# CVEs published 2019-09-06

55 CVEs were published on September 6, 2019: 2 critical, 1 high. Days are UTC.

- [CVE-2019-16089](https://cve.now/CVE-2019-16089.md): An issue was discovered in the Linux kernel through 5.2.13. (no CVSS)
- [CVE-2019-9455](https://cve.now/CVE-2019-9455.md): In the Android kernel in the video driver there is a kernel pointer leak due to a WARN\_ON statement. (no CVSS, Android)
- [CVE-2019-9453](https://cve.now/CVE-2019-9453.md): In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. (no CVSS, Android)
- [CVE-2019-9452](https://cve.now/CVE-2019-9452.md): In the Android kernel in SEC\_TS touch driver there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9449](https://cve.now/CVE-2019-9449.md): In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9445](https://cve.now/CVE-2019-9445.md): In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9444](https://cve.now/CVE-2019-9444.md): In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. (no CVSS, Android)
- [CVE-2019-9245](https://cve.now/CVE-2019-9245.md): In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9458](https://cve.now/CVE-2019-9458.md): In the Android kernel in the video driver there is a use after free due to a race condition. (no CVSS, Android)
- [CVE-2019-9456](https://cve.now/CVE-2019-9456.md): In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9454](https://cve.now/CVE-2019-9454.md): In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. (no CVSS, Android)
- [CVE-2019-9451](https://cve.now/CVE-2019-9451.md): In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9450](https://cve.now/CVE-2019-9450.md): In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. (no CVSS, Android)
- [CVE-2019-9448](https://cve.now/CVE-2019-9448.md): In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9447](https://cve.now/CVE-2019-9447.md): In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. (no CVSS, Android)
- [CVE-2019-9446](https://cve.now/CVE-2019-9446.md): In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2019-9443](https://cve.now/CVE-2019-9443.md): In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. (no CVSS, Android)
- [CVE-2019-9442](https://cve.now/CVE-2019-9442.md): In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2019-9441](https://cve.now/CVE-2019-9441.md): In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2019-9276](https://cve.now/CVE-2019-9276.md): In the Android kernel in the synaptics\_dsx\_htc touchscreen driver there is a possible out of bounds write due to a use after free. (no CVSS, Android)
- [CVE-2019-9275](https://cve.now/CVE-2019-9275.md): In the Android kernel in the mnh driver there is a use after free due to improper locking. (no CVSS, Android)
- [CVE-2019-9274](https://cve.now/CVE-2019-9274.md): In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9273](https://cve.now/CVE-2019-9273.md): In the Android kernel in the synaptics\_dsx\_htc touchscreen driver there is a possible use after free due to improper locking. (no CVSS, Android)
- [CVE-2019-9271](https://cve.now/CVE-2019-9271.md): In the Android kernel in the mnh driver there is a race condition due to insufficient locking. (no CVSS, Android)
- [CVE-2019-2182](https://cve.now/CVE-2019-2182.md): In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. (no CVSS, Android)
- [CVE-2019-9270](https://cve.now/CVE-2019-9270.md): In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9248](https://cve.now/CVE-2019-9248.md): In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-9461](https://cve.now/CVE-2019-9461.md): In the Android kernel in VPN routing there is a possible information disclosure. (no CVSS, Android)
- [CVE-2019-9345](https://cve.now/CVE-2019-9345.md): In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb file (no CVSS, Android)
- [CVE-2019-9436](https://cve.now/CVE-2019-9436.md): In the Android kernel in the bootloader there is a possible secure boot bypass. (no CVSS, Android)
- [CVE-2019-9426](https://cve.now/CVE-2019-9426.md): In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-16088](https://cve.now/CVE-2019-16088.md): Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. (no CVSS)
- [CVE-2019-15128](https://cve.now/CVE-2019-15128.md): iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user. (no CVSS)
- [CVE-2018-11198](https://cve.now/CVE-2018-11198.md): An issue was discovered in Mautic 2.13.1. (no CVSS, mautic/core)
- [CVE-2019-10892](https://cve.now/CVE-2019-10892.md): An issue was discovered in D-Link DIR-806 devices. (no CVSS)
- [CVE-2019-10891](https://cve.now/CVE-2019-10891.md): An issue was discovered in D-Link DIR-806 devices. (CVSS 9.8)
- [CVE-2019-11925](https://cve.now/CVE-2019-11925.md): Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via (no CVSS, Facebook HHVM)
- [CVE-2019-11926](https://cve.now/CVE-2019-11926.md): Insufficient boundary checks when processing M\_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory (no CVSS, Facebook HHVM)
- [CVE-2016-7398](https://cve.now/CVE-2016-7398.md): A type confusion vulnerability in the merge\_param() function of php\_http\_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlie (no CVSS)
- [CVE-2019-9855](https://cve.now/CVE-2019-9855.md): Windows 8.3 path equivalence handling flaw allows LibreLogo script execution (no CVSS, Document Foundation LibreOffice)
- [CVE-2019-9854](https://cve.now/CVE-2019-9854.md): Unsafe URL assembly flaw in allowed script location check (no CVSS, Document Foundation LibreOffice)
- [CVE-2019-16060](https://cve.now/CVE-2019-16060.md): The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist\_keys configuration option and consequently may disclose passwords to (no CVSS, airbrake-ruby)
- [CVE-2019-16059](https://cve.now/CVE-2019-16059.md): Sentrifugo 3.2 lacks CSRF protection. (no CVSS)
- [CVE-2019-16058](https://cve.now/CVE-2019-16058.md): An issue was discovered in the pam\_p11 component 0.2.0 and 0.3.0 for OpenSC. (no CVSS)
- [CVE-2019-16056](https://cve.now/CVE-2019-16056.md): An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. (CVSS 5.3)
- [CVE-2019-15890](https://cve.now/CVE-2019-15890.md): libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip\_reass in ip\_input.c. (no CVSS)
- [CVE-2018-18630](https://cve.now/CVE-2018-18630.md): A vulnerability was found in McKesson Cardiology product 13.x and 14.x. (no CVSS)
- [CVE-2019-15102](https://cve.now/CVE-2019-15102.md): An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. (no CVSS)
- [CVE-2019-14223](https://cve.now/CVE-2019-14223.md): An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. (no CVSS)
- [CVE-2019-13953](https://cve.now/CVE-2019-13953.md): An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera (no CVSS)
- [CVE-2019-13656](https://cve.now/CVE-2019-13656.md): An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a (CVSS 9.8, CA Technologies Client Automation · CA Technologies Workloa…)
- [CVE-2018-6240](https://cve.now/CVE-2018-6240.md): NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary phys (no CVSS, Android)
- [CVE-2019-13517](https://cve.now/CVE-2019-13517.md): In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has (no CVSS, BD)
- [CVE-2019-14813](https://cve.now/CVE-2019-14813.md): A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged (CVSS 7.3, Artifex Software ghostscript)
- [CVE-2019-15846](https://cve.now/CVE-2019-15846.md): Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.