# CVEs published 2019-04-21 26 CVEs were published on April 21, 2019: 0 critical, 2 high. Days are UTC. - [CVE-2019-11428](https://cve.now/CVE-2019-11428.md): I, Librarian 4.10 has XSS via the export.php export\_files parameter. (no CVSS) - [CVE-2019-11427](https://cve.now/CVE-2019-11427.md): An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter. (no CVSS) - [CVE-2019-11426](https://cve.now/CVE-2019-11426.md): An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab paramete (no CVSS) - [CVE-2019-11418](https://cve.now/CVE-2019-11418.md): apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface. (no CVSS) - [CVE-2019-11417](https://cve.now/CVE-2019-11417.md): system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the (no CVSS) - [CVE-2018-20818](https://cve.now/CVE-2018-20818.md): A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC\_v2 and OpenPLC\_v3 versions. (no CVSS) - [CVE-2019-11416](https://cve.now/CVE-2019-11416.md): A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/us (no CVSS) - [CVE-2019-11415](https://cve.now/CVE-2019-11415.md): An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. (no CVSS) - [CVE-2019-11414](https://cve.now/CVE-2019-11414.md): An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. (no CVSS) - [CVE-2019-11413](https://cve.now/CVE-2019-11413.md): An issue was discovered in Artifex MuJS 1.0.5. (no CVSS) - [CVE-2019-11412](https://cve.now/CVE-2019-11412.md): An issue was discovered in Artifex MuJS 1.0.5. (no CVSS) - [CVE-2019-11411](https://cve.now/CVE-2019-11411.md): An issue was discovered in Artifex MuJS 1.0.5. (no CVSS) - [CVE-2019-11235](https://cve.now/CVE-2019-11235.md): FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group e (no CVSS) - [CVE-2019-11234](https://cve.now/CVE-2019-11234.md): FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2 (no CVSS) - [CVE-2019-11405](https://cve.now/CVE-2019-11405.md): OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build (CVSS 8.1, org.openapitools:openapi-generator) - [CVE-2019-11404](https://cve.now/CVE-2019-11404.md): arrow-kt Arrow before 0.9.0 resolved Gradle build artifacts (for compiling and building the published JARs) over HTTP instead of HTTPS. (CVSS 8.1, io.arrow-kt:arrow-ank-gradle) - [CVE-2019-11403](https://cve.now/CVE-2019-11403.md): In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the (no CVSS) - [CVE-2019-11402](https://cve.now/CVE-2019-11402.md): In Gradle Enterprise before 2018.5.3, Build Cache Nodes did not store the credentials at rest in an encrypted format. (no CVSS) - [CVE-2019-11401](https://cve.now/CVE-2019-11401.md): A issue was discovered in SiteServer CMS 6.9.0. (no CVSS, sscms) - [CVE-2019-11395](https://cve.now/CVE-2019-11395.md): A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, (no CVSS) - [CVE-2019-11393](https://cve.now/CVE-2019-11393.md): An issue was discovered in /admin/users/update in M/Monit before 3.7.3. (no CVSS) - [CVE-2019-11391](https://cve.now/CVE-2019-11391.md): An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. (no CVSS) - [CVE-2019-11390](https://cve.now/CVE-2019-11390.md): An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. (no CVSS) - [CVE-2019-11389](https://cve.now/CVE-2019-11389.md): An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. (no CVSS) - [CVE-2019-11388](https://cve.now/CVE-2019-11388.md): An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. (no CVSS) - [CVE-2019-11387](https://cve.now/CVE-2019-11387.md): An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-04-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.