CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists in the way that the Windows Graphics Device...8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft .net framework, visual studio, .net framework 2.0 +12 more +14 moreA remote code execution vulnerability exists in .NET Framework and Visual Studio software when...8.8 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft internet explorerA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft sharepoint, sharepoint enterprise server, sharepoint foundation +1 more +3 moreA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to...9.8 Critical
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Human Interface Devices (HID) component...4.7 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreAn information disclosure vulnerability exists when the Human Interface Devices (HID) component...4.7 Medium
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft windows, windows server, windows 10 +7 more +9 moreA remote code execution vulnerability exists when the Windows Jet Database Engine improperly...7.8 High
- microsoft sharepoint enterprise server, sharepoint foundation, sharepoint server +2 moreA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to...8.8 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft edge, chakracore +1 moreA remote code execution vulnerability exists in the way that the scripting engine handles objects...7.5 High
- microsoft office, excel viewer, office compatibility pack +3 more +5 moreA security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An...5.5 Medium
- yubico libu2f-hostIn devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking...7.5 High
- sagemcom f\@st 5260 firmwareSagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK...5.3 Medium
- hashicorp consulHashiCorp Consul Access Restriction Bypass8.1 High
- adenion blog2socialThe Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship...6.1 Medium
- quizandsurveymaster quiz and survey masterThe Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page...6.1 Medium
- mishubd wp human resource managementThe WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave...7.5 High
- mishubd wp human resource managementThe WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.7.5 High
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a...9.8 Critical
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a...8.8 High
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to...8.8 High
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to...8.8 High
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard...9.8 Critical
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote,...7.5 High
- apache mesosStack Overflow in Apache Mesos7.5 High
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated...6.1 Medium
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker...9.8 Critical
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreCross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the...8.8 High
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially...6.5 Medium
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreSeveral buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow...9.8 Critical
- ics-cert psi gridconnect gmbh (formerly known as psi nentec gmbh) telecontrol gateway and smart telecontrol unit family, iec104 security proxy., psigridconnect iec104 security proxy firmware, smart telecontrol unit tcg firmware +3 more +5 morePSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy...8.8 High
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication...9.8 Critical
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device...9.1 Critical
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS does not properly check authority on server side, which results in a read-only...7.5 High
- ics-cert moxa iks, eds, moxa eds-405a firmware, eds-408a firmware +2 more +4 moreMoxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier version,...9.8 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive...5.9 Medium
- ibm financial transaction managerIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…