CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof...3.1 Low
- ibm sdk, runtimes for java technology, websphere application server +1 more +3 moreIBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may...5.6 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Access Contract Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability4.3 Medium
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os +1 moreCisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability7.8 High
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os +1 moreCisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability7.4 High
- cisco mds 9000 series multilayer switches, nexus 3000 series switches, nexus 3500 platform switches +6 more +8 moreCisco NX-OS Software Cisco Fabric Services Denial of Service Vulnerability8.6 High
- cisco nexus 3000 series switches, nexus 9000 series fabric switches in aci mode, nexus 9000 series switches in standalone nx-os mode +2 more +4 moreCisco NX-OS Software Image Signature Verification Vulnerability6.7 Medium
- cisco mds 9000 series multilayer switches, nexus 2000, 5500, 5600, and 6000 series switches, nexus 3000 series switches +4 more +6 moreCisco NX-OS Software NX-API Command Injection Vulnerability8.8 High
- cisco mds 9000 series multilayer switches, nexus 3000 series switches, nexus 3500 platform switches +5 more +7 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)4.2 Medium
- cisco nexus 3000 series switches, nexus 3500 platform switches, nexus 3600 platform switches +3 more +5 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)4.2 Medium
- cisco firepower 4100 series next-generation firewalls, firepower 9300 security appliance, mds 9000 series multilayer switches +9 more +11 moreCisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)4.2 Medium
- cisco nexus 3000 series switches, nexus 3500 platform switches, nx-os +2 moreCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)4.2 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in...8.8 High
- cmsmadesimple cms made simpleclass.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a...6.5 Medium
- sftnowsftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.8.8 High
- podofo project podofo, fedoraproject fedora +1 morePoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString...9.8 Critical
- pacman project pacmanpacman before 5.1.3 allows directory traversal when installing a remote package via a specified...8.8 High
- chuango a11 pstn\/lcd\/rfid touch alarm system firmware, a8 pstn alarm system firmware, awv plus wifi alarm system firmware +8 more +10 moreThe Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control,...9.1 Critical
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), opensuse leap +2 moreBuffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially...8.8 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreBuffer overflow in network stack for EDK II may allow unprivileged user to potentially enable...9.1 Critical
- jtbc phpAn issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary...7.5 High
- yzmcmsStored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,4.8 Medium
- yzmcmsStored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.4.8 Medium
- checkstyle, debian linux, fedoraproject fedora +2 moreModerate severity vulnerability that affects com.puppycrawl.tools:checkstyle5.3 Medium
- libofx project libofx, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function...8.8 High
- sdcmsThere is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection...8.8 High
- sdcmsAn issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the...9.8 Critical
- upcoming events project eventsAn XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for...6.1 Medium
- codepeople contact form emailThe Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS,...6.1 Medium
- libpulse-binding project libpulse-bindingDuplicate Advisory: Uncaught Exception in libpulse-binding7.5 High
- stackstormIn st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass...6.1 Medium
- google chrome, chrome blink +1 moreUse-After-Free in puppeteer6.5 Medium
- kaspersky lab ultravncUltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder,...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows...7.5 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file...7.5 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code,...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file...9.8 Critical
- kaspersky lab ultravncUltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra...7.5 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside...7.5 High
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with...9.8 Critical
- kaspersky lab ultravncUltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat...7.5 High
- kaspersky lab ultravncUltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper...9.8 Critical
- kaspersky lab ultravncUltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper...9.8 Critical
- Show moreLoading…