CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- [unknown] cockpit, fedoraproject fedora, redhat virtualization +2 moreIt was found that cockpit before version 184 used glib's base64 decode functionality incorrectly...7.5 High
- verifone verix multi-app conductorThe Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow...8.1 High
- apache mesos, redhat fuse +1 moreDocker image code execution with Apache Mesos7.8 High
- dlink dir-816 firmware, dir-816l firmware, dir-817lw firmware +2 more +4 moreD-Link routers with the mydlink feature have some web interfaces without authentication...7.5 High
- medtronic amplia crt-d, carelink 2090 programmer, carelink monitor +41 more +43 moreMedtronic Conexus Radio Frequency Telemetry Protocol Improper Access Control9.3 Critical
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below...9.8 Critical
- fortinet fortiportalA Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...6.1 Medium
- sir gnuboardCross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows...6.1 Medium
- telegram, telegram desktop +1 moreTelegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and...8.8 High
- honeywell experion pks, experion process knowledge system +1 moreMultiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions...9.8 Critical
- honeywell experion pks, experion process knowledge system +1 moreMultiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all...9.8 Critical
- opto 22 optodatalink, optoopcserver, pac display basic +5 more +7 moreA specially crafted configuration file could be used to cause a stack-based buffer overflow...7.8 High
- atlassian confluence server, confluence server and data server +1 moreThe Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed...9.8 Critical
- atlassian confluence, confluence server +1 moreThe WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the...9.8 Critical
- elastic winlogbeat, logstash +1 moreWinlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to...7.5 High
- elastic logstash, netapp active iq performance analytics services +1 moreA sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1...9.8 Critical
- elastic elasticsearchImproper Access Control in Elasticsearch8.1 High
- elastic kibanaKibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit...9.0 Critical
- elastic kibanaKibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could...6.1 Medium
- ovirt, redhat virtualization, unspecified ovirt-engine +2 moreIt was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is...6.5 Medium
- myadrenalin adrenalinA Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker...6.1 Medium
- myadrenalin adrenalinA Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS...6.1 Medium
- hospira lifecare pca infusion system, pfizer lifecare pca infusion system firmware +1 moreWireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System....7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service,...5.9 Medium
- schneider electric ofs v3.5, schneider-electric opc factory server +1 moreA successful exploit of these vulnerabilities requires the local user to load a crafted DLL file...7.3 High
- jenzabar internet campus solution, tiny moxiemanager +1 moreJenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and...7.5 High
- jenzabar internet campus solutionICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02...9.8 Critical
- dlink dir-816 firmwareThe D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request....7.5 High
- dlink dir-816 firmwareThe D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request....9.8 Critical
- dlink dir-816 firmwareThe D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request....9.8 Critical
- dlink dir-816 firmwareThe D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request....9.8 Critical
- redhat ovirt-engine, [unknown] rhv +1 moreIn ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be...8.8 High
- hospira plum a+ infusion system, plum a+3 infusion system, symbiq infusion system +3 more +5 moreHospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and...9.8 Critical
- [unknown] sssd, redhat enterprise linux +1 moreA flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by...5.4 Medium
- [unknown] moodleMoodle Blind SSRF Risk in /badges/mybackpack.php6.5 Medium
- [unknown] moodleMoodle XSS Vulnerability4.3 Medium
- [unknown] vdsm, redhat gluster storage +1 moreA vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8....6.4 Medium
- the kubevirt project kubevirt/virt-cdi-importer, kubevirt containerized data importer +1 moreKubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS...7.4 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows...7.5 High
- hospira plum a+ infusion system, plum a+3 infusion system, symbiq infusion system +3 more +5 moreHospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and...9.8 Critical
- microfocus data protectorRemote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability...9.8 Critical
- hp arcsight loggerMitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.7.8 High
- hp arcsight loggerMitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.6.5 Medium
- hp arcsight loggerMitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.6.5 Medium
- hp arcsight loggerMitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.7.1 High
- hp arcsight loggerMitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.6.1 Medium
- hospira plum a+ infusion system, plum a+3 infusion system, symbiq infusion system +3 more +5 moreHard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior,...9.8 Critical
- hp arcsight loggerMitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.9.8 Critical
- zohocorp manageengine servicedesk plusManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items...8.8 High
- zohocorp manageengine servicedesk plusManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the...6.5 Medium
- Show moreLoading…