# CVEs published 2019-11-27

49 CVEs were published on November 27, 2019: 0 critical, 5 high. Days are UTC.

- [CVE-2019-19318](https://cve.now/CVE-2019-19318.md): In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem\_down\_write\_slowpath use-after-free because (in rwsem\_can (no CVSS)
- [CVE-2019-19319](https://cve.now/CVE-2019-19319.md): In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access bec (no CVSS)
- [CVE-2019-18660](https://cve.now/CVE-2019-18660.md): The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable C (no CVSS)
- [CVE-2019-18253](https://cve.now/CVE-2019-18253.md): An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.1 (no CVSS, Relion 670 Series)
- [CVE-2019-18247](https://cve.now/CVE-2019-18247.md): An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3 (no CVSS, Relion 650 and 670 Series)
- [CVE-2019-6665](https://cve.now/CVE-2019-6665.md): On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterpris (no CVSS, F5 BIG-IP ASM · F5 BIG-IQ +2)
- [CVE-2019-6666](https://cve.now/CVE-2019-6666.md): On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream ser (no CVSS, F5 BIG-IP)
- [CVE-2019-6667](https://cve.now/CVE-2019-6667.md): On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TM (no CVSS, F5 BIG-IP)
- [CVE-2019-6668](https://cve.now/CVE-2019-6668.md): The BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.5 (no CVSS, F5 BIG-IP APM Edge Client)
- [CVE-2019-6669](https://cve.now/CVE-2019-6669.md): On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cau (no CVSS, F5 BIG-IP)
- [CVE-2019-6671](https://cve.now/CVE-2019-6671.md): On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing pac (no CVSS, BIG-IP)
- [CVE-2019-6672](https://cve.now/CVE-2019-6672.md): On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is configured on a wildcard virtual server on plat (no CVSS, F5 BIG-IP AFM)
- [CVE-2019-6670](https://cve.now/CVE-2019-6670.md): On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5, vCMP hypervisors are incorrectly e (no CVSS, F5 BIG-IP)
- [CVE-2019-6673](https://cve.now/CVE-2019-6673.md): On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may caus (no CVSS, F5 BIG-IP)
- [CVE-2019-6674](https://cve.now/CVE-2019-6674.md): On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining configuration. (no CVSS, F5 SSL Orchestrator)
- [CVE-2011-2717](https://cve.now/CVE-2011-2717.md): The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via she (no CVSS, dhcpv6 project dhcpv6)
- [CVE-2019-15705](https://cve.now/CVE-2019-15705.md): An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unaut (no CVSS, Fortinet FortiGate)
- [CVE-2011-2523](https://cve.now/CVE-2011-2523.md): vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp. (no CVSS, vsftpd)
- [CVE-2011-2515](https://cve.now/CVE-2011-2515.md): PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packag (no CVSS, packagekit)
- [CVE-2019-19366](https://cve.now/CVE-2019-19366.md): A cross-site scripting (XSS) vulnerability in app/xml\_cdr/xml\_cdr\_search.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2019-19367](https://cve.now/CVE-2019-19367.md): A cross-site scripting (XSS) vulnerability in app/fax/fax\_files.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2011-2480](https://cve.now/CVE-2011-2480.md): Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. (no CVSS, FreeBSD, NetBSD FreeBSD · FreeBSD, NetBSD NetBSD)
- [CVE-2014-3875](https://cve.now/CVE-2014-3875.md): The addto parameter to fup in Frams' Fast File EXchange (F\*EX, aka fex) before fex-2014053 allows remote attackers to conduct cross-site scr (no CVSS)
- [CVE-2013-2625](https://cve.now/CVE-2013-2625.md): An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2 (no CVSS)
- [CVE-2011-2207](https://cve.now/CVE-2011-2207.md): dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a special (no CVSS, dirmngr)
- [CVE-2012-2248](https://cve.now/CVE-2012-2248.md): An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable. (no CVSS, isc-dhcp)
- [CVE-2011-2187](https://cve.now/CVE-2011-2187.md): xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which a (no CVSS, xscreensaver)
- [CVE-2012-6655](https://cve.now/CVE-2012-6655.md): An issue exists AccountService 0.6.37 in the user\_change\_password\_authorized\_cb() function in user.c which could let a local users obtain en (no CVSS)
- [CVE-2016-1000110](https://cve.now/CVE-2016-1000110.md): The CGIHandler class in Python before 2.7.12 does not protect against the HTTP\_PROXY variable name clash in a CGI script, which could allow (no CVSS)
- [CVE-2011-2177](https://cve.now/CVE-2011-2177.md): OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools. (no CVSS, OpenOffice.org)
- [CVE-2019-18184](https://cve.now/CVE-2019-18184.md): Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function. (no CVSS)
- [CVE-2016-4980](https://cve.now/CVE-2016-4980.md): A password generation weakness exists in xquest through 2016-06-13. (no CVSS, xguest)
- [CVE-2017-12945](https://cve.now/CVE-2017-12945.md): Insufficient validation of user-supplied input for the Solstice Pod before 2.8.4 networking configuration enables authenticated attackers to (no CVSS)
- [CVE-2019-19330](https://cve.now/CVE-2019-19330.md): The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, AS (no CVSS)
- [CVE-2019-10220](https://cve.now/CVE-2019-10220.md): Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. (CVSS 8.0, SUSE kernel:)
- [CVE-2019-19327](https://cve.now/CVE-2019-19327.md): ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of (no CVSS)
- [CVE-2019-19328](https://cve.now/CVE-2019-19328.md): ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entit (no CVSS)
- [CVE-2019-19329](https://cve.now/CVE-2019-19329.md): In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, ar (no CVSS)
- [CVE-2019-19308](https://cve.now/CVE-2019-19308.md): In text\_to\_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that (no CVSS)
- [CVE-2019-14812](https://cve.now/CVE-2019-14812.md): A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileg (CVSS 7.3, Red Hat ghostscript)
- [CVE-2019-15298](https://cve.now/CVE-2019-15298.md): A problem was found in Centreon Web through 19.04.3. (no CVSS)
- [CVE-2019-13936](https://cve.now/CVE-2019-13936.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siemens AG Polarion could (CVSS 3.5, Siemens AG Polarion)
- [CVE-2019-13935](https://cve.now/CVE-2019-13935.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siemens AG Polarion could (CVSS 3.5, Siemens AG Polarion)
- [CVE-2019-13934](https://cve.now/CVE-2019-13934.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webclient of Siemens AG Polarion could (CVSS 3.5, Siemens AG Polarion)
- [CVE-2019-15300](https://cve.now/CVE-2019-15300.md): A problem was found in Centreon Web through 19.04.3. (no CVSS)
- [CVE-2019-10216](https://cve.now/CVE-2019-10216.md): In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass \`-dSA (CVSS 7.3, ghostscript)
- [CVE-2019-14867](https://cve.now/CVE-2019-14867.md): A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way th (CVSS 8.8, Red Hat ipa · ipa +1)
- [CVE-2019-14896](https://cve.now/CVE-2019-14896.md): A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. (CVSS 7.8, Red Hat kernel)
- [CVE-2019-10195](https://cve.now/CVE-2019-10195.md): A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way th (CVSS 5.7, Red Hat IPA · ipa +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.