CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- openmicroscopy omero OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web... 8.8 High
- domoticz Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options. 7.5 High
- domoticz Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer:... 9.8 Critical
- google chrome, opensuse backports sle, leap +2 more Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote... 6.5 Medium
- google chrome, opensuse backports sle, leap +2 more Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote... 6.5 Medium
- google chrome, opensuse backports sle, leap +2 more Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote... 6.5 Medium
- symonics libmysofa treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and... 9.8 Critical
- grandstream ucm6204 firmware Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL... 8.8 High
- grandstream ucm6204 firmware Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute... 8.8 High
- grandstream gxv3611ir hd firmware On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password. 9.8 Critical
- grandstream gxv3611ir hd firmware Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute... 8.8 High
- grandstream gxv3370 firmware, wp820 firmware +1 more Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated... 8.8 High
- grandstream gwn7610 firmware Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary... 8.8 High
- grandstream gwn7000 firmware, gwn7610 firmware +1 more Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote... 6.5 Medium
- grandstream gwn7000 firmware Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary... 8.8 High
- grandstream gac2500 firmware, gvc3202 firmware, gxp2200 firmware +2 more +4 more Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta,... 9.8 Critical
- long range zip project range zip The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip)... 5.5 Medium
- flatcore An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators... 7.2 High
- imagemagick, canonical ubuntu linux, debian linux +2 more In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders... 5.5 Medium
- robocode Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction 9.8 Critical
- zzzcms zzzphp ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the... 9.8 Critical
-
ucode-intelopenSUSE Security update for ucode-intel No score - wolfcms wolf cms Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin... 6.1 Medium
- hyphp hybbs An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an... 8.8 High
- imagemagick, debian linux +1 more In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function... 8.1 High
- provisio sitekiosk An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk... 9.8 Critical
- mybb A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote... 6.1 Medium
- tp-link tl-wr840n firmware TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage)... 7.5 High
- opensynergy blue sdk The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK... 7.5 High
- harmistechnology je messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory... 5.8 Medium
- harmistechnology je messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to... 7.7 High
- harmistechnology je messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to... 7.7 High
- harmistechnology je messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to... 5.4 Medium
- harmistechnology je messenger An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not... 8.5 High
- atlassian application links The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before... 8.7 High
- atlassian crowd The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from... 6.5 Medium
- atlassian crowd The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0... 6.1 Medium
- atlassian crowd The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows... 7.2 High
- atlassian crowd The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially... 7.5 High
- atlassian crowd The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before... 8.1 High
- online lottery php readymade script project lottery php readymade script PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF)... 8.8 High
- online lottery php readymade script project lottery php readymade script PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting ... 5.4 Medium
- norton core, symantec norton core firmware +1 more Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a... 6.8 Medium
- abine blur Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by... 7.5 High
- fusioninventory The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles... 7.5 High
- cobub razor Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify... 9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more A vulnerability was discovered where specific command line arguments are not properly discarded... 9.8 Critical
- burrow-wheeler aligner project aligner, canonical ubuntu linux +1 more BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the... 9.8 Critical
- bluecms project bluecms A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in... 9.8 Critical
- apache hbase Improper Authorization in org.apache.hbase:hbase 7.5 High
- Show olderLoading…