# CVEs published 2019-08-20

197 CVEs were published on August 20, 2019: 1 critical, 27 high. Days are UTC.

- [CVE-2019-5036](https://cve.now/CVE-2019-5036.md): An exploitable denial-of-service vulnerability exists in the Weave error reporting functionality of the Nest Cam IQ Indoor, version 4620002. (CVSS 7.5, Nest Labs)
- [CVE-2019-5035](https://cve.now/CVE-2019-5035.md): An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 462000 (CVSS 9.0, Nest Labs)
- [CVE-2019-5034](https://cve.now/CVE-2019-5034.md): An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. (CVSS 5.3, Nest Labs)
- [CVE-2019-10960](https://cve.now/CVE-2019-10960.md): Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. (no CVSS, Zebra Industrial Printers All Versions)
- [CVE-2019-5040](https://cve.now/CVE-2019-5040.md): An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ (CVSS 8.2, Nest Labs)
- [CVE-2019-5037](https://cve.now/CVE-2019-5037.md): An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4 (CVSS 7.5, Nest Labs)
- [CVE-2019-5039](https://cve.now/CVE-2019-5039.md): An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2. (CVSS 7.5, Nest Labs)
- [CVE-2019-5038](https://cve.now/CVE-2019-5038.md): An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. (CVSS 7.5, Nest Labs)
- [CVE-2019-8106](https://cve.now/CVE-2019-8106.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8105](https://cve.now/CVE-2019-8105.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8104](https://cve.now/CVE-2019-8104.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8103](https://cve.now/CVE-2019-8103.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8102](https://cve.now/CVE-2019-8102.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8101](https://cve.now/CVE-2019-8101.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8100](https://cve.now/CVE-2019-8100.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8099](https://cve.now/CVE-2019-8099.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8098](https://cve.now/CVE-2019-8098.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-6143](https://cve.now/CVE-2019-6143.md): Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentic (no CVSS, Forcepoint Next Generation Firewall)
- [CVE-2019-8097](https://cve.now/CVE-2019-8097.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8096](https://cve.now/CVE-2019-8096.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8095](https://cve.now/CVE-2019-8095.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-10086](https://cve.now/CVE-2019-10086.md): In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access (no CVSS, Apache Commons Beanutils · commons-beanutils:commons-beanut…)
- [CVE-2019-8094](https://cve.now/CVE-2019-8094.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8077](https://cve.now/CVE-2019-8077.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8061](https://cve.now/CVE-2019-8061.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8060](https://cve.now/CVE-2019-8060.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8059](https://cve.now/CVE-2019-8059.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8058](https://cve.now/CVE-2019-8058.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8057](https://cve.now/CVE-2019-8057.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8056](https://cve.now/CVE-2019-8056.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8055](https://cve.now/CVE-2019-8055.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8054](https://cve.now/CVE-2019-8054.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8053](https://cve.now/CVE-2019-8053.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8052](https://cve.now/CVE-2019-8052.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8051](https://cve.now/CVE-2019-8051.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8050](https://cve.now/CVE-2019-8050.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8049](https://cve.now/CVE-2019-8049.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8048](https://cve.now/CVE-2019-8048.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8046](https://cve.now/CVE-2019-8046.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8047](https://cve.now/CVE-2019-8047.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8045](https://cve.now/CVE-2019-8045.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8044](https://cve.now/CVE-2019-8044.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8043](https://cve.now/CVE-2019-8043.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8042](https://cve.now/CVE-2019-8042.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8041](https://cve.now/CVE-2019-8041.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8040](https://cve.now/CVE-2019-8040.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8039](https://cve.now/CVE-2019-8039.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2127](https://cve.now/CVE-2019-2127.md): In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2019-8038](https://cve.now/CVE-2019-8038.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2137](https://cve.now/CVE-2019-2137.md): In the endCall() function of TelecomManager.java, there is a possible Denial of Service due to a missing permission check. (no CVSS, Android)
- [CVE-2019-8037](https://cve.now/CVE-2019-8037.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2136](https://cve.now/CVE-2019-2136.md): In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2019-8036](https://cve.now/CVE-2019-8036.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2135](https://cve.now/CVE-2019-2135.md): In Mfc\_Transceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-8034](https://cve.now/CVE-2019-8034.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2134](https://cve.now/CVE-2019-2134.md): In phFriNfc\_ExtnsTransceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2019-8035](https://cve.now/CVE-2019-8035.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8033](https://cve.now/CVE-2019-8033.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8032](https://cve.now/CVE-2019-8032.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2133](https://cve.now/CVE-2019-2133.md): In Mfc\_Transceive of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-8031](https://cve.now/CVE-2019-8031.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2132](https://cve.now/CVE-2019-2132.md): It is possible to overlay the VPN dialog by a malicious application. (no CVSS, Android)
- [CVE-2019-8030](https://cve.now/CVE-2019-8030.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2131](https://cve.now/CVE-2019-2131.md): An application with overlay permission can display overlays on top of settings UI. (no CVSS, Android)
- [CVE-2019-8028](https://cve.now/CVE-2019-8028.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2130](https://cve.now/CVE-2019-2130.md): In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. (no CVSS, Android)
- [CVE-2019-8026](https://cve.now/CVE-2019-8026.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2129](https://cve.now/CVE-2019-2129.md): In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-8029](https://cve.now/CVE-2019-8029.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2128](https://cve.now/CVE-2019-2128.md): In ACELP\_4t64\_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2126](https://cve.now/CVE-2019-2126.md): In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. (no CVSS, Android)
- [CVE-2019-2125](https://cve.now/CVE-2019-2125.md): In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. (no CVSS, Android)
- [CVE-2019-8027](https://cve.now/CVE-2019-8027.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2122](https://cve.now/CVE-2019-2122.md): In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case betwee (no CVSS, Android)
- [CVE-2019-8025](https://cve.now/CVE-2019-8025.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8024](https://cve.now/CVE-2019-8024.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2121](https://cve.now/CVE-2019-2121.md): In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. (no CVSS, Android)
- [CVE-2019-8021](https://cve.now/CVE-2019-8021.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8022](https://cve.now/CVE-2019-8022.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-2120](https://cve.now/CVE-2019-2120.md): In OatFileAssistant::GenerateOatFile of oat\_file\_assistant.cc, there is a possible file corruption issue due to an insecure default value. (no CVSS, Android)
- [CVE-2019-8020](https://cve.now/CVE-2019-8020.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8023](https://cve.now/CVE-2019-8023.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8019](https://cve.now/CVE-2019-8019.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8018](https://cve.now/CVE-2019-8018.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8017](https://cve.now/CVE-2019-8017.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8014](https://cve.now/CVE-2019-8014.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8015](https://cve.now/CVE-2019-8015.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8016](https://cve.now/CVE-2019-8016.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8013](https://cve.now/CVE-2019-8013.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8012](https://cve.now/CVE-2019-8012.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8011](https://cve.now/CVE-2019-8011.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8010](https://cve.now/CVE-2019-8010.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8009](https://cve.now/CVE-2019-8009.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8008](https://cve.now/CVE-2019-8008.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-13520](https://cve.now/CVE-2019-13520.md): Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. (no CVSS, Alpha5 Smart Loader)
- [CVE-2019-8007](https://cve.now/CVE-2019-8007.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8006](https://cve.now/CVE-2019-8006.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8005](https://cve.now/CVE-2019-8005.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8004](https://cve.now/CVE-2019-8004.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8003](https://cve.now/CVE-2019-8003.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-8002](https://cve.now/CVE-2019-8002.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-11924](https://cve.now/CVE-2019-11924.md): A peer could send empty handshake fragments containing only padding which would be kept in memory until a full handshake was received, resul (no CVSS, Facebook fizz)
- [CVE-2019-7965](https://cve.now/CVE-2019-7965.md): Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and ear (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-4482](https://cve.now/CVE-2019-4482.md): IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Emptoris Spend Analysis)
- [CVE-2019-4437](https://cve.now/CVE-2019-4437.md): IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. (CVSS 8.2, IBM API Connect)
- [CVE-2019-4424](https://cve.now/CVE-2019-4424.md): IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE (CVSS 7.1, IBM Business Automation Workflow)
- [CVE-2019-4340](https://cve.now/CVE-2019-4340.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML (CVSS 7.1, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4338](https://cve.now/CVE-2019-4338.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or in (CVSS 7.5, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4167](https://cve.now/CVE-2019-4167.md): IBM StoredIQ 7.6.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions t (CVSS 4.3, IBM StoredIQ)
- [CVE-2019-4120](https://cve.now/CVE-2019-4120.md): IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Cloud Private)
- [CVE-2019-4253](https://cve.now/CVE-2019-4253.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain (CVSS 7.8, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1796](https://cve.now/CVE-2018-1796.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. (CVSS 7.8, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1636](https://cve.now/CVE-2018-1636.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefi (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1635](https://cve.now/CVE-2018-1635.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefi (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1634](https://cve.now/CVE-2018-1634.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privile (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1633](https://cve.now/CVE-2018-1633.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privile (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1632](https://cve.now/CVE-2018-1632.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privile (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1631](https://cve.now/CVE-2018-1631.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privile (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2018-1630](https://cve.now/CVE-2018-1630.md): IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privile (CVSS 8.2, IBM Informix Dynamic Server Enterprise Edition)
- [CVE-2019-3753](https://cve.now/CVE-2019-3753.md): Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password (CVSS 7.2, Dell EMC PowerConnect)
- [CVE-2019-4485](https://cve.now/CVE-2019-4485.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1 (CVSS 4.3, IBM Contract Management · IBM Emptoris Spend Analysis +1)
- [CVE-2019-4484](https://cve.now/CVE-2019-4484.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1 (CVSS 4.3, IBM Contract Management · IBM Emptoris Spend Analysis +1)
- [CVE-2019-4483](https://cve.now/CVE-2019-4483.md): IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. (CVSS 7.6, IBM Contract Management · IBM Emptoris Spend Analysis)
- [CVE-2019-4481](https://cve.now/CVE-2019-4481.md): IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. (CVSS 7.6, IBM Emptoris Spend Analysis · IBM Contract Management)
- [CVE-2019-4460](https://cve.now/CVE-2019-4460.md): IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. (CVSS 4.3, IBM API Connect)
- [CVE-2019-4433](https://cve.now/CVE-2019-4433.md): IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity In (CVSS 7.1, IBM InfoSphere Identity Insight · IBM InfoSphere Global Nam…)
- [CVE-2019-4425](https://cve.now/CVE-2019-4425.md): IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another use (CVSS 5.7, IBM Business Automation Workflow)
- [CVE-2019-4420](https://cve.now/CVE-2019-4420.md): IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could a (CVSS 6.2, IBM Intelligent Operations Center)
- [CVE-2019-4419](https://cve.now/CVE-2019-4419.md): IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d (CVSS 7.1, IBM Intelligent Operations Center)
- [CVE-2019-4402](https://cve.now/CVE-2019-4402.md): IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected (CVSS 8.6, IBM API Connect)
- [CVE-2019-4310](https://cve.now/CVE-2019-4310.md): IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to br (CVSS 7.5, IBM Security Guardium Big Data Intelligence)
- [CVE-2019-4308](https://cve.now/CVE-2019-4308.md): IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 1 (CVSS 4.3, IBM Emptoris Sourcing · IBM Contract Management +1)
- [CVE-2019-4294](https://cve.now/CVE-2019-4294.md): IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through (CVSS 8.4, IBM MQ Appliance · IBM DataPower Gateway)
- [CVE-2019-4117](https://cve.now/CVE-2019-4117.md): IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unautho (CVSS 4.3, IBM Cloud Private)
- [CVE-2019-4049](https://cve.now/CVE-2019-4049.md): IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of (CVSS 6.2, IBM MQ)
- [CVE-2019-7594](https://cve.now/CVE-2019-7594.md): Metasys use of hardcoded RC2 key (CVSS 6.8, Johnson Controls Metasys versions prior to)
- [CVE-2019-7593](https://cve.now/CVE-2019-7593.md): Metasys use of shared RSA key pairs (CVSS 6.8, Johnson Controls Metasys versions prior to)
- [CVE-2019-10745](https://cve.now/CVE-2019-10745.md): assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. (no CVSS, assign-deep)
- [CVE-2019-3968](https://cve.now/CVE-2019-3968.md): In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface wh (no CVSS, OpenEMR)
- [CVE-2019-3967](https://cve.now/CVE-2019-3967.md): In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to (no CVSS, OpenEMR)
- [CVE-2019-3966](https://cve.now/CVE-2019-3966.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the foreign\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3965](https://cve.now/CVE-2019-3965.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the document\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3964](https://cve.now/CVE-2019-3964.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-3963](https://cve.now/CVE-2019-3963.md): In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient\_id parameter. (no CVSS, OpenEMR)
- [CVE-2019-11209](https://cve.now/CVE-2019-11209.md): TIBCO FTL Escalation Of Privileges for Realm Configuration (CVSS 8.8, TIBCO Software TIBCO FTL Community Edition · TIBCO Softw… +1)
- [CVE-2018-18056](https://cve.now/CVE-2018-18056.md): An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. (no CVSS)
- [CVE-2017-18533](https://cve.now/CVE-2017-18533.md): The rimons-twitter-widget plugin before 1.3 for WordPress has XSS. (no CVSS)
- [CVE-2017-18532](https://cve.now/CVE-2017-18532.md): The realty plugin before 1.1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18531](https://cve.now/CVE-2017-18531.md): The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288. (no CVSS)
- [CVE-2017-18530](https://cve.now/CVE-2017-18530.md): The rating-bws plugin before 0.2 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18529](https://cve.now/CVE-2017-18529.md): The promobar plugin before 1.1.1 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18528](https://cve.now/CVE-2017-18528.md): The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2015-9320](https://cve.now/CVE-2015-9320.md): The option-tree plugin before 2.5.4 for WordPress has XSS related to add\_query\_arg. (no CVSS)
- [CVE-2017-18527](https://cve.now/CVE-2017-18527.md): The pagination plugin before 1.0.7 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2016-10895](https://cve.now/CVE-2016-10895.md): The option-tree plugin before 2.6.0 for WordPress has XSS via an add\_list\_item or add\_social\_links AJAX request. (no CVSS)
- [CVE-2017-18526](https://cve.now/CVE-2017-18526.md): The moreads-se plugin before 1.4.7 for WordPress has XSS. (no CVSS)
- [CVE-2015-9319](https://cve.now/CVE-2015-9319.md): The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser. (no CVSS)
- [CVE-2017-18524](https://cve.now/CVE-2017-18524.md): The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18519](https://cve.now/CVE-2017-18519.md): The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages. (no CVSS)
- [CVE-2017-18523](https://cve.now/CVE-2017-18523.md): The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book. (no CVSS)
- [CVE-2017-18522](https://cve.now/CVE-2017-18522.md): The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book. (no CVSS)
- [CVE-2016-10892](https://cve.now/CVE-2016-10892.md): The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18566](https://cve.now/CVE-2017-18566.md): The user-role plugin before 1.5.6 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18518](https://cve.now/CVE-2017-18518.md): The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2018-20978](https://cve.now/CVE-2018-20978.md): The wp-all-import plugin before 3.4.7 for WordPress has XSS. (no CVSS)
- [CVE-2017-18567](https://cve.now/CVE-2017-18567.md): The wp-all-import plugin before 3.4.6 for WordPress has XSS. (no CVSS)
- [CVE-2015-9329](https://cve.now/CVE-2015-9329.md): The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. (no CVSS)
- [CVE-2015-9330](https://cve.now/CVE-2015-9330.md): The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection. (no CVSS)
- [CVE-2015-9331](https://cve.now/CVE-2015-9331.md): The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit. (no CVSS)
- [CVE-2016-10913](https://cve.now/CVE-2016-10913.md): The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. (no CVSS)
- [CVE-2016-10914](https://cve.now/CVE-2016-10914.md): The add-from-server plugin before 3.3.2 for WordPress has CSRF for importing a large file. (no CVSS)
- [CVE-2019-15238](https://cve.now/CVE-2019-15238.md): The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. (no CVSS)
- [CVE-2017-18568](https://cve.now/CVE-2017-18568.md): The my-wp-translate plugin before 1.0.4 for WordPress has XSS. (no CVSS)
- [CVE-2017-18569](https://cve.now/CVE-2017-18569.md): The my-wp-translate plugin before 1.0.4 for WordPress has CSRF. (no CVSS)
- [CVE-2016-10915](https://cve.now/CVE-2016-10915.md): The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18520](https://cve.now/CVE-2017-18520.md): The democracy-poll plugin before 5.4 for WordPress has XSS via update\_l10n in admin/class.DemAdminInit.php. (no CVSS)
- [CVE-2015-9332](https://cve.now/CVE-2015-9332.md): The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI. (no CVSS)
- [CVE-2011-5328](https://cve.now/CVE-2011-5328.md): The user-access-manager plugin before 1.2 for WordPress has CSRF. (no CVSS)
- [CVE-2014-10381](https://cve.now/CVE-2014-10381.md): The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. (no CVSS)
- [CVE-2015-9318](https://cve.now/CVE-2015-9318.md): The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies. (no CVSS)
- [CVE-2017-18517](https://cve.now/CVE-2017-18517.md): The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2015-9317](https://cve.now/CVE-2015-9317.md): The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. (no CVSS)
- [CVE-2019-14687](https://cve.now/CVE-2019-14687.md): A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrar (no CVSS, Trend Micro Password Manager)
- [CVE-2019-14684](https://cve.now/CVE-2019-14684.md): A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrar (no CVSS, Trend Micro Password Manager)
- [CVE-2019-15082](https://cve.now/CVE-2019-15082.md): The 360-product-rotation plugin before 1.4.8 for WordPress has reflected XSS. (no CVSS)
- [CVE-2019-15233](https://cve.now/CVE-2019-15233.md): The Live:Text Box macro in the Old Street Live Input Macros app before 2.11 for Confluence has XSS, leading to theft of the Administrator Se (no CVSS)
- [CVE-2019-14430](https://cve.now/CVE-2019-14430.md): plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection. (no CVSS)
- [CVE-2019-15291](https://cve.now/CVE-2019-15291.md): An issue was discovered in the Linux kernel through 5.2.9. (no CVSS)
- [CVE-2019-11806](https://cve.now/CVE-2019-11806.md): OX App Suite 7.10.1 and earlier has Insecure Permissions. (no CVSS)
- [CVE-2019-11522](https://cve.now/CVE-2019-11522.md): OX App Suite 7.10.0 to 7.10.2 allows XSS. (no CVSS)
- [CVE-2019-11521](https://cve.now/CVE-2019-11521.md): OX App Suite 7.10.1 allows Content Spoofing. (no CVSS)
- [CVE-2018-20975](https://cve.now/CVE-2018-20975.md): Fat Free CRM before 0.18.1 has XSS in the tags\_helper in app/helpers/tags\_helper.rb. (no CVSS, fat\_free\_crm)
- [CVE-2019-12889](https://cve.now/CVE-2019-12889.md): An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. (no CVSS)
- [CVE-2019-15239](https://cve.now/CVE-2019-15239.md): In the Linux kernel, a certain net/ipv4/tcp\_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the (no CVSS)
- [CVE-2019-15227](https://cve.now/CVE-2019-15227.md): FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. (no CVSS)
- [CVE-2019-15237](https://cve.now/CVE-2019-15237.md): Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks. (no CVSS)
- [CVE-2016-10893](https://cve.now/CVE-2016-10893.md): The crayon-syntax-highlighter plugin before 2.8.4 for WordPress has multiple XSS issues via AJAX requests. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.