# CVEs published 2019-12-11

73 CVEs were published on December 11, 2019: 3 critical, 6 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-5092](https://cve.now/CVE-2019-5092.md): An exploitable heap out of bounds write vulnerability exists in the UI tag parsing functionality of the DICOM image format of LEADTOOLS 20.0 (CVSS 8.8, LEADTOOLS)
- [CVE-2019-5154](https://cve.now/CVE-2019-5154.md): An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. (CVSS 8.8, LEADTOOLS)
- [CVE-2019-5091](https://cve.now/CVE-2019-5091.md): An exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality of LEADTOOLS libltdic.so version 20.0.2019.3 (CVSS 7.5, LEADTOOLS libltdic.so)
- [CVE-2019-5085](https://cve.now/CVE-2019-5085.md): An exploitable code execution vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0.2019.3.1 (CVSS 9.8, LEADTOOLS libltdic.so)
- [CVE-2019-5093](https://cve.now/CVE-2019-5093.md): An exploitable code execution vulnerability exists in the DICOM network response functionality of LEADTOOLS libltdic.so version 20.0.2019.3. (CVSS 8.1, LEADTOOLS libltdic.so)
- [CVE-2019-5090](https://cve.now/CVE-2019-5090.md): An exploitable information disclosure vulnerability exists in the DICOM packet-parsing functionality of LEADTOOLS libltdic.so, version 20.0. (CVSS 9.1, LEADTOOLS libltdic.so)
- [CVE-2019-7004](https://cve.now/CVE-2019-7004.md): Avaya IP Office XSS Vulnerability (CVSS 6.4, Avaya IP Office Application Server)
- [CVE-2019-10695](https://cve.now/CVE-2019-10695.md): When using the cd4pe::root\_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password (no CVSS, Continuous Delivery for Puppet Enterprise)
- [CVE-2019-10694](https://cve.now/CVE-2019-10694.md): The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admi (no CVSS, Puppet Enterprise)
- [CVE-2019-3983](https://cve.now/CVE-2019-3983.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insuffic (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3985](https://cve.now/CVE-2019-3985.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly saniti (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3986](https://cve.now/CVE-2019-3986.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly saniti (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3987](https://cve.now/CVE-2019-3987.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly saniti (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3988](https://cve.now/CVE-2019-3988.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly saniti (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-3989](https://cve.now/CVE-2019-3989.md): Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly saniti (no CVSS, Amazon's Blink XT2 Sync Module)
- [CVE-2019-18232](https://cve.now/CVE-2019-18232.md): SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configure (no CVSS, SafeNet Sentinel LDK License Manager Runtime)
- [CVE-2019-18245](https://cve.now/CVE-2019-18245.md): Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, (no CVSS, Reliable Controls LicenseManager)
- [CVE-2019-17087](https://cve.now/CVE-2019-17087.md): Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. (no CVSS, Micro Focus International AcuToWeb)
- [CVE-2019-0405](https://cve.now/CVE-2019-0405.md): SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of use (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0404](https://cve.now/CVE-2019-0404.md): SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disc (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0403](https://cve.now/CVE-2019-0403.md): SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to (no CVSS, SAP SE SAP Enable Now)
- [CVE-2019-0402](https://cve.now/CVE-2019-0402.md): SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, lea (no CVSS, SAP SE SAP Adaptive Server Enterprise)
- [CVE-2019-0399](https://cve.now/CVE-2019-0399.md): SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500\_702, 600\_740, 610\_740; unintentionally allow (no CVSS, SAP SE SAP Portfolio and Project Management)
- [CVE-2019-0398](https://cve.now/CVE-2019-0398.md): Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 a (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-0395](https://cve.now/CVE-2019-0395.md): SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2019-19729](https://cve.now/CVE-2019-19729.md): An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. (no CVSS, bson-objectid)
- [CVE-2019-19374](https://cve.now/CVE-2019-19374.md): An issue was discovered in core/assets/form/form\_question\_types/form\_question\_type\_file\_upload/form\_question\_type\_file\_upload.inc in Squiz M (no CVSS)
- [CVE-2019-19373](https://cve.now/CVE-2019-19373.md): An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3 (no CVSS)
- [CVE-2013-5743](https://cve.now/CVE-2013-5743.md): Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7. (no CVSS)
- [CVE-2013-5978](https://cve.now/CVE-2013-5978.md): Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote att (no CVSS)
- [CVE-2014-7257](https://cve.now/CVE-2014-7257.md): SQL injection vulnerability in DBD::PgPP 0.05 and earlier (no CVSS, DBD::PgPP)
- [CVE-2013-4303](https://cve.now/CVE-2013-4303.md): includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does (no CVSS, Wikimedia Foundation MediaWiki)
- [CVE-2013-3691](https://cve.now/CVE-2013-3691.md): AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL. (no CVSS)
- [CVE-2013-3542](https://cve.now/CVE-2013-3542.md): Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP\_HD, GXV3500, and possibly ot (no CVSS)
- [CVE-2019-19649](https://cve.now/CVE-2019-19649.md): Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter (no CVSS)
- [CVE-2013-4968](https://cve.now/CVE-2013-4968.md): Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, a (no CVSS)
- [CVE-2019-19650](https://cve.now/CVE-2019-19650.md): Zoho ManageEngine Applications Manager before 13640 allows a remote authenticated SQL injection via the Agent servlet agentid parameter to t (no CVSS)
- [CVE-2019-14317](https://cve.now/CVE-2019-14317.md): wolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces. (no CVSS)
- [CVE-2019-19577](https://cve.now/CVE-2019-19577.md): An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges b (no CVSS)
- [CVE-2019-19578](https://cve.now/CVE-2019-19578.md): An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pa (no CVSS)
- [CVE-2019-19580](https://cve.now/CVE-2019-19580.md): An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pag (no CVSS)
- [CVE-2019-19581](https://cve.now/CVE-2019-19581.md): An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access) because (no CVSS)
- [CVE-2019-19582](https://cve.now/CVE-2019-19582.md): An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) because certain bit i (no CVSS)
- [CVE-2019-19583](https://cve.now/CVE-2019-19583.md): An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service (guest OS crash) because VMX (no CVSS)
- [CVE-2019-18379](https://cve.now/CVE-2019-18379.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue th (no CVSS, Symantec Messaging Gateway)
- [CVE-2019-18378](https://cve.now/CVE-2019-18378.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a cross-site scripting (XSS) exploit, which is a type of issue that can e (no CVSS, Symantec Messaging Gateway)
- [CVE-2019-18377](https://cve.now/CVE-2019-18377.md): Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an (no CVSS, Symantec Messaging Gateway)
- [CVE-2014-0163](https://cve.now/CVE-2014-0163.md): Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. (no CVSS, Openshift)
- [CVE-2019-10772](https://cve.now/CVE-2019-10772.md): It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the "xlink:href" attribute due to mishandling of the xlink namespace by (no CVSS, enshrined/svg-sanitize)
- [CVE-2019-14899](https://cve.now/CVE-2019-14899.md): A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user (CVSS 7.4, Red Hat VPN)
- [CVE-2019-15009](https://cve.now/CVE-2019-15009.md): The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove anothe (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-15008](https://cve.now/CVE-2019-15008.md): The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrar (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-15007](https://cve.now/CVE-2019-15007.md): The review resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript vi (no CVSS, Atlassian Crucible · Atlassian Fisheye)
- [CVE-2019-4715](https://cve.now/CVE-2019-4715.md): IBM Spectrum Scale 4.2 and 5.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. (CVSS 8.8, IBM Spectrum Scale)
- [CVE-2019-4665](https://cve.now/CVE-2019-4665.md): IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Spectrum Scale)
- [CVE-2014-0091](https://cve.now/CVE-2014-0091.md): Foreman has improper input validation which could lead to partial Denial of Service (no CVSS, Foreman)
- [CVE-2014-0026](https://cve.now/CVE-2014-0026.md): katello-headpin is vulnerable to CSRF in REST API (no CVSS, katello-headpin)
- [CVE-2013-7371](https://cve.now/CVE-2013-7371.md): node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370 (no CVSS, node-connect · connect)
- [CVE-2013-7370](https://cve.now/CVE-2013-7370.md): node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware (no CVSS, connect)
- [CVE-2013-6495](https://cve.now/CVE-2013-6495.md): JBossWeb Bayeux has reflected XSS (no CVSS, JBossWeb Bayeux)
- [CVE-2013-4593](https://cve.now/CVE-2013-4593.md): RubyGem omniauth-facebook has an access token security vulnerability (no CVSS, omniauth-facebook)
- [CVE-2013-4245](https://cve.now/CVE-2013-4245.md): Orca has arbitrary code execution due to insecure Python module load (no CVSS, Orca)
- [CVE-2013-4158](https://cve.now/CVE-2013-4158.md): smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790) (no CVSS, smokeping)
- [CVE-2019-18960](https://cve.now/CVE-2019-18960.md): Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. (no CVSS)
- [CVE-2019-3667](https://cve.now/CVE-2019-3667.md): DLL Search Order Hijacking (CVSS 6.6, McAfee TechCheck)
- [CVE-2019-19720](https://cve.now/CVE-2019-19720.md): Yabasic 2.86.1 has a heap-based buffer overflow in the yylex() function in flex.c via a crafted BASIC source file. (no CVSS)
- [CVE-2019-19719](https://cve.now/CVE-2019-19719.md): Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page. (no CVSS)
- [CVE-2019-19708](https://cve.now/CVE-2019-19708.md): The VisualEditor extension through 1.34 for MediaWiki allows XSS via pasted content containing an element with a data-ve-clipboard-key attri (no CVSS)
- [CVE-2019-19709](https://cve.now/CVE-2019-19709.md): MediaWiki through 1.33.1 allows attackers to bypass the Title\_blacklist protection mechanism by starting with an arbitrary title, establishi (no CVSS, mediawiki/core)
- [CVE-2019-19707](https://cve.now/CVE-2019-19707.md): On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint d (no CVSS)
- [CVE-2019-5815](https://cve.now/CVE-2019-5815.md): Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via (no CVSS, Google Chrome · nokogiri)
- [CVE-2019-18935](https://cve.now/CVE-2019-18935.md): Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. (CVSS 9.8, KEV)
- [CVE-2019-19725](https://cve.now/CVE-2019-19725.md): sysstat through 12.2.0 has a double free in check\_file\_actlst in sa\_common.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.