# CVEs published 2019-11-05

119 CVEs were published on November 5, 2019: 0 critical, 6 high. Days are UTC.

- [CVE-2019-8228](https://cve.now/CVE-2019-8228.md): in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8229](https://cve.now/CVE-2019-8229.md): In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8230](https://cve.now/CVE-2019-8230.md): In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settin (no CVSS, Adobe Systems Incorporated Magento · magento/core)
- [CVE-2019-8231](https://cve.now/CVE-2019-8231.md): In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can exe (no CVSS, Adobe Systems Incorporated Magento · magento/core)
- [CVE-2019-8232](https://cve.now/CVE-2019-8232.md): In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an authenti (no CVSS, Adobe Systems Incorporated Magento 1 & · magento/community-…)
- [CVE-2019-8233](https://cve.now/CVE-2019-8233.md): In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a re (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8155](https://cve.now/CVE-2019-8155.md): Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8154](https://cve.now/CVE-2019-8154.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8153](https://cve.now/CVE-2019-8153.md): A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8152](https://cve.now/CVE-2019-8152.md): A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento (no CVSS, Adobe Systems Incorporated Magento 1 & · magento/community-…)
- [CVE-2019-8151](https://cve.now/CVE-2019-8151.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8150](https://cve.now/CVE-2019-8150.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8149](https://cve.now/CVE-2019-8149.md): Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8148](https://cve.now/CVE-2019-8148.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8147](https://cve.now/CVE-2019-8147.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8146](https://cve.now/CVE-2019-8146.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8144](https://cve.now/CVE-2019-8144.md): A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8143](https://cve.now/CVE-2019-8143.md): A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8142](https://cve.now/CVE-2019-8142.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8141](https://cve.now/CVE-2019-8141.md): A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8140](https://cve.now/CVE-2019-8140.md): An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8139](https://cve.now/CVE-2019-8139.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8138](https://cve.now/CVE-2019-8138.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8137](https://cve.now/CVE-2019-8137.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8136](https://cve.now/CVE-2019-8136.md): An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8135](https://cve.now/CVE-2019-8135.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8134](https://cve.now/CVE-2019-8134.md): A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8133](https://cve.now/CVE-2019-8133.md): A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8131](https://cve.now/CVE-2019-8131.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8130](https://cve.now/CVE-2019-8130.md): A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8129](https://cve.now/CVE-2019-8129.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8128](https://cve.now/CVE-2019-8128.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8127](https://cve.now/CVE-2019-8127.md): A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8126](https://cve.now/CVE-2019-8126.md): An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8125](https://cve.now/CVE-2019-8125.md): A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8124](https://cve.now/CVE-2019-8124.md): An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior t (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8123](https://cve.now/CVE-2019-8123.md): An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento (no CVSS, Adobe Systems Incorporated Magento 1& · magento/community-e…)
- [CVE-2019-8122](https://cve.now/CVE-2019-8122.md): A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8121](https://cve.now/CVE-2019-8121.md): An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. (no CVSS, Adobe Systems Incorporated Magento · magento/community-e… +1)
- [CVE-2019-8120](https://cve.now/CVE-2019-8120.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2 (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8119](https://cve.now/CVE-2019-8119.md): A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8118](https://cve.now/CVE-2019-8118.md): Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed lo (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8117](https://cve.now/CVE-2019-8117.md): A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8116](https://cve.now/CVE-2019-8116.md): Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8115](https://cve.now/CVE-2019-8115.md): A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8114](https://cve.now/CVE-2019-8114.md): A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2 (no CVSS, Adobe Systems Incorporated Magento 1 & · magento/communi… +1)
- [CVE-2019-8113](https://cve.now/CVE-2019-8113.md): Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the c (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8112](https://cve.now/CVE-2019-8112.md): A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8111](https://cve.now/CVE-2019-8111.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8110](https://cve.now/CVE-2019-8110.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2011-1459](https://cve.now/CVE-2011-1459.md): The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service ( (no CVSS)
- [CVE-2019-8109](https://cve.now/CVE-2019-8109.md): A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8108](https://cve.now/CVE-2019-8108.md): Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8107](https://cve.now/CVE-2019-8107.md): An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8091](https://cve.now/CVE-2019-8091.md): A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. (no CVSS, Adobe Systems Incorporated Magento)
- [CVE-2019-8093](https://cve.now/CVE-2019-8093.md): An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2019-8092](https://cve.now/CVE-2019-8092.md): A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2011-1460](https://cve.now/CVE-2011-1460.md): WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks. (no CVSS)
- [CVE-2019-8090](https://cve.now/CVE-2019-8090.md): An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. (no CVSS, Adobe Systems Incorporated Magento · magento/community-edit…)
- [CVE-2016-4983](https://cve.now/CVE-2016-4983.md): A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files. (no CVSS, Fedora dovecot22)
- [CVE-2013-5123](https://cve.now/CVE-2013-5123.md): The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers (no CVSS, pip)
- [CVE-2019-5068](https://cve.now/CVE-2019-5068.md): An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. (CVSS 5.1, Mesa 3D X11 Graphics library)
- [CVE-2019-6142](https://cve.now/CVE-2019-6142.md): It has been reported that XSS is possible in Forcepoint Email Security, versions 8.5 and 8.5.3. (no CVSS, Forcepoint Email Security)
- [CVE-2019-5089](https://cve.now/CVE-2019-5089.md): An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. (CVSS 8.8, Investintech Able2Extract Professional)
- [CVE-2019-5088](https://cve.now/CVE-2019-5088.md): An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. (CVSS 8.8, Investintech.com Able2Extract Professional)
- [CVE-2019-16284](https://cve.now/CVE-2019-16284.md): A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary c (no CVSS, Multiple - See https://support.hp.com/rs-en/document/c06456…)
- [CVE-2018-19167](https://cve.now/CVE-2018-19167.md): CloakCoin through 2.2.2.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who ac (no CVSS)
- [CVE-2018-19166](https://cve.now/CVE-2018-19166.md): peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acqui (no CVSS)
- [CVE-2018-19165](https://cve.now/CVE-2018-19165.md): neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquire (no CVSS)
- [CVE-2018-19164](https://cve.now/CVE-2018-19164.md): reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acq (no CVSS)
- [CVE-2018-19163](https://cve.now/CVE-2018-19163.md): stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acq (no CVSS)
- [CVE-2018-19162](https://cve.now/CVE-2018-19162.md): Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires (no CVSS)
- [CVE-2011-1135](https://cve.now/CVE-2011-1135.md): Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2018-19161](https://cve.now/CVE-2018-19161.md): alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires ev (no CVSS)
- [CVE-2018-19160](https://cve.now/CVE-2018-19160.md): Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acqu (no CVSS)
- [CVE-2018-19159](https://cve.now/CVE-2018-19159.md): lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires e (no CVSS)
- [CVE-2018-19157](https://cve.now/CVE-2018-19157.md): Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquir (no CVSS)
- [CVE-2018-19156](https://cve.now/CVE-2018-19156.md): PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires (no CVSS)
- [CVE-2011-1134](https://cve.now/CVE-2011-1134.md): Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2018-19155](https://cve.now/CVE-2018-19155.md): navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. (no CVSS)
- [CVE-2018-19154](https://cve.now/CVE-2018-19154.md): HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. (no CVSS)
- [CVE-2018-19153](https://cve.now/CVE-2018-19153.md): particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. (no CVSS)
- [CVE-2018-19152](https://cve.now/CVE-2018-19152.md): emercoin through 0.7 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. (no CVSS)
- [CVE-2011-1133](https://cve.now/CVE-2011-1133.md): Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2019-1982](https://cve.now/CVE-2019-1982.md): Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability (CVSS 5.8, Cisco Firepower Management Center)
- [CVE-2019-1981](https://cve.now/CVE-2019-1981.md): Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2019-1980](https://cve.now/CVE-2019-1980.md): Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2019-1978](https://cve.now/CVE-2019-1978.md): Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2010-3674](https://cve.now/CVE-2010-3674.md): TYPO3 before 4.4.1 allows XSS in the frontend search box. (no CVSS)
- [CVE-2010-3673](https://cve.now/CVE-2010-3673.md): TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API. (no CVSS, typo3/cms-core)
- [CVE-2019-10084](https://cve.now/CVE-2019-10084.md): In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those s (no CVSS, Apache Software Foundation Impala)
- [CVE-2010-2222](https://cve.now/CVE-2010-2222.md): The \_ger\_parse\_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NU (no CVSS, Red Hat Directory Server)
- [CVE-2019-1877](https://cve.now/CVE-2019-1877.md): Cisco Enterprise Chat and Email Attachment Download Vulnerability (CVSS 6.5, Cisco Enterprise Chat and Email)
- [CVE-2010-3672](https://cve.now/CVE-2010-3672.md): TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension. (no CVSS, typo3/cms-fluid)
- [CVE-2005-2354](https://cve.now/CVE-2005-2354.md): Nvu 0.99+1.0pre uses an old copy of Mozilla XPCOM which can result in multiple security issues. (no CVSS, Nvu)
- [CVE-2010-3671](https://cve.now/CVE-2010-3671.md): TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote (no CVSS, typo3/cms-install)
- [CVE-2019-1734](https://cve.now/CVE-2019-1734.md): Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability (CVSS 5.5, Cisco NX-OS Software)
- [CVE-2010-3670](https://cve.now/CVE-2010-3670.md): TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function. (no CVSS, typo3/cms-frontend)
- [CVE-2019-15966](https://cve.now/CVE-2019-15966.md): A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a (CVSS 7.7, Cisco TelePresence Advanced Media Gateway)
- [CVE-2019-18780](https://cve.now/CVE-2019-18780.md): An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker (no CVSS)
- [CVE-2013-6275](https://cve.now/CVE-2013-6275.md): Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. (no CVSS)
- [CVE-2019-1789](https://cve.now/CVE-2019-1789.md): ClamAV Denial of Service Vulnerability (CVSS 7.5, Cisco ClamAV)
- [CVE-2019-12625](https://cve.now/CVE-2019-12625.md): ClamAV Zip Bomb Vulnerability (CVSS 7.5, Cisco ClamAV)
- [CVE-2013-5661](https://cve.now/CVE-2013-5661.md): Cache Poisoning issue exists in DNS Response Rate Limiting. (no CVSS)
- [CVE-2019-18631](https://cve.now/CVE-2019-18631.md): The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 (18.8), 3.5.2 (18 (no CVSS)
- [CVE-2019-17062](https://cve.now/CVE-2019-17062.md): An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShop (no CVSS)
- [CVE-2019-17211](https://cve.now/CVE-2019-17211.md): An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. (no CVSS)
- [CVE-2019-17212](https://cve.now/CVE-2019-17212.md): Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. (no CVSS)
- [CVE-2019-17598](https://cve.now/CVE-2019-17598.md): An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. (no CVSS, com.typesafe.play:play-ws\_2.12)
- [CVE-2013-6461](https://cve.now/CVE-2013-6461.md): Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits (no CVSS, Ruby Nokogiri gem · nokogiri)
- [CVE-2013-6460](https://cve.now/CVE-2013-6460.md): Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents (no CVSS, Ruby Nokogiri gem · nokogiri)
- [CVE-2013-6365](https://cve.now/CVE-2013-6365.md): Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions (no CVSS)
- [CVE-2013-6364](https://cve.now/CVE-2013-6364.md): Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book (no CVSS)
- [CVE-2019-17221](https://cve.now/CVE-2019-17221.md): PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. (no CVSS, phantomjs)
- [CVE-2016-1000002](https://cve.now/CVE-2016-1000002.md): gdm3 3.14.2 and possibly later has an information leak before screen lock (no CVSS)
- [CVE-2013-4110](https://cve.now/CVE-2013-4110.md): Cryptocat has an Unspecified Chat Participant User List Disclosure (no CVSS, Cryptocat)
- [CVE-2013-4107](https://cve.now/CVE-2013-4107.md): Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting (no CVSS, Cryptocat)
- [CVE-2019-10223](https://cve.now/CVE-2019-10223.md): A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. (CVSS 5.3, Red Hat kube-state-metrics · k8s.io/kube-state-metrics)
- [CVE-2019-3685](https://cve.now/CVE-2019-3685.md): Missing TLS certificate validation for HTTPS connections in osc (CVSS 7.4, Open Build Service)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.