# CVEs published 2019-11-30

5 CVEs were published on November 30, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19468](https://cve.now/CVE-2019-19468.md): Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as (no CVSS)
- [CVE-2019-19463](https://cve.now/CVE-2019-19463.md): The Anhui Huami Mi Fit application before 4.0.11 for Android has an Unencrypted Update Check. (no CVSS)
- [CVE-2019-19464](https://cve.now/CVE-2019-19464.md): The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics. (no CVSS)
- [CVE-2019-19462](https://cve.now/CVE-2019-19462.md): relay\_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by t (no CVSS)
- [CVE-2013-7484](https://cve.now/CVE-2013-7484.md): Zabbix before 5.0 represents passwords in the users table with unsalted MD5. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-11-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.