# CVEs published 2019-02-09

14 CVEs were published on February 9, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5154](https://cve.now/CVE-2009-5154.md): An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. (no CVSS)
- [CVE-2019-7673](https://cve.now/CVE-2019-7673.md): An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. (no CVSS)
- [CVE-2019-7674](https://cve.now/CVE-2019-7674.md): An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. (no CVSS)
- [CVE-2019-7675](https://cve.now/CVE-2019-7675.md): An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. (no CVSS)
- [CVE-2019-7676](https://cve.now/CVE-2019-7676.md): A weak password vulnerability was discovered in Enphase Envoy R3.\*.\*. (no CVSS)
- [CVE-2019-7677](https://cve.now/CVE-2019-7677.md): XSS exists in Enphase Envoy R3.\*.\* via the profileName parameter to the /home URI on TCP port 8888. (no CVSS)
- [CVE-2019-7678](https://cve.now/CVE-2019-7678.md): A directory traversal vulnerability was discovered in Enphase Envoy R3.\*.\* via images/, include/, include/js, or include/css on TCP port 888 (no CVSS)
- [CVE-2019-7684](https://cve.now/CVE-2019-7684.md): inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. (no CVSS)
- [CVE-2019-7662](https://cve.now/CVE-2019-7662.md): An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. (no CVSS)
- [CVE-2019-7663](https://cve.now/CVE-2019-7663.md): An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif\_dirwrite.c in LibTIFF 4.0.10, affectin (no CVSS)
- [CVE-2019-7664](https://cve.now/CVE-2019-7664.md): In elfutils 0.175, a negative-sized memcpy is attempted in elf\_cvt\_note in libelf/note\_xlate.h because of an incorrect overflow check. (no CVSS)
- [CVE-2019-7665](https://cve.now/CVE-2019-7665.md): In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32\_xlatetom in elf32\_xlatetom.c in libelf. (no CVSS)
- [CVE-2019-7659](https://cve.now/CVE-2019-7659.md): Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified o (no CVSS)
- [CVE-2019-7653](https://cve.now/CVE-2019-7653.md): The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working director (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.