CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- phoenixcontact fl nat smcs 8tx firmware, fl nat smn 8tx-m-dmg firmware, fl nat smn 8tx-m firmware +1 more +3 moreAn issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and...8.8 High
- faststone image viewerFastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at...5.5 Medium
- faststone image viewerFastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at...5.5 Medium
- faststone image viewerFastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at...5.5 Medium
- faststone image viewerFastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509...5.5 Medium
- faststone image viewerFastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237...5.5 Medium
- wikindx project wikindxA cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource...6.1 Medium
- openstack ceilometer, [unknown] openstack-ceilometer, redhat openstack +2 moreCeilometer Prints Sensitive Configuration Data to Log4.0 Medium
- tibco data science for aws, spotfire data science +1 moreTIBCO Spotfire Data Science Spoofing Vulnerability5.0 Medium
- tibco data science for aws, spotfire data science +1 moreTIBCO Spotfire Data Science Privilege Escalation Vulnerability6.5 Medium
- tibco data science for aws, spotfire data science +1 moreTIBCO Spotfire Data Science Vulnerable to Persistent Cross-Site Scripting7.6 High
- [unknown] prometheus, redhat openshift container platform +1 moreWithdrawn Advisory: Prometheus XSS Vulnerability6.1 Medium
- medtronic amplia crt-d, carelink 2090 programmer, carelink monitor +44 more +46 moreMedtronic Conexus Radio Frequency Telemetry Protocol Cleartext Transmission of Sensitive Information6.5 Medium
- [unknown] moodleMoodle context freezing4.3 Medium
- [unknown] moodle, fedoraproject fedora +1 moreMoodle Secure layout contained an insecure link in Boost theme4.3 Medium
- [unknown] moodleMoodle Stored HTML in assignment submission comments allowed links to be opened directly4.3 Medium
- [unknown] moodleMoodle Users could elevate their role when accessing the LTI tool on a provider site6.3 Medium
- [unknown] openstack-octavia, openstack octavia, redhat openstack +2 moreOpenstack Octavia allows Insertion of Sensitive Information into Log File5.5 Medium
- kentico xperienceAn issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10...9.8 Critical
- rockwell automation plc5, rslogix, slc5/0x +2 more +4 moreRockwell PLC5/SLC5/0x/RSLogix Credentials management9.8 Critical
- mcafee network security manager, mcafee llc network security manager (nsm), mcafee,llc mcafee network security manager (nsm) +2 moreData leakage when in an MDR pair by McAfee Network Security Manager 9.x7.7 High
- mcafee network security manager, mcafee llc network security manager (nsm), mcafee,llc mcafee network security manager (nsm) +2 moreAuthentication bypass in McAfee Network Security Manager 9.x6.5 Medium
- rockwell automation rslinx enterprise software, rockwellautomation rslinx enterprise +1 moreRockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9...7.5 High
- google androidIn em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could...7.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action...8.8 High
- rockwell automation rslinx enterprise software, rockwellautomation rslinx enterprise +1 moreRockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9...7.5 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account,...7.2 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm...7.2 High
- rockwell automation rslinx enterprise software, rockwellautomation rslinx enterprise +1 moreRockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9...7.5 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to...8.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files...8.8 High
- hospira mednetHospira MedNet Code Injection10.0
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a...8.1 High
- gitlabGitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory...7.5 High
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreBaxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ...6.8 Medium
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreBaxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ...9.8 Critical
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreAn unauthenticated remote attacker may be able to execute commands to view wireless account...9.8 Critical
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored...4.8 Medium
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreBaxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ...9.8 Critical
- flatpakFlatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox...9.0 Critical
- hashicorp consulHashiCorp Consul vulnerable to Origin Validation Error7.4 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreStack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable...6.0 Medium
- axtls project axtlstls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence...9.8 Critical
- ghs integrity rtosAn issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5...7.5 High
- ghs integrity rtosAn issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60...9.8 Critical
- ghs integrity rtosAn issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5...9.8 Critical
- ghs integrity rtosAn issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on...7.5 High
- ghs integrity rtosAn issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5...7.5 High
- node-opencv project node-opencvOS Command Injection in node-opencv9.8 Critical
- [unknown] moodleMoodle Logged in users could view all calendar events4.3 Medium
- Show moreLoading…