CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- thresholdsecurity evisitorpasseVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an...8.4 High
- hid global easylobby soloEasyLobby Solo contains default administrative credentials. An attacker could exploit this...8.4 High
- hid global easylobby soloEasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By...8.4 High
- hid global easylobby soloEasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task...7.7 High
- hid global easylobby soloEasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the...2.9 Low
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to gain elevated privileges on the system,...8.4 High
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to gain elevated privileges on the system,...8.4 High
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an...2.9 Low
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop contains default administrative credentials. An attacker could exploit this...8.4 High
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an...4.0 Medium
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an...2.9 Low
- jolly technologies lobby track desktop, jollytech lobby track +1 moreLobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an...4.0 Medium
- gl-inet gl-ar300m-lite firmwaredownload_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to...6.5 Medium
- gl-inet gl-ar300m-lite firmwareCommand injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27...8.8 High
- pdfalto project pdfalto, xpdfreader xpdf +1 moreThere is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located...7.8 High
- xpdfreader xpdfThere is an invalid memory access vulnerability in the function TextPage::findGaps() located at...7.8 High
- plataformatec devise, devise ruby gem +1 moredevise Time-of-check Time-of-use Race Condition vulnerability9.8 Critical
- matrix synapse, fedoraproject fedora +1 moreMatrix Synapse Predictable Secret Key7.5 High
- splunk software development kitsplunk-sdk does not properly verify untrusted TLS server certificates8.1 High
- portierAn issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using...9.8 Critical
- portierAn issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input...9.8 Critical
- oembed project oembedplugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.9.8 Critical
- veritas netbackup applianceAn issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP...7.2 High
- veritas netbackup applianceAn issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The...7.2 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1...8.4 High
- ibm mqIBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross...5.4 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 High
- qemutcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Medium
- humhubA Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in...6.1 Medium
- humhubA Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub...6.1 Medium
- iobit smart defragSmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is...5.5 Medium
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...7.5 High
- moodleMoodle SSRF Vulnerability7.5 High
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store...5.4 Medium
- wso2 api manager, identity server, identity server as key manager +2 moreAn issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon...5.4 Medium
- securenvoy securaccess** DISPUTED ** An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode...7.0 High
- wowza streaming engineThe REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and...9.1 Critical
- wpsupportplus wp support plus responsive ticket systemA stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP...6.1 Medium
- mybb ban listIn the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input...5.4 Medium
- barracuda vpn clientThe barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS,...7.8 High
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping...8.8 High
- Show moreLoading…