CVEs published September 5, 2019
59 CVEs were published on September 5, 2019: 0 critical, 4 high. 1 is now in CISA KEV.
- Published
- 59
- Critical
- 0
- High
- 4
- Medium
- 10
- Low
- 0
- Unrated
- 45
- Now in CISA KEV
- 1
- Fix available
- 9
Most affected products
- Android
- 14
- total4
- 3
- Epignosis
- 2
- Blynck Inc
- 1
- Cisco Content Security Management Appliance
- 1
- Cisco Finesse
- 1
- Cisco Identity Services Engine Software
- 1
- Cisco Industrial Network Director
- 1
- Cisco Jabber for Mac
- 1
- Cisco Unified Contact Center Express
- 1
High 4
- CVE-2019-5069A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.Epignosis
- CVE-2019-15949Nagios XI before 5.6.6 allows remote command execution as root.
- CVE-2019-1939Cisco Webex Teams Logging Feature Command Execution VulnerabilityCisco Webex Teams
- CVE-2019-1976Cisco Industrial Network Director Configuration Data Information Disclosure VulnerabilityCisco Industrial Network Director
Medium, low and unrated 55
- CVE-2019-2181In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2019-2108In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9254In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validation.Android
- CVE-2019-2124In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silAndroid
- CVE-2019-2180In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input validation.Android
- CVE-2019-2179In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due to an integer overflowAndroid
- CVE-2019-2178In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due to a missing bounds chAndroid
- CVE-2019-2115In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double Android
- CVE-2019-2177In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion due to a permissions byAndroid
- CVE-2019-2176In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bounds write due to a mAndroid
- CVE-2019-2103In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot of apps with FLAG_SEAndroid
- CVE-2019-2175In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments.Android
- CVE-2019-2174In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due toAndroid
- CVE-2019-2123In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitrary code in a privilegAndroid
- CVE-2019-14222An issue was discovered in Alfresco Community Edition versions 6.0 and lower.
- CVE-2019-14224An issue was discovered in Alfresco Community Edition 5.2 201707.
- CVE-2019-15029FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (whic
- CVE-2019-11380The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.androi
- CVE-2019-10753In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to versiSpotless · com.diffplug.spotless:spotless-eclipse-wtp +2
- CVE-2019-14339The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.print
- CVE-2019-15848JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it possible to send an arbitrary HTTP request t
- CVE-2019-15944In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message.
- CVE-2019-15952An issue was discovered in Total.js CMS 12.0.0.total4
- CVE-2019-15953An issue was discovered in Total.js CMS 12.0.0.total4
- CVE-2019-15954An issue was discovered in Total.js CMS 12.0.0.total4
- CVE-2019-15955An issue was discovered in Total.js CMS 12.0.0.
- CVE-2019-13188In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application.
- CVE-2019-14278In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.
- CVE-2019-13191A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search
- CVE-2019-13187The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in c
- CVE-2019-13349In Knowage through 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.
- CVE-2019-5070An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier.Epignosis
- CVE-2019-13190In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token.
- CVE-2019-13361Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network.
- CVE-2019-15947In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory.
- CVE-2019-5065An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.Blynck Inc
- CVE-2019-15946OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.
- CVE-2019-15945OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.
- CVE-2019-15942FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavco
- CVE-2018-11569Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data.
- CVE-2019-15939An issue was discovered in OpenCV 4.1.0.opencv-python · opencv-python-headless +2
- CVE-2019-12223An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03.
- CVE-2019-4321IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM WatIBM Intelligent Operations Center
- CVE-2019-4186IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during cachiIBM Jazz for Service Management
- CVE-2019-4149IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.IBM Business Automation Workflow · IBM Business Process Man…
- CVE-2019-15937Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly use
- CVE-2019-15938Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used f
- CVE-2019-10677Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote at
- CVE-2018-21010OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
- CVE-2018-21009Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
- CVE-2019-12635Cisco Content Security Management Appliance Information Disclosure VulnerabilityCisco Content Security Management Appliance
- CVE-2019-12644Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2019-12645Cisco Jabber Client Framework for Mac Code Execution VulnerabilityCisco Jabber for Mac
- CVE-2019-12632Cisco Finesse Request Processing Server-Side Request Forgery VulnerabilityCisco Finesse
- CVE-2019-12633Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery VulnerabilityCisco Unified Contact Center Express