CVEs published September 4, 2019
37 CVEs were published on September 4, 2019: 0 critical, 0 high.
- Published
- 37
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- BIG-IP
- 4
- BIG-IP, Enterprise Manager
- 1
- cosenary/instagram
- 1
- EZ PLC Editor
- 1
- EZ Touch Editor
- 1
- F5 Container Ingress Service
- 1
- github.com/rancher/rancher
- 1
- Philips HDI 4000 Ultrasound Systems
- 1
Medium, low and unrated 37
- CVE-2017-18595An issue was discovered in the Linux kernel before 4.14.11.
- CVE-2019-15925An issue was discovered in the Linux kernel before 5.2.3.
- CVE-2019-15926An issue was discovered in the Linux kernel before 5.2.3.
- CVE-2018-21008An issue was discovered in the Linux kernel before 4.16.7.
- CVE-2019-15927An issue was discovered in the Linux kernel before 4.20.2.
- CVE-2019-12586The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success message
- CVE-2019-14319The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes.
- CVE-2019-14470cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/scosenary/instagram
- CVE-2019-15917An issue was discovered in the Linux kernel before 5.0.5.
- CVE-2019-15918An issue was discovered in the Linux kernel before 5.0.10.
- CVE-2019-15919An issue was discovered in the Linux kernel before 5.0.10.
- CVE-2019-15920An issue was discovered in the Linux kernel before 5.0.10.
- CVE-2019-15921An issue was discovered in the Linux kernel before 5.0.6.
- CVE-2019-15922An issue was discovered in the Linux kernel before 5.0.9.
- CVE-2019-15923An issue was discovered in the Linux kernel before 5.0.9.
- CVE-2019-15924An issue was discovered in the Linux kernel before 5.0.11.
- CVE-2019-6643On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHBIG-IP
- CVE-2019-6646On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commBIG-IP, Enterprise Manager
- CVE-2019-6644Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP wilBIG-IP
- CVE-2019-6647On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for contrBIG-IP
- CVE-2019-6648On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k8s-bigip-ctlr) log fF5 Container Ingress Service
- CVE-2019-6645On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FBIG-IP
- CVE-2019-13976eGain Chat 15.0.3 allows unrestricted file upload.
- CVE-2019-13975eGain Chat 15.0.3 allows HTML Injection.
- CVE-2019-15916An issue was discovered in the Linux kernel before 5.0.1.
- CVE-2019-13518An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor VEZ Touch Editor
- CVE-2019-13522An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor VersEZ PLC Editor
- CVE-2019-15814Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.
- CVE-2019-15813Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a we
- CVE-2019-13209Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managedgithub.com/rancher/rancher
- CVE-2019-10988In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 UltrasPhilips HDI 4000 Ultrasound Systems
- CVE-2019-12587The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a
- CVE-2019-12588The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite li
- CVE-2019-10709AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS
- CVE-2019-15718In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus
- CVE-2019-15903In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutiv
- CVE-2019-15902A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141