# CVEs published 2019-04-16

4 CVEs were published on April 16, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-7155](https://cve.now/CVE-2019-7155.md): An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x befor (no CVSS)
- [CVE-2018-18489](https://cve.now/CVE-2018-18489.md): The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attacker (no CVSS)
- [CVE-2018-19971](https://cve.now/CVE-2018-19971.md): JFrog Artifactory Pro 6.5.9 has Incorrect Access Control. (no CVSS)
- [CVE-2019-9845](https://cve.now/CVE-2019-9845.md): madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, (no CVSS, MadsKristensen.AspNetCore.Miniblog)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.