow
- CVE-2019-4340IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML IBM Security Guardium Big Data Intelligence
- CVE-2019-4338IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or inIBM Security Guardium Big Data Intelligence
- CVE-2019-4253IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gainIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1796IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges.IBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1636Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefiIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1635Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefiIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1634IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1633IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1632IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1631IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileIBM Informix Dynamic Server Enterprise Edition
- CVE-2018-1630IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileIBM Informix Dynamic Server Enterprise Edition
- CVE-2019-3753Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password Dell EMC PowerConnect
- CVE-2019-4483IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection.IBM Contract Management · IBM Emptoris Spend Analysis
- CVE-2019-4481IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection.IBM Emptoris Spend Analysis · IBM Contract Management
- CVE-2019-4433IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity InIBM InfoSphere Identity Insight · IBM InfoSphere Global Nam…
- CVE-2019-4419IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dIBM Intelligent Operations Center
- CVE-2019-4402IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected IBM API Connect
- CVE-2019-4310IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brIBM Security Guardium Big Data Intelligence
- CVE-2019-4294IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 throughIBM MQ Appliance · IBM DataPower Gateway
- CVE-2019-11209TIBCO FTL Escalation Of Privileges for Realm ConfigurationTIBCO Software TIBCO FTL Community Edition · TIBCO Softw… +1
Medium, low and unrated 169
- CVE-2019-5034An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002.Nest Labs
- CVE-2019-10960Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options.Zebra Industrial Printers All Versions
- CVE-2019-8106Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8105Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8104Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8103Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8102Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8101Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8100Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8099Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8098Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-6143Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authenticForcepoint Next Generation Firewall
- CVE-2019-8097Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8096Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8095Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-10086In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to accessApache Commons Beanutils · commons-beanutils:commons-beanut…
- CVE-2019-8094Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8077Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8061Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8060Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8059Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8058Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8057Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8056Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8055Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8054Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8053Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8052Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8051Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8050Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8049Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8048Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8046Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8047Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8045Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8044Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8043Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8042Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8041Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8040Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8039Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2127In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free.Android
- CVE-2019-8038Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2137In the endCall() function of TelecomManager.java, there is a possible Denial of Service due to a missing permission check.Android
- CVE-2019-8037Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2136In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2019-8036Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2135In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-8034Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2134In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2019-8035Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8033Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8032Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2133In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2019-8031Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2132It is possible to overlay the VPN dialog by a malicious application.Android
- CVE-2019-8030Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2131An application with overlay permission can display overlays on top of settings UI.Android
- CVE-2019-8028Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2130In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion.Android
- CVE-2019-8026Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2129In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-8029Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2128In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-2126In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer.Android
- CVE-2019-2125In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack.Android
- CVE-2019-8027Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2122In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case betweeAndroid
- CVE-2019-8025Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8024Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2121In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition.Android
- CVE-2019-8021Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8022Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-2120In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an insecure default value.Android
- CVE-2019-8020Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8023Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8019Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8018Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8017Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8014Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8015Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8016Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8013Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8012Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8011Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8010Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8009Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8008Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-13520Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2.Alpha5 Smart Loader
- CVE-2019-8007Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8006Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8005Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8004Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8003Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-8002Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-11924A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resulFacebook fizz
- CVE-2019-7965Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earAdobe Acrobat and Reader
- CVE-2019-4482IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to cross-site scripting.IBM Emptoris Spend Analysis
- CVE-2019-4167IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions tIBM StoredIQ
- CVE-2019-4120IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting.IBM Cloud Private
- CVE-2019-4485IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1IBM Contract Management · IBM Emptoris Spend Analysis +1
- CVE-2019-4484IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1IBM Contract Management · IBM Emptoris Spend Analysis +1
- CVE-2019-4460IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system.IBM API Connect
- CVE-2019-4425IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another useIBM Business Automation Workflow
- CVE-2019-4420IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aIBM Intelligent Operations Center
- CVE-2019-4308IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1IBM Emptoris Sourcing · IBM Contract Management +1
- CVE-2019-4117IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthoIBM Cloud Private
- CVE-2019-4049IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space ofIBM MQ
- CVE-2019-7594Metasys use of hardcoded RC2 keyJohnson Controls Metasys versions prior to
- CVE-2019-7593Metasys use of shared RSA key pairsJohnson Controls Metasys versions prior to
- CVE-2019-10745assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0.assign-deep
- CVE-2019-3968In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface whOpenEMR
- CVE-2019-3967In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers toOpenEMR
- CVE-2019-3966In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the foreign_id parameter.OpenEMR
- CVE-2019-3965In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the document_id parameter.OpenEMR
- CVE-2019-3964In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter.OpenEMR
- CVE-2019-3963In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter.OpenEMR
- CVE-2018-18056An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series.
- CVE-2017-18533The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
- CVE-2017-18532The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
- CVE-2017-18531The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.
- CVE-2017-18530The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
- CVE-2017-18529The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
- CVE-2017-18528The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
- CVE-2015-9320The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
- CVE-2017-18527The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
- CVE-2016-10895The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
- CVE-2017-18526The moreads-se plugin before 1.4.7 for WordPress has XSS.
- CVE-2015-9319The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
- CVE-2017-18524The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
- CVE-2017-18519The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
- CVE-2017-18523The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
- CVE-2017-18522The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
- CVE-2016-10892The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
- CVE-2017-18566The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
- CVE-2017-18518The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
- CVE-2018-20978The wp-all-import plugin before 3.4.7 for WordPress has XSS.
- CVE-2017-18567The wp-all-import plugin before 3.4.6 for WordPress has XSS.
- CVE-2015-9329The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
- CVE-2015-9330The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.
- CVE-2015-9331The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
- CVE-2016-10913The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.
- CVE-2016-10914The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file.
- CVE-2019-15238The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
- CVE-2017-18568The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
- CVE-2017-18569The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
- CVE-2016-10915The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.
- CVE-2017-18520The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
- CVE-2015-9332The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
- CVE-2011-5328The user-access-manager plugin before 1.2 for WordPress has CSRF.
- CVE-2014-10381The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.
- CVE-2015-9318The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.
- CVE-2017-18517The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
- CVE-2015-9317The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
- CVE-2019-14687A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrarTrend Micro Password Manager
- CVE-2019-14684A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrarTrend Micro Password Manager
- CVE-2019-15082The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS.
- CVE-2019-15233The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Se
- CVE-2019-14430plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.
- CVE-2019-15291An issue was discovered in the Linux kernel through 5.2.9.
- CVE-2019-11806OX App Suite 7.10.1 and earlier has Insecure Permissions.
- CVE-2019-11522OX App Suite 7.10.0 to 7.10.2 allows XSS.
- CVE-2019-11521OX App Suite 7.10.1 allows Content Spoofing.
- CVE-2018-20975Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb.fat_free_crm
- CVE-2019-12889An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2.
- CVE-2019-15239In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the
- CVE-2019-15227FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console.
- CVE-2019-15237Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.
- CVE-2016-10893The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests.