CVEs published in March 2019
1,217 vulnerabilities, 182 critical, 13 exploited.
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client7.5 High
- apache jspwikiImproper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war7.5 High
- apache jspwikiModerate severity vulnerability that affects org.apache.jspwiki:jspwiki-main6.1 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 moreOn BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain...5.9 Medium
- big-ip (asm), f5 big-ip (asm), big-ip application security manager +2 moreOn BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2,...6.8 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing...4.3 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 moreOn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2,...6.8 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received...7.5 High
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreIn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets...7.5 High
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreIn BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow...7.5 High
firefoxUbuntufirefox regressionNo score- nagios xiCross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject...6.1 Medium
- nagios xiPrivilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to...7.8 High
- nagios xiSQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL...9.8 Critical
- nagios incident managerNagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary...8.8 High
- nagios incident managerAuthorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents...9.8 Critical
- nagios incident managerSQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers...9.8 Critical
- jenkins prqa, jenkins project prqa plugin +1 moreJenkins PRQA Plugin stored password in plain text7.8 High
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreSSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin6.5 Medium
- jenkins fortify on demand uploader, jenkins project fortify on demand uploader plugin +1 moreJenkins Fortify on Demand Uploader Plugin CSRF vulnerability6.5 Medium
- jenkins project ecs publisher plugin, trustsource ecs publisher +1 moreECS Publisher Plugin stored and displayed API token in plain text6.5 Medium
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin CSRF vulnerability and missing permission checks7.1 High
- jenkins slack notification, jenkins project slack notification plugin +1 moreJenkins Slack Notification Plugin missing permission check7.5 High
- jenkins lockable resources, jenkins project lockable resources plugin +1 moreJenkins Lockable Resources Plugin XSS vulnerability5.4 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Script Security Plugin9.8 Critical
- dell emc networking os10, dell emc networking os10 +1 moreDSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability8.3 High
- teltonika rut950 firmwareAn issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before...7.1 High
- nagios xiCommand injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary...8.8 High
- totaljs total.js cmsModerate severity vulnerability that affects total.js6.1 Medium
- digium asteriskAn Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium...6.5 Medium
- forcepoint email securityA password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The...9.8 Critical
- laravel frameworkLaravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and...8.8 High
- jupyter jupyterhub, notebook +1 moreOpen Redirect vulnerability in jupyterhub and notebook6.1 Medium
- librenmsLibreNMS SQL Injection8.8 High
- gitlabGitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x...7.5 High
- misp-project mispIn MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected...6.1 Medium
- amazon affiliate store project affiliate storePHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount.6.5 Medium
- nvidia geforce experienceNVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is...7.0 High
- ucweb uc browserThe UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain...5.9 Medium
- ucweb uc browserUCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which...5.9 Medium
- enttec datagate mk2, pixelator, storm 24 +3 more +5 moreENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060...7.5 High
- red hat tower, redhat ansible tower +1 moreWhen running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed...7.2 High
- google chrome, opensuse backports, leap +2 moreIncorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a...5.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75...6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreIncorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75...6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a...6.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote...6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect inheritance of a new document's policy in Content Security Policy in Google Chrome...6.5 Medium
- google chromeDouble free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...7.5 High
- Show moreLoading…