# CVEs published 2019-11-13

107 CVEs were published on November 13, 2019: 2 critical, 4 high. Days are UTC.

- [CVE-2019-3663](https://cve.now/CVE-2019-3663.md): Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability (CVSS 9.8, McAfee Advanced Threat Defense)
- [CVE-2019-3662](https://cve.now/CVE-2019-3662.md): Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability (CVSS 6.5, McAfee Advanced Threat Defense)
- [CVE-2019-3661](https://cve.now/CVE-2019-3661.md): Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 8.1, McAfee Advanced Threat Defense)
- [CVE-2019-18954](https://cve.now/CVE-2019-18954.md): Pomelo v2.2.5 allows external control of critical state data. (no CVSS, pomelo)
- [CVE-2019-3660](https://cve.now/CVE-2019-3660.md): Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests (CVSS 8.4, McAfee Advanced Threat Defense)
- [CVE-2011-0544](https://cve.now/CVE-2011-0544.md): phpbb 3.0.x-3.0.6 has an XSS vulnerability via the \[flash\] BB tag. (no CVSS, phpbb3)
- [CVE-2019-3650](https://cve.now/CVE-2019-3650.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 5.3, McAfee Advanced Threat Defense)
- [CVE-2019-3651](https://cve.now/CVE-2019-3651.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 8.8, McAfee Advanced Threat Defense)
- [CVE-2019-18952](https://cve.now/CVE-2019-18952.md): SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. (no CVSS)
- [CVE-2019-18951](https://cve.now/CVE-2019-18951.md): SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files. (no CVSS)
- [CVE-2019-5029](https://cve.now/CVE-2019-5029.md): An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. (CVSS 9.8, Exhibitor)
- [CVE-2010-5108](https://cve.now/CVE-2010-5108.md): Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. (no CVSS, trac)
- [CVE-2019-3649](https://cve.now/CVE-2019-3649.md): Advanced Threat Defense (ATD) - Information Disclosure vulnerability (CVSS 5.3, McAfee Advanced Threat Defense)
- [CVE-2019-3420](https://cve.now/CVE-2019-3420.md): All versions up to V2.5.0\_EG1T5\_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. (no CVSS, ZXHN H108N)
- [CVE-2019-13555](https://cve.now/CVE-2019-13555.md): In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and pr (no CVSS, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU:…)
- [CVE-2019-18240](https://cve.now/CVE-2019-18240.md): In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely (no CVSS, Fuji Electric V-Server 4.0.6 and prior)
- [CVE-2019-0386](https://cve.now/CVE-2019-0386.md): Order processing in SAP ERP Sales (corrected in SAP\_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in (no CVSS, SAP SE SAP ERP Sales · SAP SE S4HANA Sales)
- [CVE-2019-0396](https://cve.now/CVE-2019-0396.md): SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficient (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0388](https://cve.now/CVE-2019-0388.md): SAP UI5 HTTP Handler (corrected in SAP\_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI\_700 version 2.0) allows an attacker to manipulate (no CVSS, SAP SE SAP UI)
- [CVE-2019-0391](https://cve.now/CVE-2019-0391.md): Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information wh (no CVSS, SAP SE SAP NetWeaver AS Java)
- [CVE-2019-0390](https://cve.now/CVE-2019-0390.md): Under certain conditions SAP Data Hub (corrected in DH\_Foundation version 2) allows an attacker to access information which would otherwise (no CVSS, SAP SE SAP Data Hub)
- [CVE-2019-0393](https://cve.now/CVE-2019-0393.md): An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry ou (no CVSS, SAP SE SAP Quality Management)
- [CVE-2019-0382](https://cve.now/CVE-2019-0382.md): A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related page (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0389](https://cve.now/CVE-2019-0389.md): An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may chang (no CVSS, SAP SE SAP NetWeaver Application Server Java)
- [CVE-2019-0385](https://cve.now/CVE-2019-0385.md): SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabil (no CVSS, SAP SE SAP Enable Now)
- [CVE-2013-3097](https://cve.now/CVE-2013-3097.md): Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router. (no CVSS)
- [CVE-2010-4817](https://cve.now/CVE-2010-4817.md): pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. (no CVSS, pithos)
- [CVE-2010-4664](https://cve.now/CVE-2010-4664.md): In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. (no CVSS, consolekit)
- [CVE-2019-18923](https://cve.now/CVE-2019-18923.md): Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from g (no CVSS)
- [CVE-2013-3366](https://cve.now/CVE-2013-3366.md): Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G (no CVSS)
- [CVE-2010-4661](https://cve.now/CVE-2010-4661.md): udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. (no CVSS, udisks)
- [CVE-2011-4972](https://cve.now/CVE-2011-4972.md): hook\_file\_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attacke (no CVSS, CKSource CKEditor Drupal module)
- [CVE-2013-4275](https://cve.now/CVE-2013-4275.md): Cross-site scripting (XSS) vulnerability in the zen\_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, an (no CVSS, Zen theme)
- [CVE-2013-3367](https://cve.now/CVE-2013-3367.md): Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a (no CVSS)
- [CVE-2014-1214](https://cve.now/CVE-2014-1214.md): views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and e (no CVSS)
- [CVE-2012-5193](https://cve.now/CVE-2012-5193.md): Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2019-17550](https://cve.now/CVE-2019-17550.md): The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2019-17515](https://cve.now/CVE-2019-17515.md): The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). (no CVSS)
- [CVE-2010-4657](https://cve.now/CVE-2010-4657.md): PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. (no CVSS, php5)
- [CVE-2019-18837](https://cve.now/CVE-2019-18837.md): An issue was discovered in crun before 0.10.5. (no CVSS, crun)
- [CVE-2019-18883](https://cve.now/CVE-2019-18883.md): XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field. (no CVSS)
- [CVE-2019-18884](https://cve.now/CVE-2019-18884.md): index.php/team\_members/add\_team\_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users. (no CVSS)
- [CVE-2019-9467](https://cve.now/CVE-2019-9467.md): In the Bootloader, there is a possible kernel command injection due to missing command sanitization. (no CVSS, Android)
- [CVE-2019-2210](https://cve.now/CVE-2019-2210.md): In load\_logging\_config of qmi\_vs\_service.cc, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2010-4654](https://cve.now/CVE-2010-4654.md): poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. (no CVSS, poppler)
- [CVE-2013-3516](https://cve.now/CVE-2013-3516.md): NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the (no CVSS)
- [CVE-2019-18793](https://cve.now/CVE-2019-18793.md): Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter. (no CVSS)
- [CVE-2010-4653](https://cve.now/CVE-2010-4653.md): An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts. (no CVSS, poppler)
- [CVE-2019-18844](https://cve.now/CVE-2019-18844.md): The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci\_core.h (in (no CVSS)
- [CVE-2012-2237](https://cve.now/CVE-2012-2237.md): Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arb (no CVSS, Mahara)
- [CVE-2019-16951](https://cve.now/CVE-2019-16951.md): A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. (no CVSS)
- [CVE-2010-4533](https://cve.now/CVE-2010-4533.md): offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a fla (no CVSS, offlineimap)
- [CVE-2019-16950](https://cve.now/CVE-2019-16950.md): An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. (no CVSS)
- [CVE-2013-3517](https://cve.now/CVE-2013-3517.md): Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L. (no CVSS)
- [CVE-2019-2214](https://cve.now/CVE-2019-2214.md): In binder\_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2213](https://cve.now/CVE-2019-2213.md): In binder\_free\_transaction of binder.c, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2019-2036](https://cve.now/CVE-2019-2036.md): In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. (no CVSS, Android)
- [CVE-2019-2198](https://cve.now/CVE-2019-2198.md): In Download Provider, there is a possible SQL injection vulnerability. (no CVSS, Android)
- [CVE-2019-2196](https://cve.now/CVE-2019-2196.md): In Download Provider, there is possible SQL injection. (no CVSS, Android)
- [CVE-2019-2209](https://cve.now/CVE-2019-2209.md): In BTA\_DmPinReply of bta\_dm\_api.cc, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2019-2208](https://cve.now/CVE-2019-2208.md): In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug (no CVSS, Android)
- [CVE-2019-2212](https://cve.now/CVE-2019-2212.md): In poisson\_distribution of random, there is an out of bounds read. (no CVSS, Android)
- [CVE-2019-2207](https://cve.now/CVE-2019-2207.md): In nfa\_hci\_handle\_admin\_gate\_rsp of nfa\_hci\_act.cc, there is a possible out of bound write due to missing bounds checks. (no CVSS, Android)
- [CVE-2019-2233](https://cve.now/CVE-2019-2233.md): In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. (no CVSS, Android)
- [CVE-2019-2206](https://cve.now/CVE-2019-2206.md): In rw\_i93\_sm\_set\_read\_only of rw\_i93.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2205](https://cve.now/CVE-2019-2205.md): In ProxyResolverV8::SetPacScript of proxy\_resolver\_v8.cc, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2019-16949](https://cve.now/CVE-2019-16949.md): An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. (no CVSS)
- [CVE-2019-2204](https://cve.now/CVE-2019-2204.md): In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. (no CVSS, Android)
- [CVE-2019-2203](https://cve.now/CVE-2019-2203.md): In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-2202](https://cve.now/CVE-2019-2202.md): In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2019-2201](https://cve.now/CVE-2019-2201.md): In generate\_jsimd\_ycc\_rgb\_convert\_neon of jsimd\_arm64\_neon.S, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2019-2197](https://cve.now/CVE-2019-2197.md): In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. (no CVSS, Android)
- [CVE-2019-2211](https://cve.now/CVE-2019-2211.md): In createProjectionMapForQuery of TvProvider.java, there is possible SQL injection. (no CVSS, Android)
- [CVE-2019-18279](https://cve.now/CVE-2019-18279.md): In Phoenix SCT WinFlash 1.1.12.0 through 1.5.74.0, the included drivers could be used by a malicious Windows application to gain elevated pr (CVSS 8.8)
- [CVE-2013-4657](https://cve.now/CVE-2013-4657.md): Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service. (no CVSS)
- [CVE-2019-2199](https://cve.now/CVE-2019-2199.md): In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2019-2195](https://cve.now/CVE-2019-2195.md): In tokenize of sqlite3\_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. (no CVSS, Android)
- [CVE-2019-2193](https://cve.now/CVE-2019-2193.md): In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. (no CVSS, Android)
- [CVE-2019-2192](https://cve.now/CVE-2019-2192.md): In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. (no CVSS, Android)
- [CVE-2010-4532](https://cve.now/CVE-2010-4532.md): offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-th (no CVSS, offlineimap)
- [CVE-2019-16948](https://cve.now/CVE-2019-16948.md): An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. (no CVSS)
- [CVE-2019-5293](https://cve.now/CVE-2019-5293.md): Some Huawei products have a memory leak vulnerability when handling some messages. (no CVSS, AR120-S, AR1200, AR1200-S, AR150, AR150-S, AR160, AR200, AR…)
- [CVE-2019-5294](https://cve.now/CVE-2019-5294.md): There is an out of bound read vulnerability in some Huawei products. (no CVSS, AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,A…)
- [CVE-2014-8167](https://cve.now/CVE-2014-8167.md): vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack (no CVSS, vdsm and vdsclient)
- [CVE-2019-5289](https://cve.now/CVE-2019-5289.md): Gauss100 OLTP database in ManageOne with versions of 6.5.0 have an out-of-bounds read vulnerability due to the insufficient checks of the sp (no CVSS, ManageOne)
- [CVE-2012-4385](https://cve.now/CVE-2012-4385.md): letodms 3.3.6 has CSRF via change password (no CVSS, letodms)
- [CVE-2013-4654](https://cve.now/CVE-2013-4654.md): Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. (no CVSS)
- [CVE-2019-5292](https://cve.now/CVE-2019-5292.md): Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), (no CVSS, Honor 10 Lite, Honor 8A, Huawei Y6)
- [CVE-2012-4384](https://cve.now/CVE-2012-4384.md): letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar (no CVSS, letodms)
- [CVE-2019-18929](https://cve.now/CVE-2019-18929.md): Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a do (no CVSS)
- [CVE-2019-18930](https://cve.now/CVE-2019-18930.md): Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a sta (no CVSS)
- [CVE-2014-3655](https://cve.now/CVE-2014-3655.md): JBoss KeyCloak is vulnerable to soft token deletion via CSRF (no CVSS, JBoss KeyCloak · org.keycloak:keycloak-services)
- [CVE-2019-18931](https://cve.now/CVE-2019-18931.md): Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GE (no CVSS)
- [CVE-2014-3592](https://cve.now/CVE-2014-3592.md): OpenShift Origin: Improperly validated team names could allow stored XSS attacks (no CVSS, OpenShift Origin)
- [CVE-2013-4655](https://cve.now/CVE-2013-4655.md): Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service. (no CVSS)
- [CVE-2019-15948](https://cve.now/CVE-2019-15948.md): Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a b (no CVSS)
- [CVE-2019-5288](https://cve.now/CVE-2019-5288.md): P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient che (no CVSS, P30)
- [CVE-2013-4656](https://cve.now/CVE-2013-4656.md): Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service. (no CVSS)
- [CVE-2019-5287](https://cve.now/CVE-2019-5287.md): P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient che (no CVSS, P30)
- [CVE-2019-18839](https://cve.now/CVE-2019-18839.md): FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. (no CVSS)
- [CVE-2019-17523](https://cve.now/CVE-2019-17523.md): An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parame (no CVSS)
- [CVE-2019-17524](https://cve.now/CVE-2019-17524.md): An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clie (no CVSS)
- [CVE-2019-18397](https://cve.now/CVE-2019-18397.md): A buffer overflow in the fribidi\_get\_par\_embedding\_levels\_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacke (no CVSS)
- [CVE-2019-5282](https://cve.now/CVE-2019-5282.md): Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9. (no CVSS, Emily-AL00A, Emily-TL00B, Emily-L09C, Emily-L29C)
- [CVE-2019-5279](https://cve.now/CVE-2019-5279.md): Huawei smart phones Emily-L29C with Versions earlier than 9.1.0.311(C10E2R1P13T8), Versions earlier than 9.1.0.311(C461E2R1P11T8), Versions (no CVSS, Emily-L29C)
- [CVE-2019-3641](https://cve.now/CVE-2019-3641.md): Exploitation of Authorization in TIE Server (CVSS 4.5, McAfee Threat Intelligence Exchange Server)
- [CVE-2019-3648](https://cve.now/CVE-2019-3648.md): Implicit loading of DLLs (CVSS 6.1, McAfee Total Protection)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.