CVEs published September 6, 2019
55 CVEs were published on September 6, 2019: 2 critical, 1 high.
- Published
- 55
- Critical
- 2
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 51
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Android
- 31
- Document Foundation LibreOffice
- 2
- Facebook HHVM
- 2
- airbrake-ruby
- 1
- Artifex Software ghostscript
- 1
- BD
- 1
- CA Technologies Client Automation · CA Technologies Workloa…
- 1
- mautic/core
- 1
Critical 2
High 1
Medium, low and unrated 52
- CVE-2019-16089An issue was discovered in the Linux kernel through 5.2.13.
- CVE-2019-9455In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement.Android
- CVE-2019-9453In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation.Android
- CVE-2019-9452In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-9449In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-9445In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-9444In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p.Android
- CVE-2019-9245In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-9458In the Android kernel in the video driver there is a use after free due to a race condition.Android
- CVE-2019-9456In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check.Android
- CVE-2019-9454In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption.Android
- CVE-2019-9451In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9450In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition.Android
- CVE-2019-9448In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9447In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking.Android
- CVE-2019-9446In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation.Android
- CVE-2019-9443In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass.Android
- CVE-2019-9442In the Android kernel in the mnh driver there is possible memory corruption due to a use after free.Android
- CVE-2019-9441In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation.Android
- CVE-2019-9276In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free.Android
- CVE-2019-9275In the Android kernel in the mnh driver there is a use after free due to improper locking.Android
- CVE-2019-9274In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9273In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking.Android
- CVE-2019-9271In the Android kernel in the mnh driver there is a race condition due to insufficient locking.Android
- CVE-2019-2182In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable.Android
- CVE-2019-9270In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9248In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-9461In the Android kernel in VPN routing there is a possible information disclosure.Android
- CVE-2019-9345In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb fileAndroid
- CVE-2019-9436In the Android kernel in the bootloader there is a possible secure boot bypass.Android
- CVE-2019-9426In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2019-16088Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.
- CVE-2019-15128iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
- CVE-2018-11198An issue was discovered in Mautic 2.13.1.mautic/core
- CVE-2019-10892An issue was discovered in D-Link DIR-806 devices.
- CVE-2019-11925Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via Facebook HHVM
- CVE-2019-11926Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memoryFacebook HHVM
- CVE-2016-7398A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlie
- CVE-2019-9855Windows 8.3 path equivalence handling flaw allows LibreLogo script executionDocument Foundation LibreOffice
- CVE-2019-9854Unsafe URL assembly flaw in allowed script location checkDocument Foundation LibreOffice
- CVE-2019-16060The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to airbrake-ruby
- CVE-2019-16059Sentrifugo 3.2 lacks CSRF protection.
- CVE-2019-16058An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC.
- CVE-2019-16056An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.
- CVE-2019-15890libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
- CVE-2018-18630A vulnerability was found in McKesson Cardiology product 13.x and 14.x.
- CVE-2019-15102An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0.
- CVE-2019-14223An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N.
- CVE-2019-13953An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera
- CVE-2018-6240NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physAndroid
- CVE-2019-13517In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has BD
- CVE-2019-15846Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.