Skip to content
OpenAdvisories

Archive

July 2019

Vulnerabilities first published in this month (UTC), newest first.

← June 2019 2019 / July August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

1,623 results · Feed

  • High 7.3
    CVE-2019-1855

    Cisco Jabber for Windows DLL Preloading Vulnerability

    A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid crede…

    Cisco Cisco Jabber for Windows Windows Network devices
  • High 7.7
    CVE-2019-1884

    Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability

    A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insuf…

    Cisco Cisco Web Security Appliance (WSA) Network devices
  • High 8.6
    CVE-2019-1886

    Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability

    A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Secure Sockets Layer (SS…

    Cisco Cisco Web Security Appliance (WSA) Network devices
  • Unscored —
    CVE-2019-13283

    In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc…

    poppler Ubuntu
  • Unscored —
    CVE-2019-13282

    In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when usi…

  • Unscored —
    CVE-2019-13281

    In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing …

  • Unscored —
    CVE-2019-13275

    An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The v1/hit endpoint of the …

  • Unscored —
    CVE-2019-13262

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.

  • Unscored —
    CVE-2019-13261

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384.

  • Unscored —
    CVE-2019-13260

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327a07.

  • Unscored —
    CVE-2019-13259

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e566.

  • Unscored —
    CVE-2019-13258

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328165.

  • Unscored —
    CVE-2019-13257

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003273aa.

  • Unscored —
    CVE-2019-13256

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e849.

  • Unscored —
    CVE-2019-13255

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000327464.

  • Unscored —
    CVE-2019-13254

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x000000000032e808.

  • Unscored —
    CVE-2019-13253

    XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000385474.

  • Unscored —
    CVE-2019-13252

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000001172b0.

  • Unscored —
    CVE-2019-13251

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000c47ff.

  • Unscored —
    CVE-2019-13250

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9c2f.

  • Unscored —
    CVE-2019-13249

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!IEP_SetColorProfile+0x00000000000b9e7a.

  • Unscored —
    CVE-2019-13248

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x0000000000002450.

  • Unscored —
    CVE-2019-13247

    ACDSee Free 1.1.21 has a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x00000000000024ed.

  • Unscored —
    CVE-2019-13246

    FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a9601.

  • Unscored —
    CVE-2019-13245

    FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x00000000001a95b1.

  • Unscored —
    CVE-2019-13244

    FastStone Image Viewer 7.0 has a User Mode Write AV starting at image00400000+0x0000000000002d7d.

  • Unscored —
    CVE-2019-13243

    IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x00000000000249c6.

  • Unscored —
    CVE-2019-13242

    IrfanView 4.52 has a User Mode Write AV starting at image00400000+0x0000000000013a98.

  • Unscored —
    CVE-2019-13241

    FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a …

    flightcrew flightcrew Debian Ubuntu
  • Unscored —
    CVE-2019-13239

    inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.

    glpi Ubuntu
  • Unscored —
    CVE-2019-13238

    An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to…

    kodi-inputstream-adaptive Ubuntu
  • Unscored —
    CVE-2018-20850

    Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of…

  • Unscored —
    CVE-2019-13233

    In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry beca…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2019-13232

    Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource c…

    unzip unzip unzip unzip Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2019-13229

    deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write …

  • Unscored —
    CVE-2019-13228

    deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, an…

  • Unscored —
    CVE-2019-13227

    In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows…

  • Unscored —
    CVE-2019-13226

    deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporar…

  • Unscored —
    CVE-2019-13208

    WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access fo…

  • Critical 9.8
    CVE-2015-3907

    CodeIgniter Rest Server XXE Vulnerability

    CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks.

    chriskacerguis/codeigniter-restserver Packagist