CVEs published September 19, 2019
18 CVEs were published on September 19, 2019: 0 critical, 1 high.
- Published
- 18
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- 1
- Atlassian Jira Server · Atlassian Jira Data Center
- 1
- Atlassian Jira Service Desk Server · Atlassian Jira Service…
- 1
- LINE
- 1
- Linux Kernel
- 1
- SUSE Linux Enterprise Server
- 1
- The Eclipse Foundation Eclipse Mosquitto
- 1
High 1
Medium, low and unrated 17
- CVE-2019-9720A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matros
- CVE-2019-9719A stack-based buffer overflow in the subtitle decoder in Libav 12.3 allows attackers to corrupt the stack via a crafted video file in Matros
- CVE-2019-9717In Libav 12.3, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, beca
- CVE-2019-16525An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress.
- CVE-2019-15033Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download.
- CVE-2019-15032Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http:/
- CVE-2019-16511An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2.
- CVE-2019-16510libIEC61850 through 1.3.3 has a use-after-free in MmsServer_waitReady in mms/iso_mms/server/mms_server.c, as demonstrated by server_example_
- CVE-2019-16412In goform/setSysTools on Tenda N301 wireless routers, attackers can trigger a device crash via a zero wanMTU value.
- CVE-2019-16398On Keeper K5 20.1.0.25 and 20.1.0.63 devices, remote code execution can occur by inserting an SD card containing a file named zskj_script_ru
- CVE-2019-15001The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0Atlassian Jira Server · Atlassian Jira Data Center
- CVE-2019-15000The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 (the fixed version for 5.16.x ), from 6.0.0 before 6.0.10 (Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2019-14994The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10Atlassian Jira Service Desk Server · Atlassian Jira Service…
- CVE-2019-6010Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of serviceLINE
- CVE-2019-11779In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approThe Eclipse Foundation Eclipse Mosquitto
- CVE-2019-3689nfs-utils: root-owned files stored in insecure /var/lib/nfs directorySUSE Linux Enterprise Server
- CVE-2019-15943vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by c