CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller...8.8 High
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit...8.8 High
- linux kernel, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 moreAn issue where a provided address with access_ok() is not checked was discovered in...7.8 High
- booking calendar project calendarSQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote...8.8 High
- designchemical social network tabsThe Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to...9.8 Critical
- roxyfileman roxy filemanRoxy Fileman 1.4.5 allows unrestricted file upload in upload.php.9.8 Critical
- roxyfileman roxy filemanRoxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.9.1 Critical
- linux kernelIn the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify...5.5 Medium
- microfocus netiq edirectoryNetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to...7.5 High
- apache heronWhen accessing the heron-ui webpage, people can modify the file paths outside of the current...7.5 High
- apache hadoopImproper Privilege Management in org.apache.hadoop:hadoop-main7.4 High
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-file4.0 Medium
- node.js, opensuse leap +1 moreIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 High
- ens webgalambIn Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely...9.8 Critical
- ens webgalambIn Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs...7.5 High
- ens webgalambIn Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability...7.2 High
- ens webgalambwg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7...6.5 Medium
- ens webgalambsubscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP...9.8 Critical
- ens webgalambwg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a...6.1 Medium
- simplenia pagesThe Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.6.1 Medium
- coyoapp coyoCOYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.6.1 Medium
- mailcleanerwww/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote...8.8 High
- wp-jobhunt project wp-jobhuntThe WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the...9.8 Critical
- wp-jobhunt project wp-jobhuntThe WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the...7.5 High
- solarwinds serv-u ftp serverSolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code...7.2 High
- reputeinfosystems repute arformsAn issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file...7.5 High
- openmrsOpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows...10.0 Critical
- webminWebmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index...5.4 Medium
- hp synaptics touchpad driverSynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive...3.8 Low
- colossusxt colossuscoinxtColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial...7.5 High
- mybb trash binTrash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross...8.8 High
- bestpractical request tracker, canonical ubuntu linux, debian linux +1 more +3 moreThe email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of...7.5 High
- dnnsoftware dotnetnukeDNN XSS Vulnerability6.1 Medium
- controlbyweb x-320m-i firmwareA stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled...5.4 Medium
- controlbyweb x-320m-i firmwareA Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled...6.5 Medium
- deltek ajeraSecure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code...8.8 High
- teracue enc-400 hdmi2 firmware, enc-400 hdmi firmware, enc-400 hdsdi firmware +2 moreAn issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web...7.5 High
- teracue enc-400 hdmi2 firmware, enc-400 hdmi firmware, enc-400 hdsdi firmware +2 moreAn issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful...8.1 High
- teracue enc-400 hdmi2 firmware, enc-400 hdmi firmware, enc-400 hdsdi firmware +2 moreAn issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form...9.8 Critical
- twikibin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.6.1 Medium
- bmc remedy mid-tier, remedy action request system +1 moreBMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control...8.8 High
- digi transport lr54 firmwareDigi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that...9.9 Critical
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- abantecartAbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as...6.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- zohocorp manageengine netflow analyzerXSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone...6.1 Medium
- zenphotoZenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL...6.1 Medium
- samsung syncthru web service, x7400gx firmware +1 moreXSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws...6.1 Medium
- samsung syncthru web service, x7400gx firmware +1 moreXSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws...6.1 Medium
- Show moreLoading…