# CVEs published 2019-09-28

3 CVEs were published on September 28, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-16930](https://cve.now/CVE-2019-16930.md): Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exc (no CVSS)
- [CVE-2019-16941](https://cve.now/CVE-2019-16941.md): NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns E (no CVSS)
- [CVE-2019-16935](https://cve.now/CVE-2019-16935.md): The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server\_title field. (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.