CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- kaspersky lab ultravncUltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder...9.8 Critical
- jenkins appdynamics, jenkins project jenkinsappdynamics dashboard plugin +1 moreJenkins AppDynamics Dashboard Plugin has insufficiently protected credentials8.8 High
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin has insufficiently protected credentials7.8 High
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreUnprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin6.5 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreMissing permission check in Azure VM Agents Plugin allowed modifying VM configuration4.3 Medium
- jenkins azure vm agents, jenkins project azure vm agents plugin +1 moreInformation disclosure in Azure VM Agents Plugin4.3 Medium
- jenkins job dsl, jenkins project job dsl plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Jenkins Job DSL Plugin9.9 Critical
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerability8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreScript security sandbox bypass in Jenkins Email Extension Plugin9.9 Critical
- jenkins matrix project, jenkins project matrix project plugin, redhat openshift container platform +2 moreScript security sandbox bypass in Matrix Project Plugin9.9 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 moreSandbox bypass in Jenkins Pipeline: Groovy Plugin9.9 Critical
- jenkins script security plugin, script security, redhat openshift container platform +2 moreSandbox bypass in Script Security Plugin9.9 Critical
- apache solrServer-Side Request Forgery (SSRF) in org.apache.solr:solr-core7.5 High
- pixar renderman, talos pixar renderman +1 moreA local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3...9.0 Critical
- cisco mds 9000 series multilayer switches, nexus 3000 series switches, nexus 3500 platform switches +5 more +7 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)4.2 Medium
- cisco mds 9000 series multilayer switches, nexus 7000 and 7700 series switches, nx-os +2 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608)4.2 Medium
- cisco nexus 7000 and 7700 series switches, nx-os +1 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607)4.2 Medium
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os, nexus 3000 series switches +1 more +3 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)5.3 Medium
- cisco mds 9000 series multilayer switches, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +6 more +8 moreCisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability7.8 High
- pixar renderman, talos pixar renderman +1 moreA local privilege escalation vulnerability exists in the install helper tool of the Mac OS X...7.1 High
- pixar renderman, talos pixar renderman +1 moreA local privilege escalation vulnerability exists in the install helper tool of the Mac OS X...9.0 Critical
- cyberark endpoint privilege managerA buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege...7.0 High
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +4 more +6 moreCisco NX-OS Software Privilege Escalation Vulnerability7.3 High
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Privilege Escalation Vulnerability7.8 High
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software Privilege Escalation Vulnerability7.8 High
- botan project botanA side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely...5.9 Medium
- cisco mds 9000 series multilayer switches, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +6 more +8 moreCisco NX-OS Software Unauthorized Filesystem Access Vulnerability7.8 High
- atlassian sourcetree, sourcetree for windows +1 moreThere was an command injection vulnerability in Sourcetree for Windows from version 0.5a before...8.8 High
- atlassian sourcetree, sourcetree for windows +1 moreThere was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0...8.8 High
- atlassian sourcetree, sourcetree for macos +1 moreThere was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2...8.8 High
- cloudfoundry container runtime, cloud foundry container runtime (cfcr) +1 moreCloud Foundry Container Runtime Leaks IAAS Credentials9.1 Critical
- cloudfoundry container runtime, cloud foundry container runtime (cfcr) +1 moreCloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD8.8 High
- golang goGo through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.7.8 High
- gnome glibgio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during...6.5 Medium
- esafenet electronic document security management systemESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in...7.5 High
- php, canonical ubuntu linux, opensuse leap +2 more** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...7.5 High
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc...9.8 Critical
- chshcms cscmsAn issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can...6.5 Medium
- boltcms boltBolt Unrestricted Upload of File with Dangerous Type8.8 High
- motorola c1 firmware, m2 firmware +1 moreAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....9.8 Critical
- motorola c1 firmware, m2 firmware +1 moreAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....9.8 Critical
- motorola c1 firmware, m2 firmware +1 moreAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....9.8 Critical
- motorola c1 firmware, m2 firmware +1 moreAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....9.8 Critical
- motorola c1 firmware, m2 firmware +1 moreAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....9.8 Critical
- Show moreLoading…