# CVEs published 2019-11-29 33 CVEs were published on November 29, 2019: 0 critical, 4 high. Days are UTC. - [CVE-2019-19451](https://cve.now/CVE-2019-19451.md): When GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid codepoint in the current encoding, it enters an en (no CVSS) - [CVE-2015-0837](https://cve.now/CVE-2015-0837.md): The mpi\_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timin (no CVSS, GNU Libgcrypt · GnuPG) - [CVE-2019-19396](https://cve.now/CVE-2019-19396.md): illumos, as used in OmniOS Community Edition before r151030y, allows a kernel crash via an application with multiple threads calling sendmsg (no CVSS) - [CVE-2014-3591](https://cve.now/CVE-2014-3591.md): Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proxim (no CVSS, GNU Libgcrypt · GnuPG) - [CVE-2015-2060](https://cve.now/CVE-2015-2060.md): cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute d (no CVSS) - [CVE-2015-1855](https://cve.now/CVE-2015-1855.md): verify\_certificate\_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does no (no CVSS, Ruby) - [CVE-2015-3406](https://cve.now/CVE-2015-3406.md): The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be t (no CVSS) - [CVE-2019-5309](https://cve.now/CVE-2019-5309.md): Honor play smartphones with versions earlier than 9.1.0.333(C00E333R1P1T8) have an information disclosure vulnerability in certain Huawei . (no CVSS, Honor play) - [CVE-2019-5271](https://cve.now/CVE-2019-5271.md): There is an information leak vulnerability in Huawei smart speaker Myna. (no CVSS, Myna) - [CVE-2019-5308](https://cve.now/CVE-2019-5308.md): Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. (no CVSS, Mate 20 RS) - [CVE-2019-5247](https://cve.now/CVE-2019-5247.md): Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerability. (no CVSS, Atlas 300, Atlas) - [CVE-2019-5268](https://cve.now/CVE-2019-5268.md): Some Huawei home routers have an input validation vulnerability. (no CVSS, CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRou…) - [CVE-2019-5269](https://cve.now/CVE-2019-5269.md): Some Huawei home routers have an improper authorization vulnerability. (no CVSS, CD10-10, CD16-10, CD17-10, CD18-10, HiRouter-CD15-10, HiRou…) - [CVE-2019-5218](https://cve.now/CVE-2019-5218.md): There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. (no CVSS, Huawei Band 2, Honor Band) - [CVE-2019-5211](https://cve.now/CVE-2019-5211.md): The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. (no CVSS, P20) - [CVE-2019-5232](https://cve.now/CVE-2019-5232.md): There is a use of insufficiently random values vulnerability in Huawei ViewPoint products. (no CVSS, VP9630, VP9650, VP9660) - [CVE-2019-5212](https://cve.now/CVE-2019-5212.md): There is an improper access control vulnerability in Huawei Share. (no CVSS, P20) - [CVE-2019-5210](https://cve.now/CVE-2019-5210.md): Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have an (no CVSS, Nova 5i pro, Nova) - [CVE-2019-5227](https://cve.now/CVE-2019-5227.md): P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00 (no CVSS, P30, P30 Pro, Mate 20, HiSuite) - [CVE-2019-5263](https://cve.now/CVE-2019-5263.md): HiSuite with 9.1.0.305 and earlier versions and 9.1.0.305(MAC) and earlier versions and HwBackup with earlier versions before 9.1.1.308 have (no CVSS, HiSuite, HwBackup) - [CVE-2019-5224](https://cve.now/CVE-2019-5224.md): P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. (no CVSS, P30) - [CVE-2019-5225](https://cve.now/CVE-2019-5225.md): P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00 (no CVSS, P30, Mate 20, P30 Pro) - [CVE-2019-5226](https://cve.now/CVE-2019-5226.md): P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than VOGUE-AL00 (no CVSS, P30, P30 Pro, Mate 20, HiSuite) - [CVE-2019-18922](https://cve.now/CVE-2019-18922.md): A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 \[1.00.047\] allows unauthenticated (no CVSS) - [CVE-2019-16767](https://cve.now/CVE-2019-16767.md): In EzMaster before 5.2.11 docker containers were executed with advanced privileges by default (CVSS 6.6, Inist-CNRS ezmaster) - [CVE-2019-16766](https://cve.now/CVE-2019-16766.md): 2FA bypass in Wagtail through new device path (CVSS 8.7, Lab Digital wagtail-2fa · wagtail-2fa) - [CVE-2019-19378](https://cve.now/CVE-2019-19378.md): In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index\_rbio\_pages in fs/ (CVSS 7.8) - [CVE-2019-19377](https://cve.now/CVE-2019-19377.md): In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-fr (no CVSS) - [CVE-2019-19391](https://cve.now/CVE-2019-19391.md): In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrar (no CVSS) - [CVE-2019-14901](https://cve.now/CVE-2019-14901.md): A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. (CVSS 8.8, Red Hat kernel) - [CVE-2019-14897](https://cve.now/CVE-2019-14897.md): A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. (CVSS 6.6, Red Hat kernel) - [CVE-2019-14895](https://cve.now/CVE-2019-14895.md): A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. (CVSS 8.0, Red Hat kernel) - [CVE-2019-14865](https://cve.now/CVE-2019-14865.md): A flaw was found in the grub2-set-bootflag utility of grub2. (CVSS 5.9, \[UNKNOWN\] grub2) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-11-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.