# CVEs published 2019-09-10

57 CVEs were published on September 10, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-12943](https://cve.now/CVE-2019-12943.md): TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information (no CVSS)
- [CVE-2019-12942](https://cve.now/CVE-2019-12942.md): TTLock devices do not properly block guest access in certain situations where the network connection to the cloud is unavailable. (no CVSS)
- [CVE-2019-11669](https://cve.now/CVE-2019-11669.md): Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. (no CVSS, Micro Focus Service Manager)
- [CVE-2019-11668](https://cve.now/CVE-2019-11668.md): HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. (no CVSS, Service Manager, Service Manager – Chat Service. Server M…)
- [CVE-2019-12996](https://cve.now/CVE-2019-12996.md): In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe. (no CVSS)
- [CVE-2019-10256](https://cve.now/CVE-2019-10256.md): An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found. (no CVSS)
- [CVE-2019-14457](https://cve.now/CVE-2019-14457.md): VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header. (no CVSS)
- [CVE-2019-11496](https://cve.now/CVE-2019-11496.md): In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without aut (no CVSS)
- [CVE-2019-11497](https://cve.now/CVE-2019-11497.md): In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and (no CVSS)
- [CVE-2019-11467](https://cve.now/CVE-2019-11467.md): In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. (no CVSS)
- [CVE-2019-11495](https://cve.now/CVE-2019-11495.md): In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. (no CVSS)
- [CVE-2019-11466](https://cve.now/CVE-2019-11466.md): In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require crede (no CVSS)
- [CVE-2019-1563](https://cve.now/CVE-2019-1563.md): Padding Oracle in PKCS7\_dataDecode and CMS\_decrypt\_set1\_pkey (no CVSS, OpenSSL)
- [CVE-2019-1549](https://cve.now/CVE-2019-1549.md): Fork Protection (no CVSS, OpenSSL)
- [CVE-2019-1547](https://cve.now/CVE-2019-1547.md): ECDSA remote timing attack (no CVSS, OpenSSL)
- [CVE-2019-11465](https://cve.now/CVE-2019-11465.md): An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. (no CVSS)
- [CVE-2019-0357](https://cve.now/CVE-2019-0357.md): The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privil (no CVSS, SAP SE SAP HANA)
- [CVE-2019-11464](https://cve.now/CVE-2019-11464.md): Some enterprises require that REST API endpoints include security-related headers in REST responses. (no CVSS)
- [CVE-2019-0356](https://cve.now/CVE-2019-0356.md): Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP\_XIAF (before versions 7.31, 7.40, 7.50) all (no CVSS, SAP SE SAP NetWeaver Process Integration Runtime Workbench…)
- [CVE-2019-12105](https://cve.now/CVE-2019-12105.md): In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. (no CVSS, supervisor)
- [CVE-2019-0365](https://cve.now/CVE-2019-0365.md): SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7 (no CVSS, SAP SE SAP Kernel · SAP SE SAP GUI for Windows +1)
- [CVE-2019-0364](https://cve.now/CVE-2019-0364.md): Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2019-0363](https://cve.now/CVE-2019-0363.md): Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload t (no CVSS, SAP SE SAP HANA Extended Application Services)
- [CVE-2019-0361](https://cve.now/CVE-2019-0361.md): SAP Supplier Relationship Management (Master Data Management Catalog - SRM\_MDM\_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently (no CVSS, SAP SE SAP Supplier Relationship Management (Master Data Ma…)
- [CVE-2019-0355](https://cve.now/CVE-2019-0355.md): SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before v (no CVSS, SAP SE SAP NetWeaver AS for Java (Web Container)-ENGINEAPI…)
- [CVE-2019-0353](https://cve.now/CVE-2019-0353.md): Under certain conditions SAP Business One client (B1\_ON\_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access informati (no CVSS, SAP SE SAP Business One Client)
- [CVE-2019-0352](https://cve.now/CVE-2019-0352.md): In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which le (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-3975](https://cve.now/CVE-2019-3975.md): Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a cra (no CVSS, Advantech WebAccess/SCADA)
- [CVE-2019-5503](https://cve.now/CVE-2019-5503.md): OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker t (no CVSS, NetApp OnCommand Workflow Automation)
- [CVE-2019-16106](https://cve.now/CVE-2019-16106.md): The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user (no CVSS)
- [CVE-2019-15896](https://cve.now/CVE-2019-15896.md): An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. (no CVSS)
- [CVE-2019-14730](https://cve.now/CVE-2019-14730.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victi (no CVSS)
- [CVE-2019-14728](https://cve.now/CVE-2019-14728.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding des (no CVSS)
- [CVE-2019-14729](https://cve.now/CVE-2019-14729.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a v (no CVSS)
- [CVE-2019-14727](https://cve.now/CVE-2019-14727.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password o (no CVSS)
- [CVE-2019-14726](https://cve.now/CVE-2019-14726.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS record (no CVSS)
- [CVE-2019-14723](https://cve.now/CVE-2019-14723.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail acc (no CVSS)
- [CVE-2019-14722](https://cve.now/CVE-2019-14722.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding (no CVSS)
- [CVE-2019-14721](https://cve.now/CVE-2019-14721.md): In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from ph (no CVSS)
- [CVE-2019-12401](https://cve.now/CVE-2019-12401.md): Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. (no CVSS, Apache Solr · org.apache.solr:solr-core)
- [CVE-2019-16202](https://cve.now/CVE-2019-16202.md): MISP before 2.4.115 allows privilege escalation in certain situations. (no CVSS)
- [CVE-2017-18611](https://cve.now/CVE-2017-18611.md): The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP\_CreateCustomFieldPage.php custom-field-css parameter. (no CVSS)
- [CVE-2017-18610](https://cve.now/CVE-2017-18610.md): The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP\_CreateCustomFieldPage.php custom-group-id parameter. (no CVSS)
- [CVE-2017-18609](https://cve.now/CVE-2017-18609.md): The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter. (no CVSS)
- [CVE-2017-18608](https://cve.now/CVE-2017-18608.md): The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues. (no CVSS)
- [CVE-2017-18607](https://cve.now/CVE-2017-18607.md): The avada theme before 5.1.5 for WordPress has CSRF. (no CVSS)
- [CVE-2017-18606](https://cve.now/CVE-2017-18606.md): The avada theme before 5.1.5 for WordPress has stored XSS. (no CVSS)
- [CVE-2017-18605](https://cve.now/CVE-2017-18605.md): The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. (no CVSS)
- [CVE-2017-18604](https://cve.now/CVE-2017-18604.md): The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. (no CVSS)
- [CVE-2017-18603](https://cve.now/CVE-2017-18603.md): The postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman\_email\_log page parameter. (no CVSS)
- [CVE-2017-18602](https://cve.now/CVE-2017-18602.md): The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp\_UserResult id parameter. (no CVSS)
- [CVE-2017-18601](https://cve.now/CVE-2017-18601.md): The examapp plugin 1.0 for WordPress has XSS via exam input text fields. (no CVSS)
- [CVE-2017-18600](https://cve.now/CVE-2017-18600.md): The formcraft3 plugin before 3.4 for WordPress has stored XSS via the "New Form \> Heading \> Heading Text" field. (no CVSS)
- [CVE-2017-18599](https://cve.now/CVE-2017-18599.md): The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter. (no CVSS)
- [CVE-2017-18598](https://cve.now/CVE-2017-18598.md): The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php. (no CVSS)
- [CVE-2017-18597](https://cve.now/CVE-2017-18597.md): The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId (no CVSS)
- [CVE-2017-18596](https://cve.now/CVE-2017-18596.md): The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.