CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- hospira plum a+ infusion system, plum a+3 infusion system, symbiq infusion system +3 more +5 moreWireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior,...7.5 High
bluemanSUSESecurity update for bluemanNo scoreucode-intelSUSESecurity update for ucode-intelNo score- gforge advanced serverGForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated...6.1 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion...10.0 Critical
- linux kernel, canonical ubuntu linux, debian linux +6 more +8 moreThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....5.3 Medium
- [unknown] moodleMoodle XSS Vulnerability4.3 Medium
- phpcmsPHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information...4.8 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx:...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu...5.5 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an ...5.4 Medium
- baigo ssobaigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first...7.2 High
- dedecmsIn DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the...6.5 Medium
- thephpleague commonmarkModerate severity vulnerability that affects league/commonmark6.1 Medium
- warfareplugins social warfare, social warfare pro, wordpress social warfare plugin +2 moreThe social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post...6.1 Medium
- tesla model 3 firmwareThe renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT...8.8 High
- signal private messenger, signal-desktop +1 moreOpen Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger...6.5 Medium
- xnview classicXnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview classicXnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview classicXnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview classicXnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview mpXnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview mpXnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview mpXnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- xnview mpXnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application...7.8 High
- limesurveyThe downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIncorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and...8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...8.8 High
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev:...5.5 Medium
- xpdfreader xpdf, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec...5.5 Medium
- hospira symbiq infusion system, pfizer symbiq infusion system firmware +1 moreHospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger ...8.8 High
- softnas cloudSoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration...9.8 Critical
- symfony twig, debian linux +1 moreTwig Sandbox Information Disclosure3.7 Low
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel...8.8 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Critical
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Medium
- w1.fi hostapdhostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random()...7.5 High
- cisco ip phone 7800 series and 8800 series, unified ip conference phone 8831, wireless ip phone 8821 and 8821-ex +5 more +7 moreCisco IP Phone 7800 Series and 8800 Series Remote Code Execution Vulnerability7.5 High
- cisco ip conference phone 8832 and the rest of the ip phone 8800 series, wireless ip phone 8821 and 8821-ex, ip conference phone 8832 firmware +3 more +5 moreCisco IP Phone 8800 Series Authorization Bypass Vulnerability7.5 High
- cisco ip conference phone 8832 and the rest of the ip phone 8800 series, wireless ip phone 8821 and 8821-ex, ip conference phone 8832 firmware +3 more +5 moreCisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability8.1 High
- cisco ip conference phone 8832 and the rest of the ip phone 8800 series, wireless ip phone 8821 and 8821-ex, ip conference phone 8832 firmware +3 more +5 moreCisco IP Phone 8800 Series Path Traversal Vulnerability8.1 High
- cisco ip phone 8800 series software, ip phone 8800 firmware +1 moreCisco IP Phone 8800 Series File Upload Denial of Service Vulnerability7.5 High
- opentext portalCross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to...6.1 Medium
- coreftp core ftpAn issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM...5.3 Medium
- ibm api connectIBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover...8.2 High
- Show moreLoading…