CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 morejackson-databind Deserialization of Untrusted Data vulnerability7.5 High
- fasterxml jackson-databind, oracle clusterware, communications instant messaging server +4 more +6 moreDeserialization of Untrusted Data in jackson-databind9.8 Critical
- dhcms project dhcmsDhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.4.8 Medium
- popojicmsAn issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act...8.8 High
- kaspersky lab vanilla forumsMultiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary...5.4 Medium
- invisioncommunity invision power boardStored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.6.1 Medium
- spdk storage performance development kitIn Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e.,...5.3 Medium
- solarwinds orion platformSolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ...9.8 Critical
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...8.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry:...8.8 High
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...8.8 High
- check point software technologies ltd. zonealarmCheck Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a...7.8 High
- netgate pfsenseIn pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication...7.5 High
- netgate pfsenseThe expiretable configuration in pfSense 2.4.4_1 establishes block durations that are...7.5 High
- carel pcoweb card firmwareThe Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows...7.5 High
- amazon ring video doorbell firmwareAmazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio...9.1 Critical
- misp-project mispIn MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for....5.3 Medium