# CVEs published 2019-11-02

10 CVEs were published on November 2, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-14360](https://cve.now/CVE-2019-14360.md): On Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found. (no CVSS)
- [CVE-2019-14358](https://cve.now/CVE-2019-14358.md): On Archos Safe-T devices, a side channel for the row-based OLED display was found. (no CVSS)
- [CVE-2019-18673](https://cve.now/CVE-2019-18673.md): On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found. (no CVSS)
- [CVE-2019-18668](https://cve.now/CVE-2019-18668.md): An issue was discovered in the Currency Switcher addon before 2.11.2 for WooCommerce if a user provides a currency that was not added by the (no CVSS)
- [CVE-2019-18667](https://cve.now/CVE-2019-18667.md): /usr/local/www/freeradius\_view\_config.php in the freeradius3 package before 0.15.7\_3 for pfSense on FreeBSD allows a user with an XSS payloa (no CVSS)
- [CVE-2019-18664](https://cve.now/CVE-2019-18664.md): The Log module in SECUDOS DOMOS before 5.6 allows XSS. (no CVSS)
- [CVE-2019-18665](https://cve.now/CVE-2019-18665.md): The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion. (no CVSS)
- [CVE-2019-18662](https://cve.now/CVE-2019-18662.md): An issue was discovered in YouPHPTube through 7.7. (no CVSS)
- [CVE-2019-18661](https://cve.now/CVE-2019-18661.md): Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check\_pwd return value from 0 to 1. (no CVSS)
- [CVE-2019-18659](https://cve.now/CVE-2019-18659.md): The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is n (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.