# CVEs published 2019-01-30

18 CVEs were published on January 30, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2018-17189](https://cve.now/CVE-2018-17189.md): In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that re (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2018-17199](https://cve.now/CVE-2018-17199.md): In Apache HTTP Server 2.4 release 2.4.37 and prior, mod\_session checks the session expiry time before decoding the session. (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2018-3956](https://cve.now/CVE-2018-3956.md): An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader vers (CVSS 6.8, Foxit)
- [CVE-2019-0190](https://cve.now/CVE-2019-0190.md): A bug exists in the way mod\_ssl handled client renegotiations. (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2019-7233](https://cve.now/CVE-2019-7233.md): In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference. (no CVSS)
- [CVE-2019-7234](https://cve.now/CVE-2019-7234.md): An issue was discovered in idreamsoft iCMS 7.0.13. (no CVSS)
- [CVE-2019-7235](https://cve.now/CVE-2019-7235.md): An issue was discovered in idreamsoft iCMS 7.0.13. (no CVSS)
- [CVE-2019-7236](https://cve.now/CVE-2019-7236.md): An issue was discovered in idreamsoft iCMS 7.0.13. (no CVSS)
- [CVE-2019-7237](https://cve.now/CVE-2019-7237.md): An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. (no CVSS)
- [CVE-2019-1565](https://cve.now/CVE-2019-1565.md): The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attac (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2019-1566](https://cve.now/CVE-2019-1566.md): The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unau (no CVSS, Palo Alto Networks PAN-OS)
- [CVE-2019-3911](https://cve.now/CVE-2019-3911.md): Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remo (no CVSS, Tenable LabKey Server Community Edition)
- [CVE-2019-3912](https://cve.now/CVE-2019-3912.md): An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /\_\_r1/ returnURL parameter allows an unaut (no CVSS, Tenable LabKey Server Community Edition)
- [CVE-2019-3913](https://cve.now/CVE-2019-3913.md): Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive (no CVSS, Tenable LabKey Server Community Edition)
- [CVE-2018-20748](https://cve.now/CVE-2018-20748.md): LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. (no CVSS)
- [CVE-2018-20749](https://cve.now/CVE-2018-20749.md): LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. (no CVSS)
- [CVE-2018-20750](https://cve.now/CVE-2018-20750.md): LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. (no CVSS)
- [CVE-2018-19027](https://cve.now/CVE-2018-19027.md): Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project (no CVSS, Omron CX-Protocol within CX-One)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.