CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- ibm content navigatorIBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If...6.3 Medium
- coreftp core ftpCoreFTP Directory Traversal5.3 Medium
ucode-intelSUSESecurity update for ucode-intelNo score- ushareit shareitThe SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network...8.8 High
- ushareit shareitThe SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network...5.3 Medium
- gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...7.5 High
- caretCaret before 2019-02-22 allows Remote Code Execution.9.8 Critical
- s-cmsS-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter.6.1 Medium
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual...7.5 High
- sqlite, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based...7.5 High
- gnu bash, canonical ubuntu linux, debian linux +3 more +5 morerbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...7.8 High
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 moreA vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL...5.8 Medium
- get-simple. getsimplecmsGetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.6.1 Medium
- yop-pollThe yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view...6.1 Medium
- 3cx live chatThe wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page...6.1 Medium
- codecabin wp go mapsThe wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.6.1 Medium
- nextscripts social networks auto posterThe social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin...6.1 Medium
- king-theme kingcomposerThe kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.6.1 Medium
- givewpThe "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin...6.1 Medium
- hivewebstudios font organizerThe font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.6.1 Medium
- opera browserOpera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker...7.8 High
- flexera flexnet publisher, oracle communications lsms +1 moreA Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon...7.5 High
- ipycache project ipycacheipycache is vulnerable to Code Injection8.8 High
- flexera flexnet publisher, oracle communications lsms +1 moreA Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon...7.5 High
- flexera flexnet publisher, oracle communications lsms +1 moreA Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon...7.5 High
- powerdns authoritative server, debian pdns, fedoraproject fedora +2 moreA vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An...6.5 Medium
- heimdalsecurity thorHeimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers,...9.1 Critical
- pytroll donfigDonfig Command Injection in collect_yaml method9.8 Critical
- moxa softcmsMoxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow...8.8 High
- moxa softcmsMoxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow...8.8 High
- siemens sicam a8000 cp-802x, sicam a8000 cp-8050, sicam a8000 cp-8000 firmware +3 more +5 moreA vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP...7.5 High
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +8 more +10 moreReflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which...5.4 Medium
- netapp service processor, netapp, inc. netapp service processor +1 moreCertain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware...9.8 Critical
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +8 more +10 moreRemote file inclusion allows an attacker to craft a specific URL referencing the Schneider...5.4 Medium
- graphvizAn issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption...6.5 Medium
- blackberry athocAn XML External Entity Injection (XXE) vulnerability in the Management System (console) of...5.9 Medium
- insteon, insteon hub firmware +1 moreAn exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub...8.5 High
- insteon, insteon hub firmware +1 moreAn exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub...8.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.9.8 Critical
- denx u-bootAn exploitable vulnerability exists in the verified boot protection of the Das U-Boot from...8.2 High
- getcujo smart firewallAn exploitable command injection vulnerability exists in the DHCP daemon configuration of the...9.0 Critical
- getcujo smart firewallAn exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall,...5.3 Medium
- getcujo smart firewallAn exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart...6.5 Medium
- risi gestao de horariosRISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.8.8 High
- getcujo smart firewallAn exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall....8.3 High
- getcujo smart firewallAn exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall....8.2 High
- getcujo smart firewallAn exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart...8.3 High
- siemens firmware variant dnp3 tcp for en100 ethernet module, firmware variant iec 61850 for en100 ethernet module, firmware variant iec104 for en100 ethernet module +13 more +15 moreA vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All...5.9 Medium
- macpaw cleanmymac xAn exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X,...7.1 High
- Show moreLoading…