# CVEs published 2019-08-23

75 CVEs were published on August 23, 2019: 1 critical, 1 high. Days are UTC.

- [CVE-2016-6154](https://cve.now/CVE-2016-6154.md): The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect). (no CVSS)
- [CVE-2019-15092](https://cve.now/CVE-2019-15092.md): The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user\_url, displ (no CVSS)
- [CVE-2019-12400](https://cve.now/CVE-2019-12400.md): In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a s (no CVSS, Apache Santuario - XML Security for Java · org.apache.santu…)
- [CVE-2019-5594](https://cve.now/CVE-2019-5594.md): An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin (no CVSS, Fortinet FortiNAC)
- [CVE-2019-6695](https://cve.now/CVE-2019-6695.md): Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker t (no CVSS, Fortinet FortiManager)
- [CVE-2018-13367](https://cve.now/CVE-2018-13367.md): An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information s (no CVSS, Fortinet FortiOS)
- [CVE-2019-6698](https://cve.now/CVE-2019-6698.md): Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge o (no CVSS, Fortinet FortiRecorder)
- [CVE-2019-5592](https://cve.now/CVE-2019-5592.md): Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS eng (no CVSS, Fortinet IPS Engine)
- [CVE-2019-7364](https://cve.now/CVE-2019-7364.md): DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Archi (no CVSS, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…)
- [CVE-2019-7363](https://cve.now/CVE-2019-7363.md): Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. (no CVSS, Autodesk Design Review)
- [CVE-2019-7362](https://cve.now/CVE-2019-7362.md): DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. (no CVSS, Autodesk Design Review)
- [CVE-2019-15536](https://cve.now/CVE-2019-15536.md): The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete\_records. (no CVSS)
- [CVE-2019-15537](https://cve.now/CVE-2019-15537.md): The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php. (no CVSS, cesnet/simplesamlphp-module-proxystatistics)
- [CVE-2019-15535](https://cve.now/CVE-2019-15535.md): Tasking Manager before 3.4.0 allows SQL Injection via custom SQL. (no CVSS)
- [CVE-2019-11654](https://cve.now/CVE-2019-11654.md): A path traversal vulnerability has been identified in Verastream Host Integrator (CVSS 8.6, Micro Focus Verastream Host Integrator)
- [CVE-2019-1583](https://cve.now/CVE-2019-1583.md): Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operato (no CVSS, Palo Alto Networks Twistlock)
- [CVE-2019-1582](https://cve.now/CVE-2019-1582.md): Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corr (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2019-1581](https://cve.now/CVE-2019-1581.md): PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface (CVSS 9.8, Palo Alto Networks PAN-OS)
- [CVE-2019-1580](https://cve.now/CVE-2019-1580.md): Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2019-13013](https://cve.now/CVE-2019-13013.md): Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. (no CVSS, Little Snitch)
- [CVE-2019-13014](https://cve.now/CVE-2019-13014.md): Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. (no CVSS, Little Snitch)
- [CVE-2019-10750](https://cve.now/CVE-2019-10750.md): deeply is vulnerable to Prototype Pollution in versions before 3.1.0. (no CVSS, deeply)
- [CVE-2019-10747](https://cve.now/CVE-2019-10747.md): set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. (no CVSS, set-value)
- [CVE-2019-10746](https://cve.now/CVE-2019-10746.md): mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. (no CVSS, mixin-deep)
- [CVE-2019-10751](https://cve.now/CVE-2019-10751.md): All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file (no CVSS, HTTPIE)
- [CVE-2019-15526](https://cve.now/CVE-2019-15526.md): An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2019-15527](https://cve.now/CVE-2019-15527.md): An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2019-15528](https://cve.now/CVE-2019-15528.md): An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2019-15529](https://cve.now/CVE-2019-15529.md): An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2019-15530](https://cve.now/CVE-2019-15530.md): An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. (no CVSS)
- [CVE-2019-15531](https://cve.now/CVE-2019-15531.md): GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR\_dvi\_extract\_method in plugins/dvi\_extractor.c. (no CVSS)
- [CVE-2019-15525](https://cve.now/CVE-2019-15525.md): There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1. (no CVSS)
- [CVE-2019-15520](https://cve.now/CVE-2019-15520.md): comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. (no CVSS)
- [CVE-2019-15517](https://cve.now/CVE-2019-15517.md): jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. (no CVSS)
- [CVE-2019-15518](https://cve.now/CVE-2019-15518.md): Swoole before 4.2.13 allows directory traversal in swPort\_http\_static\_handler. (no CVSS)
- [CVE-2019-15519](https://cve.now/CVE-2019-15519.md): Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. (no CVSS)
- [CVE-2019-15516](https://cve.now/CVE-2019-15516.md): Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. (no CVSS)
- [CVE-2019-8447](https://cve.now/CVE-2019-8447.md): The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site r (no CVSS, Atlassian Jira)
- [CVE-2019-8446](https://cve.now/CVE-2019-8446.md): The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect author (no CVSS, Atlassian Jira)
- [CVE-2019-8445](https://cve.now/CVE-2019-8445.md): Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view wor (no CVSS, Atlassian Jira)
- [CVE-2019-8444](https://cve.now/CVE-2019-8444.md): The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbi (no CVSS, Atlassian Jira)
- [CVE-2019-14999](https://cve.now/CVE-2019-14999.md): The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from v (no CVSS, Atlassian Universal Plugin Manager)
- [CVE-2019-11589](https://cve.now/CVE-2019-11589.md): The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before v (no CVSS, Atlassian Jira)
- [CVE-2019-11588](https://cve.now/CVE-2019-11588.md): The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version (no CVSS, Atlassian Jira)
- [CVE-2019-11587](https://cve.now/CVE-2019-11587.md): Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version (no CVSS, Atlassian Jira)
- [CVE-2019-11586](https://cve.now/CVE-2019-11586.md): The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before versio (no CVSS, Atlassian Jira)
- [CVE-2019-11585](https://cve.now/CVE-2019-11585.md): The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 (no CVSS, Atlassian Jira)
- [CVE-2019-11584](https://cve.now/CVE-2019-11584.md): The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross s (no CVSS, Atlassian Jira)
- [CVE-2019-13422](https://cve.now/CVE-2019-13422.md): Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially (no CVSS, floragunn Search Guard Kibana Plugin)
- [CVE-2019-13423](https://cve.now/CVE-2019-13423.md): Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as k (no CVSS, floragunn Search Guard Kibana Plugin)
- [CVE-2019-13421](https://cve.now/CVE-2019-13421.md): Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configu (no CVSS, floragunn Search Guard)
- [CVE-2019-15482](https://cve.now/CVE-2019-15482.md): selectize-plugin-a11y before 1.1.0 has XSS via the msg field. (no CVSS, selectize-plugin-a11y)
- [CVE-2019-15494](https://cve.now/CVE-2019-15494.md): openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. (no CVSS)
- [CVE-2019-15493](https://cve.now/CVE-2019-15493.md): openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. (no CVSS)
- [CVE-2019-15492](https://cve.now/CVE-2019-15492.md): openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. (no CVSS)
- [CVE-2019-15491](https://cve.now/CVE-2019-15491.md): openITCOCKPIT before 3.7.1 has CSRF, aka RVID 2-445b21. (no CVSS)
- [CVE-2019-15490](https://cve.now/CVE-2019-15490.md): openITCOCKPIT before 3.7.1 allows code injection, aka RVID 1-445b21. (no CVSS)
- [CVE-2019-15488](https://cve.now/CVE-2019-15488.md): Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test. (no CVSS, org.igniterealtime.openfire:xmppserver)
- [CVE-2019-15487](https://cve.now/CVE-2019-15487.md): DfE School Experience before v16333-GA has XSS via a teacher training URL. (no CVSS)
- [CVE-2019-15486](https://cve.now/CVE-2019-15486.md): django-js-reverse (aka Django JS Reverse) before 0.9.1 has XSS via js\_reverse\_inline. (no CVSS, django-js-reverse)
- [CVE-2019-15485](https://cve.now/CVE-2019-15485.md): Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. (no CVSS, bolt/bolt)
- [CVE-2019-15484](https://cve.now/CVE-2019-15484.md): Bolt before 3.6.10 has XSS via an image's alt or title field. (no CVSS, bolt/bolt)
- [CVE-2019-15483](https://cve.now/CVE-2019-15483.md): Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. (no CVSS, bolt/bolt)
- [CVE-2019-15481](https://cve.now/CVE-2019-15481.md): Kimai v2 before 1.1 has XSS via a timesheet description. (no CVSS, kevinpapst/kimai2)
- [CVE-2019-15480](https://cve.now/CVE-2019-15480.md): Domoticz 4.10717 has XSS via item.Name. (no CVSS)
- [CVE-2019-15477](https://cve.now/CVE-2019-15477.md): Jooby before 1.6.4 has XSS via the default error handler. (no CVSS, org.jooby:jooby)
- [CVE-2019-15476](https://cve.now/CVE-2019-15476.md): Former before 4.2.1 has XSS via a checkbox value. (no CVSS)
- [CVE-2019-15514](https://cve.now/CVE-2019-15514.md): The Privacy \> Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is No (no CVSS)
- [CVE-2019-15513](https://cve.now/CVE-2019-15513.md): An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR0 (no CVSS)
- [CVE-2019-15507](https://cve.now/CVE-2019-15507.md): In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-c (no CVSS)
- [CVE-2019-15508](https://cve.now/CVE-2019-15508.md): In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintV (no CVSS)
- [CVE-2019-15505](https://cve.now/CVE-2019-15505.md): drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which (no CVSS)
- [CVE-2019-15504](https://cve.now/CVE-2019-15504.md): drivers/net/wireless/rsi/rsi\_91x\_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remo (no CVSS)
- [CVE-2019-15499](https://cve.now/CVE-2019-15499.md): CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with (no CVSS)
- [CVE-2019-15498](https://cve.now/CVE-2019-15498.md): cgi-bin/cmh/webcam.sh in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via --outpu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.