# CVEs published 2019-12-11

73 CVEs were published on December 11, 2019: 3 critical, 6 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-5092](https://cve.now/CVE-2019-5092.md): An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS… (CVSS 8.8, LEADTOOLS)
- [CVE-2019-5154](https://cve.now/CVE-2019-5154.md): An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. (CVSS 8.8, LEADTOOLS)
- [CVE-2019-5091](https://cve.now/CVE-2019-5091.md): An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version… (CVSS 7.5, LEADTOOLS libltdic.so)
- [CVE-2019-5085](https://cve.now/CVE-2019-5085.md): An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version… (CVSS 9.8, LEADTOOLS libltdic.so)
- [CVE-2019-5093](https://cve.now/CVE-2019-5093.md): An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version… (CVSS 8.1, LEADTOOLS libltdic.so)
- [CVE-2019-5090](https://cve.now/CVE-2019-5090.md): An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version… (CVSS 9.1, LEADTOOLS libltdic.so)
- [CVE-2019-7004](https://cve.now/CVE-2019-7004.md): Avaya IP Office XSS Vulnerability (CVSS 6.4, Avaya IP Office Application Server)
- [CVE-2019-10695](https://cve.now/CVE-2019-10695.md): When using the cd4pe::root\_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and… (no CVSS, Continuous Delivery for Puppet Enterprise)
- [CVE-2019-10694](https://cve.now/CVE-2019-10694.md): The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the… (no CVSS, Puppet Enterprise)
- [CVE-2019-3983](https://cve.now/CVE-2019-3983.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3985](https://cve.now/CVE-2019-3985.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3986](https://cve.now/CVE-2019-3986.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3987](https://cve.now/CVE-2019-3987.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3988](https://cve.now/CVE-2019-3988.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3989](https://cve.now/CVE-2019-3989.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly… (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-18232](https://cve.now/CVE-2019-18232.md): SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when… (no CVSS, SafeNet Sentinel LDK License Manager Runtime)
- [CVE-2019-18245](https://cve.now/CVE-2019-18245.md): Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root… (no CVSS, Reliable Controls LicenseManager)
- [CVE-2019-17087](https://cve.now/CVE-2019-17087.md): Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. (no CVSS, Micro Focus International AcuToWeb)
- [CVE-2019-0405](https://cve.now/CVE-2019-0405.md): SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of… (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0404](https://cve.now/CVE-2019-0404.md): SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information… (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0403](https://cve.now/CVE-2019-0403.md): SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading… (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0402](https://cve.now/CVE-2019-0402.md): SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin… (no CVSS, SAP SE SAP Adaptive Server Enterprise)
- [CVE-2019-0399](https://cve.now/CVE-2019-0399.md): SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500\_702, 600\_740, 610\_740; unintentionally… (no CVSS, SAP SE SAP Portfolio and Project Management)
- [CVE-2019-0398](https://cve.now/CVE-2019-0398.md): Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0395](https://cve.now/CVE-2019-0395.md): SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text… (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-19729](https://cve.now/CVE-2019-19729.md): An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. (no CVSS, bson-objectid)
- [CVE-2019-19374](https://cve.now/CVE-2019-19374.md): An issue was discovered in core/assets/form/form\_question\_types/form\_question\_type\_file\_upload/form\_question\_type\_file\_upload.inc in Squiz… (no CVSS)
- [CVE-2019-19373](https://cve.now/CVE-2019-19373.md): An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to… (no CVSS)
- [CVE-2013-5743](https://cve.now/CVE-2013-5743.md): Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7. (no CVSS)
- [CVE-2013-5978](https://cve.now/CVE-2013-5978.md): Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote… (no CVSS)
- [CVE-2014-7257](https://cve.now/CVE-2014-7257.md): SQL injection vulnerability in DBD::PgPP 0.05 and earlier (no CVSS, DBD::PgPP)
- [CVE-2013-4303](https://cve.now/CVE-2013-4303.md): includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2… (no CVSS, Wikimedia Foundation MediaWiki)
- [CVE-2013-3691](https://cve.now/CVE-2013-3691.md): AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL. (no CVSS)
- [CVE-2013-3542](https://cve.now/CVE-2013-3542.md): Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP\_HD, GXV3500, and possibly… (no CVSS)
- [CVE-2019-19649](https://cve.now/CVE-2019-19649.md): Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid… (no CVSS)
- [CVE-2013-4968](https://cve.now/CVE-2013-4968.md): Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console… (no CVSS)
- [CVE-2019-19650](https://cve.now/CVE-2019-19650.md): Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to… (no CVSS)
- [CVE-2019-14317](https://cve.now/CVE-2019-14317.md): wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. (no CVSS)
- [CVE-2019-19577](https://cve.now/CVE-2019-19577.md): An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges… (no CVSS)
- [CVE-2019-19578](https://cve.now/CVE-2019-19578.md): An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear… (no CVSS)
- [CVE-2019-19580](https://cve.now/CVE-2019-19580.md): An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in… (no CVSS)
- [CVE-2019-19581](https://cve.now/CVE-2019-19581.md): An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access)… (no CVSS)
- [CVE-2019-19582](https://cve.now/CVE-2019-19582.md): An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) because certain bit… (no CVSS)
- [CVE-2019-19583](https://cve.now/CVE-2019-19583.md): An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because… (no CVSS)
- [CVE-2019-18379](https://cve.now/CVE-2019-18379.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue… (no CVSS, Symantec Messaging Gateway)
- [CVE-2019-18378](https://cve.now/CVE-2019-18378.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can… (no CVSS, Symantec Messaging Gateway)
- [CVE-2019-18377](https://cve.now/CVE-2019-18377.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby… (no CVSS, Symantec Messaging Gateway)
- [CVE-2014-0163](https://cve.now/CVE-2014-0163.md): Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. (no CVSS, Openshift)
- [CVE-2019-10772](https://cve.now/CVE-2019-10772.md): It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace… (no CVSS, enshrined/svg-sanitize)
- [CVE-2019-14899](https://cve.now/CVE-2019-14899.md): A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent… (CVSS 7.4, Red Hat VPN)
- [CVE-2019-15009](https://cve.now/CVE-2019-15009.md): The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove… (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-15008](https://cve.now/CVE-2019-15008.md): The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject… (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-15007](https://cve.now/CVE-2019-15007.md): The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript… (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-4715](https://cve.now/CVE-2019-4715.md): IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. (CVSS 8.8, IBM Spectrum Scale)
- [CVE-2019-4665](https://cve.now/CVE-2019-4665.md): IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Spectrum Scale)
- [CVE-2014-0091](https://cve.now/CVE-2014-0091.md): Foreman has improper input validation which could lead to partial Denial of Service (no CVSS, Foreman)
- [CVE-2014-0026](https://cve.now/CVE-2014-0026.md): katello-headpin is vulnerable to CSRF in REST API (no CVSS, katello-headpin)
- [CVE-2013-7371](https://cve.now/CVE-2013-7371.md): node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for… (no CVSS, node-connect · connect)
- [CVE-2013-7370](https://cve.now/CVE-2013-7370.md): node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware (no CVSS, connect)
- [CVE-2013-6495](https://cve.now/CVE-2013-6495.md): JBossWeb Bayeux has reflected XSS (no CVSS, JBossWeb Bayeux)
- [CVE-2013-4593](https://cve.now/CVE-2013-4593.md): RubyGem omniauth-facebook has an access token security vulnerability (no CVSS, omniauth-facebook)
- [CVE-2013-4245](https://cve.now/CVE-2013-4245.md): Orca has arbitrary code execution due to insecure Python module load (no CVSS, Orca)
- [CVE-2013-4158](https://cve.now/CVE-2013-4158.md): smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790) (no CVSS, smokeping)
- [CVE-2019-18960](https://cve.now/CVE-2019-18960.md): Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. (no CVSS)
- [CVE-2019-3667](https://cve.now/CVE-2019-3667.md): DLL Search Order Hijacking (CVSS 6.6, McAfee TechCheck)
- [CVE-2019-19720](https://cve.now/CVE-2019-19720.md): Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file. (no CVSS)
- [CVE-2019-19719](https://cve.now/CVE-2019-19719.md): Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page. (no CVSS)
- [CVE-2019-19708](https://cve.now/CVE-2019-19708.md): The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key… (no CVSS)
- [CVE-2019-19709](https://cve.now/CVE-2019-19709.md): MediaWiki through 1.33.1 allows attackers to bypass the Title\_blacklist protection mechanism by starting with an arbitrary title… (no CVSS, mediawiki/core)
- [CVE-2019-19707](https://cve.now/CVE-2019-19707.md): On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint… (no CVSS)
- [CVE-2019-5815](https://cve.now/CVE-2019-5815.md): Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption… (no CVSS, Google Chrome · nokogiri)
- [CVE-2019-18935](https://cve.now/CVE-2019-18935.md): Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. (CVSS 9.8, KEV)
- [CVE-2019-19725](https://cve.now/CVE-2019-19725.md): sysstat through 12.2.0 has a double free in check\_file\_actlst in sa\_common.c. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.