CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- ivanti connect secureAn input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect...9.8 Critical
- pulsesecure pulse secure desktop clientAn information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel ...7.5 High
- ivanti connect secureA hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2...5.3 Medium
- ivanti connect secure, pulsesecure pulse policy secure +1 moreSession data between cluster nodes during cluster synchronization is not properly encrypted in...9.8 Critical
- ivanti connect secure, pulsesecure pulse policy secure +1 moreA crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS)...7.5 High
- ivanti connect secureAn XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3...6.1 Medium
- ivanti connect secureAn XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x...6.1 Medium
- khanacademy simple-markdown, fedoraproject fedora +1 moreCross-Site Scripting in simple-markdown6.1 Medium
- diffplug gradle, maven +1 moreImproper Restriction of XML External Entity Reference in DiffPlug Spotless7.5 High
- openid connectDoorkeeper-openid_connect contains Open Redirect6.1 Medium
- phammPhamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public...6.1 Medium
- lenovo dynamic power reduction, unspecified +1 moreAn unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility...6.7 Medium
- qt, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash...5.5 Medium
- five9 agent desktop plusFive9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).9.8 Critical
- five9 agent desktop plusFive9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to...7.5 High
- samsung galaxy s6 firmwareBuffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM...8.8 High
- broadcastboxes scion-8 firmwareCircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass5.3 Medium
- opensuse yast2-printerSMB printer settings don't escape characters in passwords properly6.5 Medium
- top-vision cc8800ce firmwareTopvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a...7.5 High
- opensuse yast2-samba-provisionPassword exposed in process listing3.3 Low
- opensuse yast2-multipathStatic tempfile name allows overwriting of arbitrary files2.2 Low
- cryptobots battletokenAn Integer overflow vulnerability exists in the batchTransfer function of a smart contract...7.5 High
- fujitsu gk900 firmware, lx901 firmware +1 moreThe receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows...9.6 Critical
- netdata** DISPUTED ** The Netdata web application through 1.13.0 allows remote attackers to inject their...6.1 Medium
- screen stream project streamThe Screen Stream application through 3.0.15 for Android allows remote attackers to cause a...7.5 High
- airdrop project airdropThe AirDrop application through 2.0 for Android allows remote attackers to cause a denial of...7.5 High
- airmoreThe AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of...7.5 High
- cobham satcom sailor 800 firmware, satcom sailor 900 firmware +1 moreCobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative...4.8 Medium
- cobham satcom sailor 800 firmware, satcom sailor 900 firmware +1 moreCobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary...7.5 High
- cobham satcom sailor 250 firmware, satcom sailor 500 firmware +1 moreCobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset...9.8 Critical
- cobham satcom sailor 250 firmware, satcom sailor 500 firmware +1 moreCobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be...6.1 Medium
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local...7.8 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of...7.8 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the...7.8 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to...7.0 High
- capmon access managerAn issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT...7.8 High
- libcompsA use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees...7.5 High
- maccmsMaccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a...8.8 High
- ibm content navigatorIBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's...6.3 Medium
- ibm rational team concertIBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational team concert, rational collaborative lifecycle management +1 moreIBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational team concertIBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational engineering lifecycle manager, rational collaborative lifecycle management, rational doors next generation +4 more +6 moreIBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable...5.4 Medium
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be...4.3 Medium
- ibm rational engineering lifecycle manager, rational collaborative lifecycle management, rational doors next generation +4 more +6 moreIBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable...5.4 Medium
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site...5.4 Medium
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site...5.4 Medium
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting....5.4 Medium
- feifeicmsFeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting...9.8 Critical
- [unknown] openwsman, fedoraproject fedora, opensuse leap +2 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in...7.5 High
- Show moreLoading…