# CVEs published 2019-02-27

18 CVEs were published on February 27, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-1559](https://cve.now/CVE-2019-1559.md): 0-byte record padding oracle (no CVSS, OpenSSL)
- [CVE-2019-5665](https://cve.now/CVE-2019-5665.md): NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a f (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5666](https://cve.now/CVE-2019-5666.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateC (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5667](https://cve.now/CVE-2019-5667.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in wh (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5668](https://cve.now/CVE-2019-5668.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual i (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5669](https://cve.now/CVE-2019-5669.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a s (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5670](https://cve.now/CVE-2019-5670.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a s (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2019-5671](https://cve.now/CVE-2019-5671.md): NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the so (no CVSS, NVIDIA GPU Graphics Driver)
- [CVE-2018-1775](https://cve.now/CVE-2018-1775.md): IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authen (CVSS 6.5, IBM torwize · IBM Spectrum Virtualize for Public Cloud +3)
- [CVE-2019-4061](https://cve.now/CVE-2019-4061.md): IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets dep (CVSS 5.3, IBM BigFix Platform)
- [CVE-2018-20244](https://cve.now/CVE-2018-20244.md): In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrar (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2018-20797](https://cve.now/CVE-2018-20797.md): An issue was discovered in PoDoFo 0.9.6. (no CVSS)
- [CVE-2019-5491](https://cve.now/CVE-2019-5491.md): Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive informatio (no CVSS, NetApp Clustered Data ONTAP)
- [CVE-2019-8410](https://cve.now/CVE-2019-8410.md): Maccms 8.0 allows XSS via the inc/config/cache.php t\_key parameter because template/paody/html/vod\_type.html mishandles the keywords paramet (no CVSS)
- [CVE-2019-9211](https://cve.now/CVE-2019-9211.md): There is a reachable assertion abort in the function write\_long\_string\_missing\_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1 (no CVSS)
- [CVE-2019-9212](https://cve.now/CVE-2019-9212.md): SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklistin (no CVSS, com.alipay.sofa:hessian)
- [CVE-2019-9210](https://cve.now/CVE-2019-9210.md): In AdvanceCOMP 2.1, png\_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an at (no CVSS)
- [CVE-2019-7006](https://cve.now/CVE-2019-7006.md): Avaya one-X Communicator Weak Encryption (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.