# CVEs published 2019-11-09 29 CVEs were published on November 9, 2019: 0 critical, 2 high. Days are UTC. - [CVE-2019-18845](https://cve.now/CVE-2019-18845.md): The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB before 1.1 allow local users (including low integrity processes) to read and writ (no CVSS) - [CVE-2019-18840](https://cve.now/CVE-2019-18840.md): In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. (CVSS 7.5) - [CVE-2009-5004](https://cve.now/CVE-2009-5004.md): qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security layer is in use . (no CVSS, qpid-cpp) - [CVE-2009-4011](https://cve.now/CVE-2009-4011.md): dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, an (no CVSS) - [CVE-2009-3614](https://cve.now/CVE-2009-3614.md): liboping 1.3.2 allows users reading arbitrary files upon the local system. (no CVSS, liboping) - [CVE-2009-3552](https://cve.now/CVE-2009-3552.md): In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Man (no CVSS, RHEV-M VDC) - [CVE-2009-2802](https://cve.now/CVE-2009-2802.md): MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. (no CVSS) - [CVE-2009-0035](https://cve.now/CVE-2009-0035.md): alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /us (no CVSS, alsa-driver) - [CVE-2019-5701](https://cve.now/CVE-2019-5701.md): NVIDIA GeForce Experience, all versions prior to 3.20.0.118, contains a vulnerability when GameStream is enabled in which an attacker with l (no CVSS, NVIDIA GeForce Experience) - [CVE-2019-5698](https://cve.now/CVE-2019-5698.md): NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin, in which an input index value is incorrectly validate (no CVSS, NVIDIA VGPU Display Driver) - [CVE-2019-5697](https://cve.now/CVE-2019-5697.md): NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which it may grant a guest access to memory that it does not own, whic (no CVSS, NVIDIA VGPU Display Driver) - [CVE-2019-5696](https://cve.now/CVE-2019-5696.md): NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leads (no CVSS, NVIDIA VGPU Display Driver) - [CVE-2019-5694](https://cve.now/CVE-2019-5694.md): NVIDIA Windows GPU Display Driver, R390 driver version, contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windo (no CVSS, NVIDIA GPU Display Driver) - [CVE-2019-5693](https://cve.now/CVE-2019-5693.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program acces (no CVSS, NVIDIA GPU Display Driver) - [CVE-2019-5692](https://cve.now/CVE-2019-5692.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, NVIDIA GPU Display Driver) - [CVE-2019-4645](https://cve.now/CVE-2019-4645.md): IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Cognos Analytics) - [CVE-2019-4581](https://cve.now/CVE-2019-4581.md): IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. (CVSS 6.1, IBM QRadar) - [CVE-2019-4556](https://cve.now/CVE-2019-4556.md): IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application contro (CVSS 4.3, IBM Qradar Advisor) - [CVE-2019-4509](https://cve.now/CVE-2019-4509.md): IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obt (CVSS 4.3, IBM QRadar) - [CVE-2019-4470](https://cve.now/CVE-2019-4470.md): IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. (CVSS 5.4, IBM QRadar) - [CVE-2019-4454](https://cve.now/CVE-2019-4454.md): IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. (CVSS 5.4, IBM QRadar) - [CVE-2019-4450](https://cve.now/CVE-2019-4450.md): IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. (CVSS 6.1, IBM i) - [CVE-2019-4412](https://cve.now/CVE-2019-4412.md): IBM Cognos Controller stores sensitive information in URL parameters. (CVSS 3.7, IBM Cognos Controller) - [CVE-2019-4411](https://cve.now/CVE-2019-4411.md): IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to gu (CVSS 4.3, IBM Cognos Controller) - [CVE-2019-4334](https://cve.now/CVE-2019-4334.md): IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against (CVSS 4.3, IBM Cognos Analytics) - [CVE-2018-1721](https://cve.now/CVE-2018-1721.md): IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. (CVSS 8.3, IBM Cognos Analytics) - [CVE-2019-5691](https://cve.now/CVE-2019-5691.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, NVIDIA GPU Display Driver) - [CVE-2019-5690](https://cve.now/CVE-2019-5690.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape (no CVSS, NVIDIA GPU Display Driver) - [CVE-2019-5689](https://cve.now/CVE-2019-5689.md): NVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability in the Downloader component in which a user with local sys (no CVSS, NVIDIA GeForce Experience) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-11-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.