CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- tibco jasperreports server, tibco software inc. jasperreports server for activematrix bpm +1 moreTIBCO JasperReports Server XML Entity Expansion Vulnerability7.7 High
- dilicmsAn issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third...4.8 Medium
- dilicmsAn issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second...5.4 Medium
- dilicmsAn issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first...4.8 Medium
- njiandan-cms project njiandan-cmsnjiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.8.8 High
- phpmywindAn issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php...6.1 Medium
- phpmywindAn issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page...6.1 Medium
- zyxel nbg-418n firmwareZyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.8.8 High
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Persistent Cross Site Scripting Vulnerability8.0 High
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Server User Information Disclosure10.0 Critical
- tibco jasperreports, jasperreports library, jasperreports server +8 more +10 moreTIBCO JasperReports Library Directory Traversal Vulnerability9.9 Critical
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Server Privilege Escalation Via Race Condition8.8 High
- phome empirecmsEmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user...8.8 High
- layerbbLayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.9.8 Critical
- jtbc/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an...8.8 High
- wuzhicmsWUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index...5.4 Medium
- wuzhicmsWUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description"...5.4 Medium
- dotcmsdotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter...6.1 Medium
- zrlogAn issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted...6.1 Medium
- zrlogAn issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article...7.2 High
- dns library project librarymiekg/dns parsing error leads to nil pointer dereference and DoS7.5 High
- monstraMonstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file...7.2 High
- zzcmsA SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.7.2 High
- zzcmszzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.8.8 High
- zzcmszzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.8.8 High
- zzcmsXSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.6.1 Medium
- zzcmszzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For...9.8 Critical
- dolibarrDolibarr SQL injection via the integer parameters qty and value_unit9.8 Critical
- dolibarrDolibarr Stored Cross-site Scripting in expensereport/card.php6.1 Medium
- ucms project ucmsAn issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do...6.1 Medium
- hyphp hybbsAn issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title...6.1 Medium
- libjpeg-turbo, mozilla mozjpeg, debian linux +2 more +4 moreget_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows...6.5 Medium
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area...8.1 High
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa...6.1 Medium
- simplemachines simple machines forumSimple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code...8.8 High
- apache solr, netapp storage automation store +1 moreCritical severity vulnerability that affects org.apache.solr:solr-core9.8 Critical
- rainbowpdf office server document converter, antenna house house +1 moreA heap-based overflow vulnerability exists in the PowerPoint document conversion function of...8.8 High
- cisco firepower 4100 series next-generation firewalls, firepower 9300 series next-generation firewalls, mds 9000 series multilayer switches +9 more +11 moreCisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability6.7 Medium
- cisco nexus 1000v switch for microsoft hyper-v, nexus 1000v switch for vmware vsphere, nexus 3000 series switches +9 more +11 moreCisco NX-OS Software Netstack Denial of Service Vulnerability8.6 High
- cisco firepower 4100 series next-generation firewalls, firepower 9300 security appliance, mds 9000 series multilayer switches +7 more +9 moreCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities8.6 High
- cisco ucs 6200 and 6300 fabric interconnect, firepower 4100 series next-generation firewalls, firepower 9300 security appliance +7 more +9 moreCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities8.6 High
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Bash Shell Privilege Escalation Vulnerability7.8 High
- cloud foundry stratosCloud Foundry Stratos contains a Session Collision Vulnerability8.2 High
- cloud foundry stratosCloud Foundry Stratos Deploys With Public Default Session Store Secret8.7 High
- cloud foundry cf cli, cloudfoundry command line interface +1 moreCF CLI does not sanitize user's password in verbose/trace/debug8.2 High
- pivotal software spring security oauth, spring security oauth, oracle banking corporate lending +2 moreOpen Redirect in spring-security-oauth26.5 Medium
- pivotal apps manager, application service +1 moreApps Manager unverified SSL certs in Cloud Controller proxy8.0 High
- pivotal software operations manager, pivotal ops manager +1 moreReflected XSS in Pivotal Operations Manager7.2 High
- cloud foundry uaa release (oss), cloudfoundry uaa release +1 moreUAA allows users to modify their own email address7.1 High
- dell wyse device agent, wyse thinlinux hagent, windows embedded standard wyse device agent +2 moreDSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability8.2 High
- Show moreLoading…