# CVEs published 2019-08-29

97 CVEs were published on August 29, 2019: 2 critical, 4 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-13526](https://cve.now/CVE-2019-13526.md): Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to (no CVSS, Datalogic AV7000 Linear barcode scanner)
- [CVE-2019-9697](https://cve.now/CVE-2019-9697.md): An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authent (no CVSS, Symantec Management Center)
- [CVE-2019-12753](https://cve.now/CVE-2019-12753.md): An information disclosure vulnerability in Symantec Reporter web UI 10.3 prior to 10.3.2.5 allows a malicious authenticated administrator us (no CVSS, Symantec Reporter)
- [CVE-2019-5612](https://cve.now/CVE-2019-5612.md): In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3 (no CVSS, FreeBSD)
- [CVE-2019-12754](https://cve.now/CVE-2019-12754.md): Symantec My VIP portal, previous version which has already been auto updated, was susceptible to a cross-site scripting (XSS) exploit, which (no CVSS, Symantec My VIP Portal)
- [CVE-2019-11658](https://cve.now/CVE-2019-11658.md): Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. (no CVSS, Micro Focus Content Manager)
- [CVE-2018-18371](https://cve.now/CVE-2018-18371.md): The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web brow (no CVSS, Symantec Advanced Secure Gateway · Symantec ProxySG)
- [CVE-2018-18370](https://cve.now/CVE-2018-18370.md): The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web brow (no CVSS, Symantec Advanced Secure Gateway · Symantec ProxySG)
- [CVE-2019-5609](https://cve.now/CVE-2019-5609.md): In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, (no CVSS, FreeBSD)
- [CVE-2019-5608](https://cve.now/CVE-2019-5608.md): In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, (no CVSS, FreeBSD)
- [CVE-2019-1968](https://cve.now/CVE-2019-1968.md): Cisco NX-OS Software NX-API Denial of Service Vulnerability (CVSS 5.3, Cisco NX-OS Software 6.0(2)A4)
- [CVE-2019-1969](https://cve.now/CVE-2019-1969.md): Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability (CVSS 5.8, Cisco NX-OS Software)
- [CVE-2019-1977](https://cve.now/CVE-2019-1977.md): Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability (CVSS 6.8, Cisco Nexus 9000 Series Fabric Switches in ACI)
- [CVE-2019-1966](https://cve.now/CVE-2019-1966.md): Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability (CVSS 7.8, Cisco Unified Computing System)
- [CVE-2019-1967](https://cve.now/CVE-2019-1967.md): Cisco NX-OS Software Network Time Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco NX-OS Software)
- [CVE-2019-5611](https://cve.now/CVE-2019-5611.md): In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3 (no CVSS, FreeBSD)
- [CVE-2019-5610](https://cve.now/CVE-2019-5610.md): In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, (no CVSS, FreeBSD)
- [CVE-2018-15511](https://cve.now/CVE-2018-15511.md): Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inj (no CVSS)
- [CVE-2018-15510](https://cve.now/CVE-2018-15510.md): Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2018-15513](https://cve.now/CVE-2018-15513.md): Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor ro (no CVSS)
- [CVE-2018-15512](https://cve.now/CVE-2018-15512.md): Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inj (no CVSS)
- [CVE-2019-6113](https://cve.now/CVE-2019-6113.md): Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2019-8461](https://cve.now/CVE-2019-8461.md): Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean im (no CVSS, Check Point Endpoint Security Initial Client for Windows)
- [CVE-2019-11364](https://cve.now/CVE-2019-11364.md): An OS Command Injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to inject arbitrary OS commands vi (no CVSS)
- [CVE-2019-11363](https://cve.now/CVE-2019-11363.md): A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2019-11396](https://cve.now/CVE-2019-11396.md): An issue was discovered in Avira Free Security Suite 10. (no CVSS)
- [CVE-2019-15811](https://cve.now/CVE-2019-15811.md): In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. (no CVSS)
- [CVE-2019-14970](https://cve.now/CVE-2019-14970.md): A vulnerability in mkv::event\_thread\_t in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow (no CVSS)
- [CVE-2019-14777](https://cve.now/CVE-2019-14777.md): The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. (no CVSS)
- [CVE-2019-14778](https://cve.now/CVE-2019-14778.md): The mkv::virtual\_segment\_c::seek method of demux/mkv/virtual\_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. (no CVSS)
- [CVE-2019-14776](https://cve.now/CVE-2019-14776.md): A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file. (no CVSS)
- [CVE-2019-14533](https://cve.now/CVE-2019-14533.md): The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. (no CVSS)
- [CVE-2019-14534](https://cve.now/CVE-2019-14534.md): In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a (no CVSS)
- [CVE-2019-13608](https://cve.now/CVE-2019-13608.md): Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. (CVSS 7.5, KEV)
- [CVE-2019-14979](https://cve.now/CVE-2019-14979.md): cgi-bin/webscr?cmd=\_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.17 for WordPress allows Parameter Tampering in an amo (no CVSS)
- [CVE-2019-14978](https://cve.now/CVE-2019-14978.md): /payu/icpcheckout/ in the WooCommerce PayU India Payment Gateway plugin 2.1.1 for WordPress allows Parameter Tampering in the purchaseQuanti (no CVSS)
- [CVE-2019-14535](https://cve.now/CVE-2019-14535.md): A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. (no CVSS)
- [CVE-2019-14498](https://cve.now/CVE-2019-14498.md): A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. (no CVSS)
- [CVE-2019-14438](https://cve.now/CVE-2019-14438.md): A heap-based buffer over-read in xiph\_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to (no CVSS)
- [CVE-2019-15807](https://cve.now/CVE-2019-15807.md): In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas\_expander.c when SAS expander discovery fails. (no CVSS)
- [CVE-2019-14437](https://cve.now/CVE-2019-14437.md): The xiph\_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. (no CVSS)
- [CVE-2019-15805](https://cve.now/CVE-2019-15805.md): CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative inter (no CVSS)
- [CVE-2019-15806](https://cve.now/CVE-2019-15806.md): CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative inter (no CVSS)
- [CVE-2019-15717](https://cve.now/CVE-2019-15717.md): Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP. (no CVSS)
- [CVE-2019-15502](https://cve.now/CVE-2019-15502.md): The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode (no CVSS)
- [CVE-2019-4536](https://cve.now/CVE-2019-4536.md): IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user (CVSS 6.7, IBM i)
- [CVE-2019-4133](https://cve.now/CVE-2019-4133.md): IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to run a custom script. (CVSS 5.0, IBM Cloud Automation Manager)
- [CVE-2019-4132](https://cve.now/CVE-2019-4132.md): IBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain sensitive information rather than receive a 40 (CVSS 4.0, IBM Cloud Automation Manager)
- [CVE-2019-7307](https://cve.now/CVE-2019-7307.md): Apport contains a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml (CVSS 6.5, Ubuntu apport)
- [CVE-2019-11476](https://cve.now/CVE-2019-11476.md): Integer overflow in whoopsie results in out-of-bounds heap write (CVSS 6.5, Ubuntu Whoopsie)
- [CVE-2019-3394](https://cve.now/CVE-2019-3394.md): There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. (no CVSS, Atlassian Confluence Server)
- [CVE-2019-11500](https://cve.now/CVE-2019-11500.md): In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. (no CVSS)
- [CVE-2019-15745](https://cve.now/CVE-2019-15745.md): The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the (no CVSS)
- [CVE-2019-15785](https://cve.now/CVE-2019-15785.md): FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI\_LoadPrefs in prefs.c. (no CVSS)
- [CVE-2019-15786](https://cve.now/CVE-2019-15786.md): ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket. (no CVSS)
- [CVE-2019-15771](https://cve.now/CVE-2019-15771.md): The nd-shortcodes plugin before 6.0 for WordPress has a nopriv\_ AJAX action that allows modification of the siteurl setting. (no CVSS)
- [CVE-2019-15778](https://cve.now/CVE-2019-15778.md): The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS. (no CVSS)
- [CVE-2019-15779](https://cve.now/CVE-2019-15779.md): The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg\_dismiss\_notice or qligg\_form\_item\_delete. (no CVSS)
- [CVE-2019-15781](https://cve.now/CVE-2019-15781.md): The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF. (no CVSS)
- [CVE-2019-15784](https://cve.now/CVE-2019-15784.md): Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections. (no CVSS)
- [CVE-2019-15788](https://cve.now/CVE-2019-15788.md): Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate\_block.cpp. (no CVSS)
- [CVE-2019-14943](https://cve.now/CVE-2019-14943.md): An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. (no CVSS)
- [CVE-2019-15780](https://cve.now/CVE-2019-15780.md): The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. (no CVSS)
- [CVE-2019-15777](https://cve.now/CVE-2019-15777.md): The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin\_email= XSS. (no CVSS)
- [CVE-2019-15776](https://cve.now/CVE-2019-15776.md): The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a C (no CVSS)
- [CVE-2019-15774](https://cve.now/CVE-2019-15774.md): The nd-booking plugin before 2.5 for WordPress has a nopriv\_ AJAX action that allows modification of the siteurl setting. (no CVSS)
- [CVE-2019-15775](https://cve.now/CVE-2019-15775.md): The nd-learning plugin before 4.8 for WordPress has a nopriv\_ AJAX action that allows modification of the siteurl setting. (no CVSS)
- [CVE-2019-15773](https://cve.now/CVE-2019-15773.md): The nd-travel plugin before 1.7 for WordPress has a nopriv\_ AJAX action that allows modification of the siteurl setting. (no CVSS)
- [CVE-2019-15772](https://cve.now/CVE-2019-15772.md): The nd-donations plugin before 1.4 for WordPress has a nopriv\_ AJAX action that allows modification of the siteurl setting. (no CVSS)
- [CVE-2019-15770](https://cve.now/CVE-2019-15770.md): The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks. (no CVSS)
- [CVE-2019-15769](https://cve.now/CVE-2019-15769.md): The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add\_option and update\_option. (no CVSS)
- [CVE-2018-21007](https://cve.now/CVE-2018-21007.md): The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads. (no CVSS)
- [CVE-2019-15787](https://cve.now/CVE-2019-15787.md): libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic. (no CVSS)
- [CVE-2019-15783](https://cve.now/CVE-2019-15783.md): Lute-Tab before 2019-08-23 has a buffer overflow in pdf\_print.cc. (no CVSS)
- [CVE-2019-15782](https://cve.now/CVE-2019-15782.md): WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name. (no CVSS, webtorrent)
- [CVE-2019-15767](https://cve.now/CVE-2019-15767.md): In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd\_load function in frontend/cmd.cc via a crafted chess position in an EP (no CVSS)
- [CVE-2019-15758](https://cve.now/CVE-2019-15758.md): An issue was discovered in Binaryen 1.38.32. (no CVSS)
- [CVE-2019-15759](https://cve.now/CVE-2019-15759.md): An issue was discovered in Binaryen 1.38.32. (no CVSS)
- [CVE-2019-5530](https://cve.now/CVE-2019-5530.md): Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authent (no CVSS, InstallBuilder)
- [CVE-2017-14201](https://cve.now/CVE-2017-14201.md): The shell DNS command can cause unpredictable results due to misuse of stack variables. (no CVSS, Zephyr shell)
- [CVE-2017-14202](https://cve.now/CVE-2017-14202.md): The shell implementation does not protect against buffer overruns resulting in unpredictable behavior. (no CVSS, Zephyr shell)
- [CVE-2019-11250](https://cve.now/CVE-2019-11250.md): Kubernetes client-go logs authorization headers at debug verbosity levels (CVSS 4.7, Kubernetes · k8s.io/client-go +1)
- [CVE-2019-15757](https://cve.now/CVE-2019-15757.md): libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c. (no CVSS)
- [CVE-2019-11249](https://cve.now/CVE-2019-11249.md): kubectl cp allows symlink directory traversal (CVSS 4.8, Kubernetes)
- [CVE-2019-11248](https://cve.now/CVE-2019-11248.md): Kubernetes kubelet exposes /debug/pprof info on healthz port (CVSS 6.5, Kubernetes)
- [CVE-2019-11247](https://cve.now/CVE-2019-11247.md): Kubernetes kube-apiserver allows access to custom resources via wrong scope (CVSS 5.0, Kubernetes · k8s.io/apiextensions-apiserver)
- [CVE-2019-11246](https://cve.now/CVE-2019-11246.md): kubectl cp allows symlink directory traversal (CVSS 6.4, Kubernetes)
- [CVE-2019-11245](https://cve.now/CVE-2019-11245.md): kubelet-started container uid changes to root after first restart or if image is already pulled to the node (CVSS 4.9, Kubernetes · k8s.io/kubernetes/cmd/kubelet +1)
- [CVE-2019-11060](https://cve.now/CVE-2019-11060.md): HG100 contains an Uncontrolled Resource Consumption vulnerability (CVSS 7.4, ASUS HG100 firmware)
- [CVE-2019-13407](https://cve.now/CVE-2019-13407.md): Advan VD-1 has a reflected XSS vulnerability in page cgibin/ssi.cgi (no CVSS, AndroVideo Advan VD-1 firmware)
- [CVE-2019-13406](https://cve.now/CVE-2019-13406.md): Advan VD-1 has a vulnerability that allows remote arbitrary APK installation (no CVSS, AndroVideo Advan VD-1 firmware)
- [CVE-2019-13405](https://cve.now/CVE-2019-13405.md): Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication (no CVSS, AndroVideo Advan VD-1 firmware)
- [CVE-2019-11064](https://cve.now/CVE-2019-11064.md): A vulnerability of remote credential disclosure was discovered in Advan VD-1 (no CVSS, AndroVideo Advan VD-1 firmware)
- [CVE-2019-11063](https://cve.now/CVE-2019-11063.md): SmartHome application has a broken access control vulnerability in its Web API Server (CVSS 10.0, ASUS SmartHome Android app · ASUS SmartHome ios app)
- [CVE-2019-11061](https://cve.now/CVE-2019-11061.md): HG100 has a broken access control vulnerability in its Web API Server (CVSS 10.0, ASUS HG100 firmware)
- [CVE-2019-13408](https://cve.now/CVE-2019-13408.md): Advan VD-1 allows users to download arbitrary files (no CVSS, AndroVideo Advan VD-1 firmware)
- [CVE-2019-12402](https://cve.now/CVE-2019-12402.md): The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with speci (no CVSS, Apache Software Foundation Apache Commons Compress · org… +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.