# CVEs published 2019-10-19

3 CVEs were published on October 19, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2019-18214](https://cve.now/CVE-2019-18214.md): The Video\_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions becaus (CVSS 7.7)
- [CVE-2019-18209](https://cve.now/CVE-2019-18209.md): templates/pad.html in Etherpad-Lite 1.7.5 has XSS when the browser does not encode the path of the URL, as demonstrated by Internet Explorer (no CVSS)
- [CVE-2019-18202](https://cve.now/CVE-2019-18202.md): Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. (CVSS 5.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.