# CVEs published 2019-11-16

3 CVEs were published on November 16, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19012](https://cve.now/CVE-2019-19012.md): An integer overflow in the search\_in\_range function in regexec.c in Oniguruma 6.x before 6.9.4\_rc2 leads to an out-of-bounds read, in which (no CVSS)
- [CVE-2019-19011](https://cve.now/CVE-2019-19011.md): MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette. (no CVSS)
- [CVE-2019-19010](https://cve.now/CVE-2019-19010.md): Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to d (no CVSS, limnoria)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.