# CVEs published 2019-01-12

4 CVEs were published on January 12, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2018-20699](https://cve.now/CVE-2018-20699.md): Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems (no CVSS)
- [CVE-2019-6243](https://cve.now/CVE-2019-6243.md): Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). (no CVSS)
- [CVE-2019-6244](https://cve.now/CVE-2019-6244.md): An issue was discovered in UsualToolCMS 8.0. (no CVSS)
- [CVE-2019-3803](https://cve.now/CVE-2019-3803.md): Concourse includes token in CLI authentication callback (CVSS 4.5, Pivotal Concourse)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.