# CVEs published 2019-09-28

3 CVEs were published on September 28, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-16930](https://cve.now/CVE-2019-16930.md): Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of… (no CVSS)
- [CVE-2019-16941](https://cve.now/CVE-2019-16941.md): NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns… (no CVSS)
- [CVE-2019-16935](https://cve.now/CVE-2019-16935.md): The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server\_title field. (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.