# CVEs published 2019-02-24

12 CVEs were published on February 24, 2019: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-9082](https://cve.now/CVE-2019-9082.md): ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\\think\\app (CVSS 8.8, KEV)
- [CVE-2019-9078](https://cve.now/CVE-2019-9078.md): zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sC (no CVSS)
- [CVE-2018-20786](https://cve.now/CVE-2018-20786.md): libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (a (no CVSS)
- [CVE-2019-8375](https://cve.now/CVE-2019-8375.md): The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent t (no CVSS)
- [CVE-2019-9070](https://cve.now/CVE-2019-9070.md): An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9071](https://cve.now/CVE-2019-9071.md): An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9072](https://cve.now/CVE-2019-9072.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9073](https://cve.now/CVE-2019-9073.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9074](https://cve.now/CVE-2019-9074.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9075](https://cve.now/CVE-2019-9075.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9076](https://cve.now/CVE-2019-9076.md): An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. (no CVSS)
- [CVE-2019-9077](https://cve.now/CVE-2019-9077.md): An issue was discovered in GNU Binutils 2.32. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.