CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- microvirt memuAn issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable...7.8 High
- golangtc gopherjimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml'...6.1 Medium
- ipandao editor.mdCross-Site Scripting in editor.md6.1 Medium
- 1024toolsDOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image...6.1 Medium
- [unknown] libsndfile, canonical ubuntu linux, debian linux +2 moreIt was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a...3.3 Low
- shanda maplestory onlineIn Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT...7.8 High
- sap hana extended application servicesSAP HANA extended application services, version 1, advanced does not sufficiently validate an XML...6.5 Medium
- sap banking services from sap, s\/4hana financial products subledger, sap se banking services from sap 9.0 (fsappl) +1 more +3 moreBanking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger ...8.8 High
- sap se netweaver java application server (j2ee-apps), sap netweaver application server java +1 moreSAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10...5.4 Medium
- sap mobile platform sdkSAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service,...7.5 High
- sap kernel, sap se abap server, sap advanced business application programming platform +2 more +4 moreABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an...6.5 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for...8.8 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (bi workspace) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does...5.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (cmc module) +1 moreSAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30,...8.1 High
- mcafee database security, mcafee, lcc mcafee database security (dam) +1 moreData Leakage Vulnerability in McAfee Database Security web interface5.3 Medium
- dradisframework dradis, security roots ltd dradis community edition and dradis professional edition +1 moreCross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and...5.4 Medium
- rednao smart formsCross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote...8.8 High
- ichain insurance wallet, ichain, inc. ichain insurance wallet app for ios +1 moreDirectory traversal vulnerability in iChain Insurance Wallet App for iOS Version 1.3.0 and...7.5 High
- microsoft teams, the installer of microsoft teams +1 moreUntrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to...7.8 High
- microsoft windows 7Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a...7.8 High
- ncrafts formcraftCross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote...8.8 High
- nablarch project nablarch, tis inc. nablarch 5 +1 moreNablarch Incomplete Cryptography9.1 Critical
- nablarch project nablarch, tis inc. nablarch 5 +1 moreNablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE)...9.1 Critical
- microsoft azure-umqtt-cazure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause...7.5 High
- korenix jetport 5601 firmware, jetport 5601f firmware, jetport web manager +2 moreThe Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via...6.1 Medium
- mailtraq webmailMailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an...6.1 Medium
- codecrafters ability mail serverAbility Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks,...7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks...6.1 Medium
- lexmark cx725h firmware, cx820 firmware, cx825 firmware +5 more +7 moreOn certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious...4.9 Medium
- jupyter notebookImproper Neutralization of Input During Web Page Generation in Jupyter Notebook5.4 Medium
- webargs project webargsWebargs mishandles concurrent JSON parsing8.1 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Medium
- openstack neutron, redhat openstack, debian linux +2 moreOpenStack Neutron's unsupported dport option prevents applying security groups6.5 Medium
- ffmpeg, canonical ubuntu linux +1 moreA denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreIn FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the...6.5 Medium
- debian cron, linux +1 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...5.5 Medium
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...5.5 Medium
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...5.5 Medium
- xmltooling project xmltooling, canonical ubuntu linux, opensuse leap +2 moreXMLTooling Library Incorrectly Handles Some Exceptions7.5 High
- microsoft azure, walinuxagent +1 moreAn information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files...6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm api connectIBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in...6.5 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be...8.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is...8.4 High
- ibm mq, websphere mq +1 moreIBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their...7.5 High
- Show moreLoading…