CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- s-cmsS-CMS PHP v1.0 has a CSRF vulnerability to add a new admin user via the 4.edu.php/admin/ajax.php...8.8 High
- laquisscada laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a...7.1 High
- rockwell automation ethernet/ip web server modules 1756-eweb (includes 1756-ewebk) version 5.001 and earlier, and compactlogix 1768-eweb version 2.005 and earlier., rockwellautomation ethernet\/ip web server module 1756-eweb, ethernet\/ip web server module 1768-eweb +2 moreRockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001...7.5 High
- micro focus solutions business manager (sbm), microfocus solutions business manager +1 moreSolutions Business Manager (SBM) Information Leakage issue in version prior to 11.54.7 Medium
- micro focus solutions business manager (sbm), microfocus solutions business manager +1 moreSolutions Business Manager (SBM) reflected cross site script issue in version prior to 11.55.0 Medium
- frank-karau phpfkphpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user...7.4 High
- portainerA vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials,...9.8 Critical
- micro focus solutions business manager (sbm), microfocus solutions business manager +1 moreSolutions Business Manager (SBM) Denial of Service issue in version prior to 11.55.1 Medium
- micro focus solutions business manager (sbm), microfocus solutions business manager +1 moreSolutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.56.1 Medium
- glpi-project glpiTeclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.8.1 High
- teclib-edition gestionnaire libre de parc informatiqueTeclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.9.8 Critical
- teclib-edition gestionnaire libre de parc informatiqueTeclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of...9.8 Critical
- tommy hilfiger th24/7 android app, hp tommy hilfiger th24\/7 +1 moreA potential security vulnerability caused by incomplete obfuscation of application configuration...2.1 Low
- hp isaac mizrahi smartwatch, isaac mizrahi smartwatch mobile app +1 moreA potential security vulnerability caused by the use of insecure (http) transactions during login...7.5 High
- hp support assistantHP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load...7.3 High
- lcds laquis scadaOpening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past...7.8 High
- hp remote graphics softwareA potential vulnerability has been identified in HP Remote Graphics Software’s certificate...9.1 Critical
- hp laserjet enterprise, hp pagewide enterprise, hp laserjet managed, and hp officejet enterprise printers, color laserjet cm4540 mfp firmware, color laserjet cp5525 firmware +136 more +138 moreIn HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet...9.8 Critical
- abus secvest wireless alarm system fuaa50000 firmware, secvest wireless remote control fube50014 firmware, secvest wireless remote control fube50015 firmware +2 moreDue to unencrypted signal communication and predictability of rolling codes, an attacker can ...7.5 High
- abus secvest wireless alarm system fuaa50000 firmware, secvest wireless remote control fube50014 firmware, secvest wireless remote control fube50015 firmware +2 moreAn issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction...6.5 Medium
- abus secvest wireless alarm system fuaa50000 firmware, secvest wireless remote control fube50014 firmware, secvest wireless remote control fube50015 firmware +2 moreDue to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm...9.8 Critical
- persol career co., ltd. 'an' app for ios, weban an +1 moreDirectory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote...7.5 High
- kinagacms project kinagacmsCross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated...6.1 Medium
- omron poweract pro master agent, omron social solutions co.,ltd. poweract pro master agent for windows +1 morePowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to...6.5 Medium
- red hat wildfly-core, redhat jboss enterprise application platform, single sign-on +2 moreA cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions...5.4 Medium
- ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 moreNTP through 4.2.8p12 has a NULL Pointer Dereference.7.5 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...8.7 High
- linux kernel, netapp active iq unified manager, cn1610 firmware +3 more +5 moreAn issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may...9.8 Critical
- select2Improper Neutralization of Input During Web Page Generation in Select26.1 Medium
- snipeitapp snipe-itSnipe-IT XSS Vulnerability6.1 Medium
- z.cash zcashZcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key...7.5 High
- znc, canonical ubuntu linux, fedoraproject fedora +2 moreZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via...6.5 Medium
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection in errors7.5 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGems8.8 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in api response handling7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in gem owner7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in verbose7.5 High
- rubygemsRubyGems Delete directory using symlink when decompressing tar7.4 High
- [unknown] moodleMoodle XSS Vulnerability5.4 Medium
- gnu gnutls, fedoraproject fedora +1 moreA vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double...5.3 Medium
- [unknown] ceph, ceph civetweb, canonical ubuntu linux +2 moreA flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL...7.5 High
- paloaltonetworks expedition, palo alto networks expedition migration tool +1 moreThe Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run...4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable...5.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via...5.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field,...5.4 Medium
- palo alto networks pan-osPAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.7.5 High
- paloaltonetworks expedition, palo alto networks expedition migration tool +1 moreThe Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run...4.8 Medium
- paloaltonetworks expedition, palo alto networks expedition migration tool +1 moreThe Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run...4.8 Medium
- siemens scalance x204-2, scalance x204-2fm, scalance x204-2ld +118 more +120 moreThe monitor barrier of the affected products insufficiently blocks data from being forwarded over...9.1 Critical
- phoenixcontact rad-80211-xd\/hp-bus firmware, rad-80211-xd firmware +1 moreAn issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command...8.8 High
- Show moreLoading…