Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
March

CVEs published in March 2019

1,217 vulnerabilities, 182 critical, 13 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm power 9 systems, power system ac922 \(8335-gtg\) firmware, power system ac922 \(8335-gth\) firmware +9 more +11 moreThe IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and...CVE-2018-19926.4 MediumMarch 21, 2019
ibm infosphere streams, streams +1 moreIBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow...CVE-2017-17135.9 MediumMarch 21, 2019
fatek automation fv designer, automation pm designer v3 +1 moreA malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek...CVE-2016-58007.5 HighMarch 21, 2019
moxa oncell g3111/g3151/g3211/g3251 series, oncell g3100v2 series, oncell g3100v2 firmware +4 more +6 moreMoxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series,...CVE-2016-58196.1 MediumMarch 21, 2019
artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 HighMarch 21, 2019
artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 HighMarch 21, 2019
putty, debian linux, fedoraproject fedora +2 more +4 morePotential recycling of random numbers used in cryptography exists within PuTTY before 0.71.CVE-2019-9898Fix available9.8 CriticalMarch 21, 2019
putty, debian linux, fedoraproject fedora +2 more +4 moreMultiple denial-of-service attacks that can be triggered by writing to the terminal exist in...CVE-2019-9897Fix available7.5 HighMarch 21, 2019
putty, opensuse backports sle, leap +2 moreIn PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting...CVE-2019-9896Public exploit7.8 HighMarch 21, 2019
putty, fedoraproject fedora +1 moreIn PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind...CVE-2019-9895Fix available9.8 CriticalMarch 21, 2019
putty, debian linux, fedoraproject fedora +2 more +4 moreA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before...CVE-2019-9894Fix available7.5 HighMarch 21, 2019
netchannel opamMemory disclosure in mirage-net-xenOSEC-2019-01Fix available8.2 HighMarch 21, 2019
freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 MediumMarch 21, 2019
libseccomp project libseccomplibseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the...CVE-2019-9893Fix available9.8 CriticalMarch 21, 2019
tuxera ntfs-3g, redhat enterprise linux, enterprise linux eus +3 more +5 moreAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially...CVE-2019-9755Fix available7.0 HighMarch 21, 2019
canonical snapd, ubuntu linux +1 moreSnapd seccomp filter TIOCSTI ioctl bypassCVE-2019-7303Public exploitFix available5.7 MediumMarch 21, 2019
canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 moreA vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse...CVE-2019-3878Fix available8.1 HighMarch 21, 2019
vanillaforums vanillaIn Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager...CVE-2019-98892.7 LowMarch 20, 2019
[unknown] dropbear, dropbear ssh project ssh +1 moreIt was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is...CVE-2017-2659Fix available5.3 MediumMarch 20, 2019
printeronPrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the...CVE-2018-171675.4 MediumMarch 20, 2019
woocommerce paypal checkout payment gateway** DISPUTED ** cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin...CVE-2019-7441Public exploitDisputed6.5 MediumMarch 20, 2019
jio jiofi 4g m2s firmwareJioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi...CVE-2019-7440Public exploit6.5 MediumMarch 20, 2019
jio jiofi 4g m2s firmwarecgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.CVE-2019-7439Public exploit6.5 MediumMarch 20, 2019
jio jiofi 4g m2s firmwarecgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST...CVE-2019-7438Public exploit6.1 MediumMarch 20, 2019
opensource classified ads script project classified ads scriptPHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS)...CVE-2019-74376.1 MediumMarch 20, 2019
opensource classified ads script project classified ads scriptPHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct...CVE-2019-74366.5 MediumMarch 20, 2019
opensource classified ads script project classified ads scriptPHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the...CVE-2019-74355.3 MediumMarch 20, 2019
rental bike script project bike scriptPHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a...CVE-2019-74346.5 MediumMarch 20, 2019
rental bike script project bike scriptPHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit...CVE-2019-74338.8 HighMarch 20, 2019
rental bike script project bike scriptPHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile...CVE-2019-74325.4 MediumMarch 20, 2019
image sharing script project sharing scriptPHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a...CVE-2019-74316.5 MediumMarch 20, 2019
image sharing script project sharing scriptPHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.CVE-2019-74305.3 MediumMarch 20, 2019
property rental software project rental softwarePHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for...CVE-2019-74296.5 MediumMarch 20, 2019
car rental script project rental scriptPHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.CVE-2018-206488.8 HighMarch 20, 2019
car rental script project rental scriptPHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a...CVE-2018-206476.5 MediumMarch 20, 2019
basic b2b script project b2b scriptPHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a...CVE-2018-206466.5 MediumMarch 20, 2019
basic b2b script project b2b scriptPHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.CVE-2018-206455.4 MediumMarch 20, 2019
basic b2b script project b2b scriptPHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit...CVE-2018-206448.8 HighMarch 20, 2019
entrepreneur job portal script project job portal scriptPHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct...CVE-2018-206436.5 MediumMarch 20, 2019
entrepreneur job portal script project job portal scriptPHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial...CVE-2018-206426.5 MediumMarch 20, 2019
entrepreneur job portal script project job portal scriptPHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via...CVE-2018-206418.8 HighMarch 20, 2019
entrepreneur job portal script project job portal scriptPHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via...CVE-2018-206405.4 MediumMarch 20, 2019
entrepreneur job portal script project job portal scriptPHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.CVE-2018-206396.1 MediumMarch 20, 2019
chartered accountant \ auditor website projectPHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a...CVE-2018-206386.5 MediumMarch 20, 2019
chartered accountant \ auditor website projectPHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a...CVE-2018-206376.5 MediumMarch 20, 2019
chartered accountant \ auditor website projectPHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First...CVE-2018-206365.4 MediumMarch 20, 2019
advance b2b script project b2b scriptPHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a...CVE-2018-206354.3 MediumMarch 20, 2019
advance b2b script project b2b scriptPHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service ...CVE-2018-206346.5 MediumMarch 20, 2019
advance b2b script project b2b scriptPHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit...CVE-2018-206338.8 HighMarch 20, 2019
advance b2b script project b2b scriptPHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST...CVE-2018-206325.4 MediumMarch 20, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open