CVEs published September 16, 2019
71 CVEs were published on September 16, 2019: 3 critical, 0 high. 1 is now in CISA KEV.
- Published
- 71
- Critical
- 3
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 67
- Now in CISA KEV
- 1
- Fix available
- 7
Most affected products
- Apache Tapestry · org.apache.tapestry:tapestry-core
- 3
- curl
- 2
- github.com/beego/beego · github.com/astaxie/beego
- 2
- dolibarr/dolibarr
- 1
- IBM Sterling File Gateway
- 1
- Intel(R) Easy Streaming Wizard Advisory
- 1
- org.gradle:gradle-core
- 1
- Partial Information Disclosure Advisory
- 1
Critical 3
- CVE-2019-5482Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.curl
- CVE-2019-5481Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.curl
- CVE-2019-16057The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.
Medium, low and unrated 68
- CVE-2019-4147IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection.IBM Sterling File Gateway
- CVE-2019-16371LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a pr
- CVE-2019-16370The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a diffeorg.gradle:gradle-core
- CVE-2019-10071The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparisApache Tapestry · org.apache.tapestry:tapestry-core
- CVE-2019-15741An issue was discovered in GitLab Omnibus 7.4 through 12.2.1.
- CVE-2019-15740An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1.
- CVE-2019-15739An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1.
- CVE-2019-15738An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1.
- CVE-2019-15737An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1.
- CVE-2019-8368OpenEMR v5.0.1-6 allows XSS.
- CVE-2019-15736An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1.
- CVE-2019-15734An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1.
- CVE-2019-15733An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1.
- CVE-2019-15732An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1.
- CVE-2019-15731An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1.
- CVE-2019-15730An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1.
- CVE-2019-15728An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1.
- CVE-2019-15727An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1.
- CVE-2019-15726An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1.
- CVE-2019-15725An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1.
- CVE-2019-15724An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1.
- CVE-2019-15723An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1.
- CVE-2019-8371OpenEMR v5.0.1-6 allows code execution.
- CVE-2019-15722An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1.
- CVE-2019-15721An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1.
- CVE-2016-10973The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage
- CVE-2016-10972The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
- CVE-2019-0207Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter Apache Tapestry · org.apache.tapestry:tapestry-core
- CVE-2019-13140Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DE
- CVE-2019-16366In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun.
- CVE-2019-11184A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially ePartial Information Disclosure Advisory
- CVE-2019-11166Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potIntel(R) Easy Streaming Wizard Advisory
- CVE-2019-15950The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.
- CVE-2019-0195Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded.Apache Tapestry · org.apache.tapestry:tapestry-core
- CVE-2019-16355The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files.github.com/beego/beego · github.com/astaxie/beego
- CVE-2019-16354The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation github.com/beego/beego · github.com/astaxie/beego
- CVE-2019-16353Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic from a remote device,
- CVE-2018-21015AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and
- CVE-2018-21016audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffe
- CVE-2018-21017GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
- CVE-2019-16346ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pic
- CVE-2019-16347ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pi
- CVE-2019-16348marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain_file() at wav_gain.c.
- CVE-2019-16349Bento4 1.5.1-628 has a NULL pointer dereference in AP4_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4_TrunAtom clas
- CVE-2019-16350ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c.
- CVE-2019-16351ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman_decode_step() at huffman.c.
- CVE-2019-16352ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif_load() at jfif.c.
- CVE-2016-10971The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is re
- CVE-2016-10970The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt.
- CVE-2016-10969The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title.
- CVE-2016-10968The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.
- CVE-2016-10967The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter
- CVE-2016-10966The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.
- CVE-2016-10965The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.
- CVE-2016-10964The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.
- CVE-2016-10963The icegram plugin before 1.9.19 for WordPress has XSS.
- CVE-2016-10962The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
- CVE-2016-10961The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
- CVE-2016-10960The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
- CVE-2016-10959The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-ad
- CVE-2016-10958The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.
- CVE-2016-10957The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter.
- CVE-2019-16264In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authenti
- CVE-2019-16197In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text betweedolibarr/dolibarr
- CVE-2019-16170An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5.
- CVE-2016-10956The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
- CVE-2017-18634The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.
- CVE-2019-13474TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imper