# CVEs published 2019-05-05

2 CVEs were published on May 5, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-11767](https://cve.now/CVE-2019-11767.md): Server side request forgery (SSRF) in phpBB before 3.2.6 allows checking for the existence of files and services on the local network of the (no CVSS, phpbb/phpbb)
- [CVE-2019-11766](https://cve.now/CVE-2019-11766.md): dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6\_OPTION\_PD\_EXCLUDE feature. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-05-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.