CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- website seller script project seller scriptPHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an...5.3 Medium
- apache karafModerate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf6.5 Medium
- advance crowdfunding script project crowdfunding scriptPHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request...5.3 Medium
- charity donation script project donation scriptPHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct...5.3 Medium
- charity foundation script project foundation scriptPHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct...7.5 High
- consumer reviews script project reviews scriptPHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.5.4 Medium
- consumer reviews script project reviews scriptPHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a...6.5 Medium
- node.js, opensuse leap +1 moreKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...7.5 High
drupal/addtoanyPackagistThis module enables you to add social media share buttons on your website to its content and pages. The module doesn't sufficiently mark its administration permission restricted, allowing cross site s…No score- mozilla firefoxIf the source for resources on a page is through an FTP connection, it is possible to trigger a...7.5 High
- mozilla firefoxIf WebRTC permission is requested from documents with data: or blob: URLs, the permission...5.3 Medium
- mozilla firefoxWhen arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible...4.3 Medium
- mozilla firefoxA vulnerability exists during authorization prompting for FTP transaction where successive modal...7.5 High
- mozilla firefoxA latent vulnerability exists in the Prio library where data may be read from uninitialized...9.8 Critical
- mozilla firefoxThe Upgrade-Insecure-Requests (UIR) specification states that if UIR is enabled through Content...7.4 High
- mozilla firefoxIf a Sandbox content process is compromised, it can initiate an FTP download which will then use...7.5 High
- mozilla firefoxInsufficient bounds checking of data during inter-process communication might allow a compromised...7.5 High
- mozilla firefoxCross-origin images can be read in violation of the same-origin policy by exporting an image...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA mechanism was discovered that removes some bounds checking for string, array, or typed array...5.9 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe type inference system allows the compilation of functions that can cause type confusions...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is...9.8 Critical
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 65. Some...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMozilla developers and community members reported memory safety bugs present in Firefox 65,...9.8 Critical
- drupal, drupal core, debian linux +1 more +3 moreDrupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-0045.4 Medium
- ysoft safeq server clientYSoft SafeQ Server 6 allows a replay attack.8.1 High
- patlite nbm-d88n firmware, nhl-3fb1 firmware, nhl-3fv1n firmware +2 moreA hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV...9.8 Critical
- coship rt3050 firmware, rt3052 firmware, rt7620 firmware +1 more +3 moreAn issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49,...9.8 Critical
- chinamobileltd gpn2.4p21-c-cn firmwareChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the...8.8 High
- chinamobileltd gpn2.4p21-c-cn firmwareChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- gl-inet gl-ar300m-lite firmwareCommand injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2...8.8 High
- gl-inet gl-ar300m-lite firmwareDirectory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware...8.8 High
- los trigos, inc the receptionist for ipadThe Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by...4.0 Medium
- envoy passport for android, passport for iphone, passport +2 moreEnvoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain...2.9 Low
- envoy passport for android, passport for iphone, passport +2 moreEnvoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain...2.9 Low
- thresholdsecurity evisitorpasseVisitorPass contains default administrative credentials. An attacker could exploit this...8.4 High
- thresholdsecurity evisitorpasseVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an...8.4 High
- thresholdsecurity evisitorpasseVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an...8.4 High
- thresholdsecurity evisitorpasseVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an...8.4 High
- Show moreLoading…