# CVEs published 2019-11-17

4 CVEs were published on November 17, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19041](https://cve.now/CVE-2019-19041.md): An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. (no CVSS)
- [CVE-2019-19040](https://cve.now/CVE-2019-19040.md): KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{ (no CVSS, org.kairosdb:kairosdb)
- [CVE-2019-19035](https://cve.now/CVE-2019-19035.md): jhead 3.03 is affected by: heap-based buffer over-read. (no CVSS)
- [CVE-2019-19022](https://cve.now/CVE-2019-19022.md): iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.