# CVEs published 2019-09-16

71 CVEs were published on September 16, 2019: 3 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-4147](https://cve.now/CVE-2019-4147.md): IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 is vulnerable to SQL injection. (CVSS 4.7, IBM Sterling File Gateway)
- [CVE-2019-5482](https://cve.now/CVE-2019-5482.md): Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVSS 9.8, curl)
- [CVE-2019-5481](https://cve.now/CVE-2019-5481.md): Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. (CVSS 9.8, curl)
- [CVE-2019-16371](https://cve.now/CVE-2019-16371.md): LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a pr (no CVSS)
- [CVE-2019-16370](https://cve.now/CVE-2019-16370.md): The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a diffe (no CVSS, org.gradle:gradle-core)
- [CVE-2019-10071](https://cve.now/CVE-2019-10071.md): The code which checks HMAC in form submissions used String.equals() for comparisons, which results in a timing side channel for the comparis (no CVSS, Apache Tapestry · org.apache.tapestry:tapestry-core)
- [CVE-2019-15741](https://cve.now/CVE-2019-15741.md): An issue was discovered in GitLab Omnibus 7.4 through 12.2.1. (no CVSS)
- [CVE-2019-15740](https://cve.now/CVE-2019-15740.md): An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. (no CVSS)
- [CVE-2019-15739](https://cve.now/CVE-2019-15739.md): An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. (no CVSS)
- [CVE-2019-15738](https://cve.now/CVE-2019-15738.md): An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. (no CVSS)
- [CVE-2019-15737](https://cve.now/CVE-2019-15737.md): An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. (no CVSS)
- [CVE-2019-8368](https://cve.now/CVE-2019-8368.md): OpenEMR v5.0.1-6 allows XSS. (no CVSS)
- [CVE-2019-15736](https://cve.now/CVE-2019-15736.md): An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. (no CVSS)
- [CVE-2019-15734](https://cve.now/CVE-2019-15734.md): An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. (no CVSS)
- [CVE-2019-15733](https://cve.now/CVE-2019-15733.md): An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. (no CVSS)
- [CVE-2019-15732](https://cve.now/CVE-2019-15732.md): An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. (no CVSS)
- [CVE-2019-15731](https://cve.now/CVE-2019-15731.md): An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. (no CVSS)
- [CVE-2019-15730](https://cve.now/CVE-2019-15730.md): An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. (no CVSS)
- [CVE-2019-15728](https://cve.now/CVE-2019-15728.md): An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. (no CVSS)
- [CVE-2019-15727](https://cve.now/CVE-2019-15727.md): An issue was discovered in GitLab Community and Enterprise Edition 11.2 through 12.2.1. (no CVSS)
- [CVE-2019-15726](https://cve.now/CVE-2019-15726.md): An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. (no CVSS)
- [CVE-2019-15725](https://cve.now/CVE-2019-15725.md): An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. (no CVSS)
- [CVE-2019-15724](https://cve.now/CVE-2019-15724.md): An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. (no CVSS)
- [CVE-2019-15723](https://cve.now/CVE-2019-15723.md): An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. (no CVSS)
- [CVE-2019-8371](https://cve.now/CVE-2019-8371.md): OpenEMR v5.0.1-6 allows code execution. (no CVSS)
- [CVE-2019-15722](https://cve.now/CVE-2019-15722.md): An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. (no CVSS)
- [CVE-2019-15721](https://cve.now/CVE-2019-15721.md): An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. (no CVSS)
- [CVE-2016-10973](https://cve.now/CVE-2016-10973.md): The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage (no CVSS)
- [CVE-2016-10972](https://cve.now/CVE-2016-10972.md): The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td\_ajax\_update\_panel. (no CVSS)
- [CVE-2019-0207](https://cve.now/CVE-2019-0207.md): Tapestry processes assets \`/assets/ctx\` using classes chain \`StaticFilesFilter -\> AssetDispatcher -\> ContextResource\`, which doesn't filter (no CVSS, Apache Tapestry · org.apache.tapestry:tapestry-core)
- [CVE-2019-13140](https://cve.now/CVE-2019-13140.md): Inteno EG200 EG200-WU7P1U\_ADAMO3.16.4-190226\_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DE (no CVSS)
- [CVE-2019-16366](https://cve.now/CVE-2019-16366.md): In XS 9.0.0 in Moddable SDK OS180329, there is a heap-based buffer overflow in fxBeginHost in xsAPI.c when called from fxRunDefine in xsRun. (no CVSS)
- [CVE-2019-11184](https://cve.now/CVE-2019-11184.md): A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially e (no CVSS, Partial Information Disclosure Advisory)
- [CVE-2019-11166](https://cve.now/CVE-2019-11166.md): Improper file permissions in the installer for Intel(R) Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to pot (no CVSS, Intel(R) Easy Streaming Wizard Advisory)
- [CVE-2019-15950](https://cve.now/CVE-2019-15950.md): The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data. (no CVSS)
- [CVE-2019-0195](https://cve.now/CVE-2019-0195.md): Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. (no CVSS, Apache Tapestry · org.apache.tapestry:tapestry-core)
- [CVE-2019-16355](https://cve.now/CVE-2019-16355.md): The File Session Manager in Beego 1.10.0 allows local users to read session files because of weak permissions for individual files. (no CVSS, github.com/beego/beego · github.com/astaxie/beego)
- [CVE-2019-16354](https://cve.now/CVE-2019-16354.md): The File Session Manager in Beego 1.10.0 allows local users to read session files because there is a race condition involving file creation (no CVSS, github.com/beego/beego · github.com/astaxie/beego)
- [CVE-2019-16353](https://cve.now/CVE-2019-16353.md): Emerson GE Automation Proficy Machine Edition 8.0 allows an access violation and application crash via crafted traffic from a remote device, (no CVSS)
- [CVE-2018-21015](https://cve.now/CVE-2018-21015.md): AVC\_DuplicateConfig() at isomedia/avc\_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and (no CVSS)
- [CVE-2018-21016](https://cve.now/CVE-2018-21016.md): audio\_sample\_entry\_AddBox() at isomedia/box\_code\_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffe (no CVSS)
- [CVE-2018-21017](https://cve.now/CVE-2018-21017.md): GPAC 0.7.1 has a memory leak in dinf\_Read in isomedia/box\_code\_base.c. (no CVSS)
- [CVE-2019-16346](https://cve.now/CVE-2019-16346.md): ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pic (no CVSS)
- [CVE-2019-16347](https://cve.now/CVE-2019-16347.md): ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pi (no CVSS)
- [CVE-2019-16348](https://cve.now/CVE-2019-16348.md): marc-q libwav through 2017-04-20 has a NULL pointer dereference in gain\_file() at wav\_gain.c. (no CVSS)
- [CVE-2019-16349](https://cve.now/CVE-2019-16349.md): Bento4 1.5.1-628 has a NULL pointer dereference in AP4\_ByteStream::ReadUI32 in Core/Ap4ByteStream.cpp when called from the AP4\_TrunAtom clas (no CVSS)
- [CVE-2019-16350](https://cve.now/CVE-2019-16350.md): ffjpeg before 2019-08-18 has a NULL pointer dereference in idct2d8x8() at dct.c. (no CVSS)
- [CVE-2019-16351](https://cve.now/CVE-2019-16351.md): ffjpeg before 2019-08-18 has a NULL pointer dereference in huffman\_decode\_step() at huffman.c. (no CVSS)
- [CVE-2019-16352](https://cve.now/CVE-2019-16352.md): ffjpeg before 2019-08-21 has a heap-based buffer overflow in jfif\_load() at jfif.c. (no CVSS)
- [CVE-2016-10971](https://cve.now/CVE-2016-10971.md): The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is re (no CVSS)
- [CVE-2016-10970](https://cve.now/CVE-2016-10970.md): The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt. (no CVSS)
- [CVE-2016-10969](https://cve.now/CVE-2016-10969.md): The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title. (no CVSS)
- [CVE-2016-10968](https://cve.now/CVE-2016-10968.md): The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-\>save() privilege escalation. (no CVSS)
- [CVE-2016-10967](https://cve.now/CVE-2016-10967.md): The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter (no CVSS)
- [CVE-2016-10966](https://cve.now/CVE-2016-10966.md): The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. (no CVSS)
- [CVE-2016-10965](https://cve.now/CVE-2016-10965.md): The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. (no CVSS)
- [CVE-2016-10964](https://cve.now/CVE-2016-10964.md): The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header. (no CVSS)
- [CVE-2016-10963](https://cve.now/CVE-2016-10963.md): The icegram plugin before 1.9.19 for WordPress has XSS. (no CVSS)
- [CVE-2016-10962](https://cve.now/CVE-2016-10962.md): The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option\_name parameter. (no CVSS)
- [CVE-2016-10961](https://cve.now/CVE-2016-10961.md): The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter. (no CVSS)
- [CVE-2016-10960](https://cve.now/CVE-2016-10960.md): The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter. (no CVSS)
- [CVE-2016-10959](https://cve.now/CVE-2016-10959.md): The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es\_media\_images\[\] to wp-ad (no CVSS)
- [CVE-2016-10958](https://cve.now/CVE-2016-10958.md): The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es\_media\_images\[\] to wp-admin/admin-ajax.php. (no CVSS)
- [CVE-2016-10957](https://cve.now/CVE-2016-10957.md): The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter. (no CVSS)
- [CVE-2019-16264](https://cve.now/CVE-2019-16264.md): In Escuela de Gestion Publica Plurinacional (EGPP) Sistema Integrado de Gestion Academica (GESAC) v1, the username parameter of the authenti (no CVSS)
- [CVE-2019-16197](https://cve.now/CVE-2019-16197.md): In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text betwee (no CVSS, dolibarr/dolibarr)
- [CVE-2019-16170](https://cve.now/CVE-2019-16170.md): An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. (no CVSS)
- [CVE-2019-16057](https://cve.now/CVE-2019-16057.md): The login\_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. (CVSS 9.8, KEV)
- [CVE-2016-10956](https://cve.now/CVE-2016-10956.md): The mail-masta plugin 1.0 for WordPress has local file inclusion in count\_of\_send.php and csvexport.php. (no CVSS)
- [CVE-2017-18634](https://cve.now/CVE-2017-18634.md): The newspaper theme before 6.7.2 for WordPress has script injection via td\_ads\[header\] to admin-ajax.php. (no CVSS)
- [CVE-2019-13474](https://cve.now/CVE-2019-13474.md): TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imper (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.