CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- wordpressWordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution...8.8 High
- highchartsRegular Expression Denial of Service in Acorn7.5 High
- gitnoteapp gitnotegitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as...7.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...9.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...9.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...7.5 High
- kartatopia piluscartPilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the...8.8 High
- thinkst canarytokensThinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size...7.5 High
- cleanersoft free mp3 cd ripperStack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user...7.8 High
- cleanersoft free mp3 cd ripperStack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user...7.8 High
- blog mini project miniIn Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py...6.1 Medium
- phpsheA SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the...9.8 Critical
- phpsheAn XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or...7.5 High
- ftpgetterFTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP...9.8 Critical
- [unknown] openwsman, fedoraproject fedora, opensuse leap +8 more +10 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure...7.5 High
- tinyccAn issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source...5.5 Medium
- otrs, opensuse backports sle, leap +2 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16...5.4 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0...4.8 Medium
- f5 big-ip application acceleration manager, f5 networks, inc. big-ip (aam) +1 moreIn BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application...5.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...6.1 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip apm; enterprise manager +1 moreIn BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of...6.1 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or...4.3 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise...7.2 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...7.5 High
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to...6.5 Medium
- cloud foundry capi, cloudfoundry capi-release +1 moreCloud Controller provides signed URL with write authorization to read only user6.5 Medium
- dell rsa archer, rsa archer grc platform +1 moreInformation Exposure Vulnerability7.8 High
- dell rsa archer, rsa archer grc platform +1 moreInformation Exposure Vulnerability7.8 High
- dell rsa authentication manager, rsa authentication manager +1 moreDSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability5.8 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Static Credential Vulnerability9.8 Critical
- cisco small business spa500 series ip phones, spa514g firmware +1 moreCisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability7.5 High
- iotivityIn IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of...9.1 Critical
- treasuredata fluent bitAn issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin...7.5 High
- tinysvcmdns project tinysvcmdnsIn tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform...9.1 Critical
- tinysvcmdns project tinysvcmdnsIn tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an...7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +1 more +3 moreUse of Insufficiently Random Values in Railties Allows Remote Code Execution9.8 Critical
- debian linux, fedoraproject fedora, opensuse leap +5 more +7 morePath Traversal in Action View7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action View7.5 High
- gpsd project gpsd, microjson project microjson, debian linux +1 more +3 moregpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a...8.8 High
- webmproject libwebmIn libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster...7.5 High
- huawei oceanstor uds firmwareHuawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers...9.1 Critical
- gdata-software total securitygdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because...7.5 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 Medium
- Show moreLoading…