# CVEs published 2018-11-25

3 CVEs were published on November 25, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-19519](https://cve.now/CVE-2018-19519.md): In tcpdump 4.9.2, a stack-based buffer over-read exists in the print\_prefix function of print-hncp.c via crafted packet data because of miss (no CVSS)
- [CVE-2018-19520](https://cve.now/CVE-2018-19520.md): An issue was discovered in SDCMS 1.6 with PHP 5.x. (no CVSS)
- [CVE-2018-19518](https://cve.now/CVE-2018-19518.md): University of Washington IMAP Toolkit 2007f on UNIX, as used in imap\_open() in PHP and other products, launches an rsh command (by means of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-11-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.