CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- apache traffic serversslheaders plugin extracts information from the client certificate and sets headers in the...7.5 High
- phpshePHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.9.8 Critical
- directadminJBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.8.8 High
- webminWebmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file...7.8 High
- fengoffice feng officeFeng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a ...9.8 Critical
- ebrigadeeBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile...4.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.7.5 High
- gnome gdk-pixbuf, nautilus +1 moreGdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04,...7.8 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...8.8 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...7.2 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL...7.2 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a...8.8 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...7.2 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...8.8 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html...6.5 Medium
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. It has admin/cms/template/getTemplates.html...4.3 Medium
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...8.8 High
- ofcms project ofcmsAn issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code...8.8 High
- medical store script project store scriptPHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent...5.3 Medium
- personal video collection script project video collection scriptPHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile"...5.4 Medium
- cisco nx-os software, nx-os +1 moreCisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability7.4 High
- cisco nexus 1000v switch for vmware vsphere, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +5 more +7 moreCisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability7.4 High
- cisco nx-os, nexus 3000 series switches, nexus 3500 platform switches +4 more +6 moreCisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability7.8 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability7.8 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability4.4 Medium
- cisco application policy infrastructure controller software, nx-os software for nexus 9000 series fabric switches aci mode, nx-os +2 moreCisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability6.7 Medium
- opensslChaCha20-Poly1305 with long nonces7.4 High
- ibm websphere application server, websphere virtual enterprise +1 moreIBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting....5.4 Medium
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to...5.4 Medium
- 1234n minicmsMiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different...6.5 Medium
drupal/eu_cookie_compliancePackagistThis module addresses the General Data Protection Regulation (GDPR) that came into effect 25th May 2018, and the EU Directive on Privacy and Electronic Communications from 2012. It provides a banner w…No score- apowersoft apowermanagerThe ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial...7.5 High
- theolivetree ftp serverThe Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android...7.5 High
- airdroidThe AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of...7.5 High
- apache qpid broker-jImproper Input Validation in Apache Qpid Broker-J7.5 High
- apache jmeterUnauthenticated Remote Code Execution in Apache JMeter9.8 Critical
- appcmsAppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.6.1 Medium
- bluecms project bluecmsBlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit...9.8 Critical
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0...6.1 Medium
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0...6.1 Medium
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500...6.1 Medium
- tengcon t-920 plc firmwareAn issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to...7.5 High
- glyphandcog xpdfreaderThere is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in...7.8 High
- glyphandcog xpdfreaderThere is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can...7.8 High
- glyphandcog xpdfreaderThere is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be...7.8 High
- twinkletoessoftware bookedphpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading...8.8 High
- microsoft team foundation server, team foundation server 2018 +1 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...5.4 Medium
- microsoft team foundation server, team foundation server 2018 +1 moreA Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly...5.4 Medium
- microsoft java sdk for azure iot, java software development kit +1 moreAn information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive...7.5 High
- Show moreLoading…