CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm cloud privateIBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open...6.8 Medium
- ibm cloud privateIBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept...4.4 Medium
- ibm cloud privateIBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept...4.4 Medium
- ibm infosphere information server, infosphere information governance catalog, infosphere information server on cloud +2 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of...4.3 Medium
- ibm infosphere information governance catalog, infosphere information server on cloud +1 moreIBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker...7.4 High
- apple ios, macos, tvos +3 more +5 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12...5.5 Medium
- apple ios, macos, tvos +3 more +5 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...8.6 High
- apple ios, safari, iphone os +2 moreA cross-site scripting issue existed in Safari. This issue was addressed with improved URL...6.1 Medium
- apple ios, macos, tvos +2 more +4 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1...7.8 High
- apple ios, macos, tvos +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple ios, macos, ios and macos +2 more +4 moreA logic issue existed in the handling of Group FaceTime calls. The issue was addressed with...7.5 High
- apple ios, itunes, macos +3 more +5 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12...7.8 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...5.5 Medium
- apple ios, macos, watchos +2 more +4 moreA denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1...7.5 High
- apple ios, macos, tvos +2 more +4 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...8.6 High
- apple ios, macos, tvos +4 more +6 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3,...7.8 High
- apple ios, macos, iphone os +1 more +3 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ios, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, macos, tvos +4 more +6 moreAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...5.5 Medium
- apple ios, macos, tvos +3 more +5 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium
- apple ios, macos, tvos +2 more +4 moreA memory corruption issue was addressed with improved lock state checking. This issue is fixed in...7.8 High
- apple ios, macos, watchos +2 more +4 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12...7.8 High
- apple ios, macos, iphone os +1 more +3 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12...8.8 High
- opensuse supportutilsLocal root exploit via inclusion of attacker controlled shell script7.3 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside...6.5 Medium
- ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code...9.8 Critical
- ultravncUltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE...9.8 Critical
- ultravncUltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code,...9.8 Critical
- ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow...7.5 High
- ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results...9.8 Critical
- ultravncUltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can...9.8 Critical
- schoolcmsSchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c...7.2 High
- yzmcmsAn issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin...4.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...5.5 Medium
- netapp snapcenter serverNetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an...5.3 Medium
- netapp snapcenter serverNetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that...4.8 Medium
- apple ios, itunes, macos +7 more +9 moreA memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1...10.0 Critical
- apple ios, iphone os +1 moreAn issue existed with autofill resuming after it was canceled. The issue was addressed with...9.8 Critical
- incsub forminatorThe "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL...6.5 Medium
- incsub forminatorThe "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a...6.1 Medium
- flarumchinaFlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.9.8 Critical
- opensuse factory, suse linux enterprise server 15, obs-service-tar scm +2 moreobs-service-extract_file's outfilename parameter allows to write files outside of package directory4.3 Medium
- druide antidoteDruide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows...9.1 Critical
- bluemindIn BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application...7.5 High
- eloan project eloanEloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the...9.8 Critical
- wdoyo doyocmsAn issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.4.8 Medium
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 moreDeserialization of Untrusted Data7.5 High
- Show moreLoading…