# CVEs published 2019-08-26

121 CVEs were published on August 26, 2019: 2 critical, 7 high. Days are UTC.

- [CVE-2019-15657](https://cve.now/CVE-2019-15657.md): In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code. (no CVSS, eslint-utils)
- [CVE-2019-15658](https://cve.now/CVE-2019-15658.md): connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data. (no CVSS, connect-pg-simple)
- [CVE-2019-15651](https://cve.now/CVE-2019-15651.md): wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN\_BOOLEAN byte (no CVSS)
- [CVE-2019-15497](https://cve.now/CVE-2019-15497.md): Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that (no CVSS)
- [CVE-2019-15055](https://cve.now/CVE-2019-15055.md): MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbi (no CVSS)
- [CVE-2018-18668](https://cve.now/CVE-2018-18668.md): GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka (no CVSS)
- [CVE-2019-9569](https://cve.now/CVE-2019-9569.md): Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40\_B-571848 allows remote unauthenticated users to execute arbitrary code (no CVSS)
- [CVE-2019-8460](https://cve.now/CVE-2019-8460.md): OpenBSD kernel version \<= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp\_sack\_option() fo (no CVSS, OpenBSD)
- [CVE-2019-8000](https://cve.now/CVE-2019-8000.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-8001](https://cve.now/CVE-2019-8001.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7999](https://cve.now/CVE-2019-7999.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7998](https://cve.now/CVE-2019-7998.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7997](https://cve.now/CVE-2019-7997.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7996](https://cve.now/CVE-2019-7996.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7994](https://cve.now/CVE-2019-7994.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7995](https://cve.now/CVE-2019-7995.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7993](https://cve.now/CVE-2019-7993.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7992](https://cve.now/CVE-2019-7992.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7989](https://cve.now/CVE-2019-7989.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7990](https://cve.now/CVE-2019-7990.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7991](https://cve.now/CVE-2019-7991.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7988](https://cve.now/CVE-2019-7988.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7987](https://cve.now/CVE-2019-7987.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7986](https://cve.now/CVE-2019-7986.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7985](https://cve.now/CVE-2019-7985.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7984](https://cve.now/CVE-2019-7984.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7982](https://cve.now/CVE-2019-7982.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7983](https://cve.now/CVE-2019-7983.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7981](https://cve.now/CVE-2019-7981.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7980](https://cve.now/CVE-2019-7980.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7975](https://cve.now/CVE-2019-7975.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7978](https://cve.now/CVE-2019-7978.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7979](https://cve.now/CVE-2019-7979.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7977](https://cve.now/CVE-2019-7977.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7976](https://cve.now/CVE-2019-7976.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7974](https://cve.now/CVE-2019-7974.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7973](https://cve.now/CVE-2019-7973.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7969](https://cve.now/CVE-2019-7969.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7972](https://cve.now/CVE-2019-7972.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7970](https://cve.now/CVE-2019-7970.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7971](https://cve.now/CVE-2019-7971.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-7968](https://cve.now/CVE-2019-7968.md): Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection vulnerability. (no CVSS, Adobe Photoshop CC)
- [CVE-2019-15503](https://cve.now/CVE-2019-15503.md): cgi-cpn/xcoding/prontus\_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements u (no CVSS)
- [CVE-2019-15515](https://cve.now/CVE-2019-15515.md): Discourse 2.3.2 sends the CSRF token in the query string. (no CVSS)
- [CVE-2019-15533](https://cve.now/CVE-2019-15533.md): XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php. (no CVSS)
- [CVE-2017-18588](https://cve.now/CVE-2017-18588.md): An issue was discovered in the security-framework crate before 0.1.12 for Rust. (no CVSS, security-framework)
- [CVE-2018-20989](https://cve.now/CVE-2018-20989.md): An issue was discovered in the untrusted crate before 0.6.2 for Rust. (no CVSS, untrusted)
- [CVE-2017-18589](https://cve.now/CVE-2017-18589.md): An issue was discovered in the cookie crate before 0.7.6 for Rust. (no CVSS, cookie)
- [CVE-2018-20995](https://cve.now/CVE-2018-20995.md): An issue was discovered in the slice-deque crate before 0.1.16 for Rust. (no CVSS, slice-deque)
- [CVE-2018-20996](https://cve.now/CVE-2018-20996.md): An issue was discovered in the crossbeam crate before 0.4.1 for Rust. (no CVSS, crossbeam)
- [CVE-2018-20997](https://cve.now/CVE-2018-20997.md): An issue was discovered in the openssl crate before 0.10.9 for Rust. (no CVSS, openssl)
- [CVE-2019-13020](https://cve.now/CVE-2019-13020.md): The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. (no CVSS)
- [CVE-2018-20998](https://cve.now/CVE-2018-20998.md): An issue was discovered in the arrayfire crate before 3.6.0 for Rust. (no CVSS, arrayfire)
- [CVE-2019-15542](https://cve.now/CVE-2019-15542.md): An issue was discovered in the ammonia crate before 2.1.0 for Rust. (no CVSS, ammonia)
- [CVE-2019-15543](https://cve.now/CVE-2019-15543.md): An issue was discovered in the slice-deque crate before 0.2.0 for Rust. (no CVSS, slice-deque)
- [CVE-2019-15544](https://cve.now/CVE-2019-15544.md): An issue was discovered in the protobuf crate before 2.6.0 for Rust. (no CVSS, protobuf)
- [CVE-2019-15545](https://cve.now/CVE-2019-15545.md): An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. (no CVSS, libp2p-core)
- [CVE-2019-15642](https://cve.now/CVE-2019-15642.md): rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise\_variable makes an e (no CVSS)
- [CVE-2019-15641](https://cve.now/CVE-2019-15641.md): xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. (no CVSS)
- [CVE-2019-15546](https://cve.now/CVE-2019-15546.md): An issue was discovered in the pancurses crate through 0.16.1 for Rust. (no CVSS, pancurses)
- [CVE-2019-12532](https://cve.now/CVE-2019-12532.md): Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or infor (no CVSS)
- [CVE-2019-15547](https://cve.now/CVE-2019-15547.md): An issue was discovered in the ncurses crate through 5.99.0 for Rust. (no CVSS, ncurses)
- [CVE-2019-15548](https://cve.now/CVE-2019-15548.md): An issue was discovered in the ncurses crate through 5.99.0 for Rust. (no CVSS, ncurses)
- [CVE-2019-15549](https://cve.now/CVE-2019-15549.md): An issue was discovered in the asn1\_der crate before 0.6.2 for Rust. (no CVSS, asn1\_der)
- [CVE-2019-15640](https://cve.now/CVE-2019-15640.md): Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image. (no CVSS)
- [CVE-2019-15555](https://cve.now/CVE-2019-15555.md): FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and serv (no CVSS)
- [CVE-2019-15557](https://cve.now/CVE-2019-15557.md): XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key. (no CVSS)
- [CVE-2019-15558](https://cve.now/CVE-2019-15558.md): XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResol (no CVSS)
- [CVE-2019-15637](https://cve.now/CVE-2019-15637.md): Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a (CVSS 7.1)
- [CVE-2019-15559](https://cve.now/CVE-2019-15559.md): DianoxDragon Hawn before 2019-07-10 allows SQL injection. (no CVSS)
- [CVE-2019-15560](https://cve.now/CVE-2019-15560.md): The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js. (no CVSS)
- [CVE-2019-15563](https://cve.now/CVE-2019-15563.md): Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java. (no CVSS, org.ohdsi:WebAPI)
- [CVE-2019-15564](https://cve.now/CVE-2019-15564.md): The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner\_compassion.py. (no CVSS)
- [CVE-2019-15565](https://cve.now/CVE-2019-15565.md): The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php. (no CVSS)
- [CVE-2019-15552](https://cve.now/CVE-2019-15552.md): An issue was discovered in the libflate crate before 0.1.25 for Rust. (no CVSS, libflate)
- [CVE-2019-4513](https://cve.now/CVE-2019-4513.md): IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processi (CVSS 8.2, IBM Security Access Manager for Enterprise Single Sign-On)
- [CVE-2019-4448](https://cve.now/CVE-2019-4448.md): IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum\_debug bina (CVSS 8.4, IBM DB2 High Performance Unload load for LUW)
- [CVE-2019-4447](https://cve.now/CVE-2019-4447.md): IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum\_debug is a setuid root (CVSS 8.4, IBM DB2 High Performance Unload load for LUW)
- [CVE-2019-4169](https://cve.now/CVE-2019-4169.md): IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was change (CVSS 8.1, IBM P9 OpenPOWER)
- [CVE-2019-15551](https://cve.now/CVE-2019-15551.md): An issue was discovered in the smallvec crate before 0.6.10 for Rust. (no CVSS, smallvec)
- [CVE-2019-15566](https://cve.now/CVE-2019-15566.md): The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java. (no CVSS)
- [CVE-2019-15554](https://cve.now/CVE-2019-15554.md): An issue was discovered in the smallvec crate before 0.6.10 for Rust. (no CVSS, smallvec)
- [CVE-2019-15567](https://cve.now/CVE-2019-15567.md): OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature. (no CVSS)
- [CVE-2019-15553](https://cve.now/CVE-2019-15553.md): An issue was discovered in the memoffset crate before 0.5.0 for Rust. (no CVSS, memoffset)
- [CVE-2019-15568](https://cve.now/CVE-2019-15568.md): idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax\_levels. (no CVSS)
- [CVE-2019-15550](https://cve.now/CVE-2019-15550.md): An issue was discovered in the simd-json crate before 0.1.15 for Rust. (no CVSS, simd-json)
- [CVE-2019-15569](https://cve.now/CVE-2019-15569.md): HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirecti (no CVSS)
- [CVE-2018-21000](https://cve.now/CVE-2018-21000.md): An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. (no CVSS, safe-transmute)
- [CVE-2019-15570](https://cve.now/CVE-2019-15570.md): BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters. (no CVSS, bedita/bedita)
- [CVE-2019-15571](https://cve.now/CVE-2019-15571.md): The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php. (no CVSS)
- [CVE-2018-20999](https://cve.now/CVE-2018-20999.md): An issue was discovered in the orion crate before 0.11.2 for Rust. (no CVSS, orion)
- [CVE-2019-15572](https://cve.now/CVE-2019-15572.md): Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php. (no CVSS)
- [CVE-2019-15573](https://cve.now/CVE-2019-15573.md): Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php. (no CVSS)
- [CVE-2018-20991](https://cve.now/CVE-2018-20991.md): An issue was discovered in the smallvec crate before 0.6.3 for Rust. (no CVSS, smallvec)
- [CVE-2019-15574](https://cve.now/CVE-2019-15574.md): Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php. (no CVSS)
- [CVE-2019-14300](https://cve.now/CVE-2019-14300.md): Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or c (CVSS 9.8)
- [CVE-2019-14305](https://cve.now/CVE-2019-14305.md): Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, (CVSS 8.8)
- [CVE-2019-14307](https://cve.now/CVE-2019-14307.md): Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of (CVSS 8.8)
- [CVE-2019-15479](https://cve.now/CVE-2019-15479.md): Status Board 1.1.81 has reflected XSS via dashboard.ts. (no CVSS, status-board)
- [CVE-2019-15501](https://cve.now/CVE-2019-15501.md): Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter. (no CVSS)
- [CVE-2019-14308](https://cve.now/CVE-2019-14308.md): Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code exec (CVSS 9.8)
- [CVE-2019-15524](https://cve.now/CVE-2019-15524.md): CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads t (no CVSS)
- [CVE-2018-20990](https://cve.now/CVE-2018-20990.md): An issue was discovered in the tar crate before 0.4.16 for Rust. (no CVSS, tar)
- [CVE-2019-15304](https://cve.now/CVE-2019-15304.md): Lierda Grill Temperature Monitor V1.00\_50006 has a default password of admin for the admin account, which allows an attacker to cause a Deni (no CVSS)
- [CVE-2018-20994](https://cve.now/CVE-2018-20994.md): An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. (no CVSS, trust-dns-proto)
- [CVE-2018-20993](https://cve.now/CVE-2018-20993.md): An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. (no CVSS, yaml-rust)
- [CVE-2018-20992](https://cve.now/CVE-2018-20992.md): An issue was discovered in the claxon crate before 0.4.1 for Rust. (no CVSS, claxon)
- [CVE-2019-15561](https://cve.now/CVE-2019-15561.md): FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js. (no CVSS)
- [CVE-2019-15562](https://cve.now/CVE-2019-15562.md): GORM before 1.9.10 allows SQL injection via incomplete parentheses. (no CVSS)
- [CVE-2019-15556](https://cve.now/CVE-2019-15556.md): Pvanloon1983 social\_network before 2019-07-03 allows SQL injection in includes/form\_handlers/register\_handler.php. (no CVSS)
- [CVE-2019-15521](https://cve.now/CVE-2019-15521.md): Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing a (no CVSS, spoon/library)
- [CVE-2017-18587](https://cve.now/CVE-2017-18587.md): An issue was discovered in the hyper crate before 0.9.18 for Rust. (no CVSS, hyper)
- [CVE-2016-10933](https://cve.now/CVE-2016-10933.md): An issue was discovered in the portaudio crate through 0.7.0 for Rust. (no CVSS, portaudio)
- [CVE-2016-10932](https://cve.now/CVE-2016-10932.md): An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. (no CVSS, hyper)
- [CVE-2016-10931](https://cve.now/CVE-2016-10931.md): An issue was discovered in the openssl crate before 0.9.0 for Rust. (no CVSS, openssl)
- [CVE-2019-15489](https://cve.now/CVE-2019-15489.md): laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS. (no CVSS, jsdecena/laracom)
- [CVE-2019-15541](https://cve.now/CVE-2019-15541.md): rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn\_even (no CVSS)
- [CVE-2019-15534](https://cve.now/CVE-2019-15534.md): Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update. (no CVSS)
- [CVE-2019-15532](https://cve.now/CVE-2019-15532.md): CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs. (no CVSS, cyberchef)
- [CVE-2019-15478](https://cve.now/CVE-2019-15478.md): Status Board 1.1.81 has reflected XSS via logic.ts. (no CVSS, status-board)
- [CVE-2019-15506](https://cve.now/CVE-2019-15506.md): An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.