# CVEs published 2019-10-18

13 CVEs were published on October 18, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-18198](https://cve.now/CVE-2019-18198.md): In the Linux kernel before 5.3.4, a reference count usage error in the fib6\_rule\_suppress() function in the fib6 suppression feature of net/ (no CVSS)
- [CVE-2019-18197](https://cve.now/CVE-2019-18197.md): In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. (CVSS 7.5, nokogiri)
- [CVE-2019-4409](https://cve.now/CVE-2019-4409.md): HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. (no CVSS, HCL Traveler)
- [CVE-2019-13541](https://cve.now/CVE-2019-13541.md): In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processi (no CVSS, Horner Automation Cscape)
- [CVE-2019-13545](https://cve.now/CVE-2019-13545.md): In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, whic (no CVSS, Horner Automation Cscape)
- [CVE-2019-17367](https://cve.now/CVE-2019-17367.md): OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, fir (no CVSS)
- [CVE-2019-17526](https://cve.now/CVE-2019-17526.md): An issue was discovered in SageMath Sage Cell Server through 2019-10-05. (no CVSS)
- [CVE-2019-17393](https://cve.now/CVE-2019-17393.md): The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauth (no CVSS)
- [CVE-2019-17207](https://cve.now/CVE-2019-17207.md): A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11 (no CVSS)
- [CVE-2019-15901](https://cve.now/CVE-2019-15901.md): An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. (no CVSS)
- [CVE-2019-15900](https://cve.now/CVE-2019-15900.md): An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. (no CVSS)
- [CVE-2019-16919](https://cve.now/CVE-2019-16919.md): Harbor API has a Broken Access Control vulnerability. (no CVSS)
- [CVE-2019-17513](https://cve.now/CVE-2019-17513.md): An issue was discovered in Ratpack before 1.7.5. (no CVSS, io.ratpack:ratpack-core)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.