Drupal Releases Security Updates

February 21, 2019, 8:49 am

≫ Next: ISC Releases Security Updates for BIND

≪ Previous: Adobe Releases Security Updates

$

0

0

Original release date: February 21, 2019

Drupal has released security updates to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Drupal’s security advisory and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

ISC Releases Security Updates for BIND

February 22, 2019, 6:57 am

≫ Next: SB19-056: Vulnerability Summary for the Week of February 18, 2019

≪ Previous: Drupal Releases Security Updates

$

0

0

Original release date: February 22, 2019

The Internet Systems Consortium (ISC) has released security updates that address vulnerabilities affecting multiple versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the ISC advisories for CVE-2018-5744, CVE-2018-5745, and CVE-2019-6465, and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-056: Vulnerability Summary for the Week of February 18, 2019

February 25, 2019, 5:33 am

≫ Next: OpenSSL Releases Security Update

≪ Previous: ISC Releases Security Updates for BIND

$

0

0

Original release date: February 25, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
cisco -- hyperflex_hx_data_platform	A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by connecting to the cluster service manager and injecting commands into the bound process. A successful exploit could allow the attacker to run commands on the affected host as the root user. This vulnerability affects Cisco HyperFlex Software releases prior to 3.5(2a).	2019-02-20	8.3	CVE-2018-15380 BID CISCO
cisco -- hyperflex_hx_data_platform	A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxterm service as a non-privileged, local user. A successful exploit could allow the attacker to gain root access to all member nodes of the HyperFlex cluster. This vulnerability affects Cisco HyperFlex Software Releases prior to 3.5(2a).	2019-02-21	7.2	CVE-2019-1664 BID CISCO
dasannetworks -- h665_firmware	The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET.	2019-02-19	10.0	CVE-2019-8950 MISC MISC
easy2map -- easy2map-photos	Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables	2019-02-15	7.5	CVE-2015-4615 MISC MISC
fastweb -- fastgate_firmware	The web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05-17 (software through 1.0.1b) exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is required in order to trigger the vulnerability.	2019-02-21	10.0	CVE-2018-20122 MISC
fileutils_project -- fileutils	Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell.	2019-02-15	9.3	CVE-2013-2516 MISC MISC
hotels_server_project -- hotels_server	Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.	2019-02-17	7.5	CVE-2019-8393 MISC
intel -- unite	Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel Unite(R) Solution administrative portal via network access.	2019-02-18	7.5	CVE-2019-0101 BID CONFIRM
kohanaframework -- kohana	Koseven through 3.3.9, and Kohana through 3.3.6, has SQL Injection when the order_by() parameter can be controlled.	2019-02-21	7.5	CVE-2019-8979 MISC
libexif_project -- libexif	An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.	2019-02-20	7.8	CVE-2018-20030 MISC MISC
libraw -- libraw	An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resources.	2019-02-20	7.8	CVE-2018-5819 MISC MISC
linux -- linux_kernel	In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.	2019-02-22	7.5	CVE-2018-20784 MISC MISC MISC
linux -- linux_kernel	In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.	2019-02-18	7.5	CVE-2019-8912 MISC BID
linux -- linux_kernel	A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.	2019-02-21	7.8	CVE-2019-8980 BID MISC MISC
linux -- linux_kernel	In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.	2019-02-22	7.8	CVE-2019-9003 MISC MISC MISC
microfocus -- filr	A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.	2019-02-20	7.2	CVE-2019-3475 MISC MISC
netis-systems -- wf2411_firmware	On Netis WF2880 and WF2411 2.1.36123 devices, there is a stack-based buffer overflow that does not require authentication. This can cause denial of service (device restart) or remote code execution. This vulnerability can be triggered by a GET request with a long HTTP "Authorization: Basic" header that is mishandled by user_auth->user_ok in /bin/boa.	2019-02-21	9.0	CVE-2019-8985 MISC
papercut -- papercut_mf	PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.	2019-02-19	7.5	CVE-2019-8948 MISC MISC
pixeline -- bugs	An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.	2019-02-22	7.5	CVE-2019-9002 MISC MISC
sap -- businessobjects	SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.	2019-02-15	7.5	CVE-2019-0259 BID MISC MISC
solarwinds -- orion_network_performance_monitor	SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.	2019-02-18	10.0	CVE-2019-8917 BID MISC
sqlalchemy -- sqlalchemy	SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.	2019-02-19	7.5	CVE-2019-7164 MISC
themerig -- find_a_place_cms_directory	Themerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php cate parameter.	2019-02-16	7.5	CVE-2019-8360 MISC
tintin++_project -- tintin++	Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.	2019-02-18	7.5	CVE-2019-7629 MISC MISC MISC
wtcms_project -- wtcms	An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/gif" header.	2019-02-18	7.5	CVE-2019-8908 MISC
yingzhipython_project -- yingzhipython	Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage	2019-02-15	9.4	CVE-2013-5654 MISC MISC
zoneminder -- zoneminder	ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.	2019-02-17	7.5	CVE-2019-8423 MISC MISC
zoneminder -- zoneminder	ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.	2019-02-17	7.5	CVE-2019-8424 MISC MISC
zoneminder -- zoneminder	daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.	2019-02-17	7.5	CVE-2019-8427 MISC
zoneminder -- zoneminder	ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value.	2019-02-17	7.5	CVE-2019-8428 MISC MISC
zoneminder -- zoneminder	ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.	2019-02-17	7.5	CVE-2019-8429 MISC MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
appneta -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8376 BID MISC MISC
appneta -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_ipv6_l4proto() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8377 BID MISC MISC
appneta -- tcpreplay	An issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in checksum.c. It can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8381 MISC MISC
ascellamobile -- musicloud	A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi network. An attacker can send the POST parameters downfiles and cur-folder (with a crafted ../ payload) to the download.script endpoint. This will create a MusicPlayerArchive.zip archive that is publicly accessible and includes the content of any requested file (such as the /etc/passwd file).	2019-02-16	4.8	CVE-2019-8389 MISC
axiosys -- bento4	An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in AP4_BitStream::ReadBytes() in Codecs/Ap4BitStream.cpp, a similar issue to CVE-2017-14645. It can be triggered by sending a crafted file to the aac2mp4 binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8378 MISC MISC
axiosys -- bento4	An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track::GetSampleIndexForTimeStampMs() located in Core/Ap4Track.cpp. It can triggered by sending a crafted file to the mp4audioclip binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8380 MISC MISC
axiosys -- bento4	An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sending a crafted file to the mp4dump binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-16	6.8	CVE-2019-8382 MISC MISC
bagesoft -- bagecms	upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.	2019-02-17	6.5	CVE-2019-8421 MISC
bosch -- smart_camera	An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)	2019-02-22	5.1	CVE-2019-7728 CONFIRM
cisco -- firepower_9000_firmware	A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Manual intervention may be required before a device will resume normal operations. The vulnerability is due to a logic error in the FPGA related to the processing of different types of input packets. An attacker could exploit this vulnerability by being on the adjacent subnet and sending a crafted sequence of input packets to a specific interface on an affected device. A successful exploit could allow the attacker to cause a queue wedge condition on the interface. When a wedge occurs, the affected device will stop processing any additional packets that are received on the wedged interface. Version 2.2 is affected.	2019-02-21	5.7	CVE-2019-1700 BID CISCO
cisco -- hyperflex_hx_data_platform	A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Versions prior to 3.5(1a) are affected.	2019-02-21	4.3	CVE-2019-1665 BID CISCO
cisco -- hyperflex_hx_data_platform	A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted requests to the Graphite service. A successful exploit could allow the attacker to retrieve any statistics from the Graphite service. Versions prior to 3.5(2a) are affected.	2019-02-21	5.0	CVE-2019-1666 BID CISCO
cisco -- ios_xr	A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of user-supplied input within TFTP requests processed by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques in malicious requests sent to the TFTP service on a targeted device. An exploit could allow the attacker to retrieve arbitrary files from the targeted device, resulting in the disclosure of sensitive information. This vulnerability affects Cisco IOS XR Software releases prior to Release 6.5.2 for Cisco Network Convergence System 1000 Series devices when the TFTP service is enabled.	2019-02-21	5.0	CVE-2019-1681 BID CISCO
cisco -- prime_collaboration_assurance	A vulnerability in the Quality of Voice Reporting (QOVR) service of Cisco Prime Collaboration Assurance (PCA) Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the QOVR service with a valid username. A successful exploit could allow the attacker to perform actions with the privileges of the user that is used for access. This vulnerability affects Cisco PCA Software Releases prior to 12.1 SP2.	2019-02-21	6.4	CVE-2019-1662 BID CISCO
cisco -- prime_infrastructure	A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to improper validation of the server SSL certificate when establishing the SSL tunnel with ISE. An attacker could exploit this vulnerability by using a crafted SSL certificate and could then intercept communications between the ISE and PI. A successful exploit could allow the attacker to view and alter potentially sensitive information that the ISE maintains about clients that are connected to the network. This vulnerability affects Cisco Prime Infrastructure Software Releases 2.2 through 3.4.0 when the PI server is integrated with ISE, which is disabled by default.	2019-02-21	5.8	CVE-2019-1659 BID CISCO
cisco -- unity_connection	A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Version 12.5 is affected.	2019-02-21	4.3	CVE-2019-1685 BID CISCO
cmseasy -- cmseasy	In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.	2019-02-17	4.3	CVE-2019-8432 MISC
cmseasy -- cmseasy	In CmsEasy 7.0, there is XSS via the ckplayer.php autoplay parameter.	2019-02-17	4.3	CVE-2019-8434 MISC
cmswing -- cmswing	global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.	2019-02-17	5.0	CVE-2019-7649 MISC
dedecms -- dedecms	DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip=1 request with a ZIP archive that contains a file such as "1.jpg.php" (because input validation only checks that .jpg, .png, or .gif is present as a substring, and does not otherwise check the file name or content).	2019-02-16	5.0	CVE-2019-8362 MISC
dedecms -- dedecms	In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on New Template, and modifying the filename from ../index.html to ../index.php.	2019-02-18	6.5	CVE-2019-8933 MISC
dlink -- dir-823g_firmware	An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.	2019-02-16	5.0	CVE-2019-8392 MISC
easy2map -- easy2map-photos	Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.	2019-02-15	5.0	CVE-2015-4617 MISC MISC
eclipse -- wakaama	In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.	2019-02-22	5.0	CVE-2019-9004 MISC
feifeicms -- feifeicms	FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal.	2019-02-17	6.5	CVE-2019-8412 MISC
file_project -- file	do_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printf and file_vprintf.	2019-02-18	6.8	CVE-2019-8904 MISC
file_project -- file	do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360.	2019-02-18	6.8	CVE-2019-8905 MISC
file_project -- file	do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.	2019-02-18	6.8	CVE-2019-8906 MISC MISC
file_project -- file	do_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of service (stack corruption and application crash) or possibly have unspecified other impact.	2019-02-18	6.8	CVE-2019-8907 MISC
google -- chrome	Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.	2019-02-19	4.3	CVE-2019-5754 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.	2019-02-19	5.8	CVE-2019-5755 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.	2019-02-19	6.8	CVE-2019-5756 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	An incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5757 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5758 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5759 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5760 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5761 BID REDHAT CONFIRM MISC
google -- chrome	Inappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.	2019-02-19	6.8	CVE-2019-5762 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Failure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5763 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5764 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.	2019-02-19	4.3	CVE-2019-5765 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	2019-02-19	4.3	CVE-2019-5766 REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.	2019-02-19	4.3	CVE-2019-5767 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.	2019-02-19	4.3	CVE-2019-5768 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of invalid end character position when front rendering in Blink in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5769 REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5770 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	An incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5771 BID REDHAT CONFIRM MISC
google -- chrome	Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	2019-02-19	6.8	CVE-2019-5772 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.	2019-02-19	4.3	CVE-2019-5773 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.	2019-02-19	6.8	CVE-2019-5774 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.	2019-02-19	4.3	CVE-2019-5775 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.	2019-02-19	4.3	CVE-2019-5776 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.	2019-02-19	4.3	CVE-2019-5777 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.	2019-02-19	4.3	CVE-2019-5778 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.	2019-02-19	4.3	CVE-2019-5779 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.	2019-02-19	4.6	CVE-2019-5780 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.	2019-02-19	4.3	CVE-2019-5781 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5782 BID REDHAT CONFIRM MISC DEBIAN
google -- chrome	Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.	2019-02-19	6.8	CVE-2019-5783 CONFIRM MISC DEBIAN
hdfgroup -- hdf5	A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."	2019-02-17	4.3	CVE-2019-8396 MISC
hdfgroup -- hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.	2019-02-17	4.3	CVE-2019-8397 MISC
hdfgroup -- hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.	2019-02-17	4.3	CVE-2019-8398 MISC
hongcms_project -- hongcms	HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.	2019-02-17	5.5	CVE-2019-8407 MISC
ibm -- infosphere_information_server	IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970.	2019-02-15	6.0	CVE-2018-1701 XF CONFIRM
ibm -- infosphere_information_server	IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.	2019-02-15	6.4	CVE-2018-1727 XF CONFIRM
ibm -- qradar_security_information_and_event_manager	IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.	2019-02-15	5.0	CVE-2017-1695 BID XF CONFIRM
ibm -- rational_clearcase	IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.	2019-02-15	5.0	CVE-2019-4059 XF CONFIRM
idreamsoft -- icms	An issue was discovered in idreamsoft iCMS through 7.0.14. A CSRF vulnerability can delete users' articles via the public/api.php?app=user URI.	2019-02-18	4.9	CVE-2019-8902 MISC
indexhibit -- indexhibit	In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.	2019-02-20	6.5	CVE-2019-8954 MISC
jenkins -- cloud_foundry	A exposure of sensitive information vulnerability exists in Jenkins Cloud Foundry Plugin 2.3.1 and earlier in AbstractCloudFoundryPushDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.	2019-02-20	4.0	CVE-2019-1003025 CONFIRM
jenkins -- jms_messaging	A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthenticationMethod.java that allows attackers with Overall/Read permission to have Jenkins connect to a JMS endpoint.	2019-02-20	4.0	CVE-2019-1003028 CONFIRM
jenkins -- mattermost	A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified Mattermost server and room and send a message.	2019-02-20	4.0	CVE-2019-1003026 CONFIRM
jenkins -- octopusdeploy	A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified URL and obtain the HTTP response code if successful, and exception error message otherwise.	2019-02-20	4.0	CVE-2019-1003027 CONFIRM
jenkins -- script_security	A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.52 and earlier in RejectASTTransformsCustomizer.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.	2019-02-20	6.5	CVE-2019-1003024 CONFIRM
jtbc -- jtbc_php	JTBC(PHP) 3.0.1.8 allows Arbitrary File Upload via the console/#/console/file/manage.php?type=list URI, as demonstrated by a .php file.	2019-02-17	5.0	CVE-2019-8433 MISC
libraw -- libraw	A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger an infinite loop.	2019-02-20	5.0	CVE-2018-5817 MISC MISC
libraw -- libraw	An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop.	2019-02-20	5.0	CVE-2018-5818 MISC MISC
linux -- linux_kernel	In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.	2019-02-15	5.8	CVE-2019-6974 MISC BID MISC MISC MISC MISC MISC MISC EXPLOIT-DB
mambo-foundation -- mambo_cms	A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.	2019-02-15	5.0	CVE-2013-2565 MISC MISC
mcafee -- getsusp	Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via while scanning a specifically crafted file . GetSusp is a free standalone McAfee tool that runs on several versions of Microsoft Windows.	2019-02-21	4.3	CVE-2018-6687 BID CONFIRM
microfocus -- filr	A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.	2019-02-20	4.0	CVE-2019-3474 MISC MISC
mikrotik -- routeros	MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.	2019-02-20	5.0	CVE-2019-3924 MISC
mopcms -- mopcms	A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding directory is deleted, as demonstrated by ./ to delete the entire web site.	2019-02-22	6.4	CVE-2019-9015 MISC
mopcms -- mopcms	An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=column request, as demonstrated by the /mopcms/X0AZgf(index).php?mod=column&ac=list&menuid=28&ac=add&menuid=29 URI.	2019-02-22	4.3	CVE-2019-9016 MISC
octopus -- octopus_deploy	An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote authenticated users to view sensitive Terraform output variables via log files.	2019-02-19	4.0	CVE-2019-8944 MISC MISC
onefilecms_project -- onefilecms	OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.	2019-02-17	4.0	CVE-2019-8408 MISC
ory -- hydra	ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.	2019-02-17	4.3	CVE-2019-8400 MISC MISC MISC MISC MISC
pbootcms -- pbootcms	A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php.	2019-02-17	6.5	CVE-2019-8422 MISC
php -- php	In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.	2019-02-21	5.0	CVE-2018-20783 MISC MISC MISC
responsive_video_news_script_project -- responsive_video_news_script	PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection.	2019-02-16	4.3	CVE-2019-8361 MISC MISC
sap -- advanced_business_application_programming_platform_kernel	SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.	2019-02-15	5.5	CVE-2019-0255 BID MISC MISC
sap -- businessobjects	The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	4.3	CVE-2019-0251 BID MISC MISC
sap -- disclosure_management	SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.	2019-02-15	6.5	CVE-2019-0258 BID MISC MISC
sap -- hana_extended_application_services	Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased.	2019-02-15	5.0	CVE-2019-0266 BID MISC MISC
sap -- manufacturing_integration_and_intelligence	SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application.	2019-02-15	6.8	CVE-2019-0267 BID MISC MISC
sap -- netweaver_abap	Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.	2019-02-15	6.5	CVE-2019-0257 BID MISC MISC
seacms -- seacms	SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.	2019-02-17	4.0	CVE-2019-8418 MISC
seafile -- seadroid	The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.	2019-02-18	5.0	CVE-2019-8919 MISC
seafile -- seafile	Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.	2019-02-20	5.0	CVE-2013-7469 MISC MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on the result of multiplication fed into malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow.	2019-02-15	4.3	CVE-2019-8354 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result of multiplication fed into the lsx_valloc macro that wraps malloc. When the buffer is allocated, it is smaller than expected, leading to a heap-based buffer overflow in channels_start in remix.c.	2019-02-15	4.3	CVE-2019-8355 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded, such that it can lead to write access outside of the statically declared array, aka a stack-based buffer overflow.	2019-02-15	4.3	CVE-2019-8356 MISC
sound_exchange_project -- sound_exchange	An issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer dereference.	2019-02-15	4.3	CVE-2019-8357 MISC
tautulli -- tautulli	data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page.	2019-02-19	4.3	CVE-2019-8939 MISC
torproject -- tor	In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.	2019-02-21	5.0	CVE-2019-8955 BID MISC MISC
verydows -- verydows	Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.	2019-02-16	4.3	CVE-2019-8363 MISC
vnote_project -- vnote	VNote 2.2 has XSS via a new text note.	2019-02-17	4.3	CVE-2019-8419 MISC
wavemaker -- wavemarker_studio	com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of local files and SSRF.	2019-02-21	6.8	CVE-2019-8982 EXPLOIT-DB
wordpress -- wordpress	WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. Exploitation can leverage CVE-2019-8943.	2019-02-19	6.5	CVE-2019-8942 BID MISC
wordpress -- wordpress	WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.	2019-02-19	4.0	CVE-2019-8943 BID MISC
wtcms_project -- wtcms	An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.	2019-02-18	5.0	CVE-2019-8909 MISC
wtcms_project -- wtcms	An issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.	2019-02-18	6.8	CVE-2019-8910 MISC
wtcms_project -- wtcms	An issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website statistics code).	2019-02-18	4.3	CVE-2019-8911 MISC
xiaomi -- mi_mix_2_firmware	On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).	2019-02-17	4.9	CVE-2019-8413 MISC
zabbix -- zabbix	Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.	2019-02-17	5.8	CVE-2016-10742 MISC MISC
zoneminder -- zoneminder	includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.	2019-02-17	4.3	CVE-2019-8425 MISC MISC
zoneminder -- zoneminder	skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.	2019-02-17	4.3	CVE-2019-8426 MISC MISC
zzcms -- zzcms	admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.	2019-02-17	6.4	CVE-2019-8411 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
atlassian -- crucible	The administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the href parameter.	2019-02-20	3.5	CVE-2018-20240 BID CONFIRM CONFIRM
atlassian -- crucible	The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the wbuser parameter.	2019-02-20	3.5	CVE-2018-20241 BID CONFIRM CONFIRM
bosch -- smart_camera	An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)	2019-02-22	2.1	CVE-2019-7729 CONFIRM
cisco -- hyperflex_hx_data_platform	A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by connecting to the Graphite service and sending arbitrary data. A successful exploit could allow the attacker to write arbitrary data to Graphite, which could result in invalid statistics being presented in the interface. Versions prior to 3.5(2a) are affected.	2019-02-21	2.1	CVE-2019-1667 BID CISCO
ibm -- infosphere_information_governance_catalog	IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152159.	2019-02-15	3.5	CVE-2018-1895 CONFIRM XF
ibm -- websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 154650.	2019-02-19	3.5	CVE-2018-1996 XF CONFIRM
intel -- openvino	Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access.	2019-02-18	2.1	CVE-2019-0127 BID CONFIRM
intel -- proset/wireless	Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access.	2019-02-18	2.1	CVE-2018-12159 CONFIRM
o-dyn -- collabtive	Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.	2019-02-19	3.5	CVE-2019-8935 MISC
phpmywind -- phpmywind	admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.	2019-02-17	3.5	CVE-2019-8435 MISC
qemu -- qemu	QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.	2019-02-19	2.1	CVE-2019-3812 BID CONFIRM
sap -- businessobjects_bi_platform	SAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user-controlled inputs in generated HTML reports, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	3.5	CVE-2019-0262 BID MISC MISC
splunk -- splunk	Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persistent XSS, aka SPL-138827.	2019-02-20	3.5	CVE-2019-5727 BID MISC
txjia -- imcat	imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.	2019-02-17	3.5	CVE-2019-8436 MISC

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
vembu -- storegrid	Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.	2019-02-23	not yet calculated	CVE-2014-10078 MISC MISC
vembu -- storegrid	In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.	2019-02-23	not yet calculated	CVE-2014-10079 MISC MISC MISC
semco_software_engineering -- semcosoft	A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form.	2019-02-23	not yet calculated	CVE-2018-18692 MISC
avi_networks -- avi_vantage	Avi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959.	2019-02-19	not yet calculated	CVE-2018-19106 MISC
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 153386.	2019-02-21	not yet calculated	CVE-2018-1944 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 153387.	2019-02-21	not yet calculated	CVE-2018-1945 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 153388.	2019-02-21	not yet calculated	CVE-2018-1946 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153427.	2019-02-21	not yet calculated	CVE-2018-1947 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 153428.	2019-02-21	not yet calculated	CVE-2018-1948 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153429.	2019-02-21	not yet calculated	CVE-2018-1949 XF CONFIRM
ibm -- security_identity_governance_and_intelligence	IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430.	2019-02-21	not yet calculated	CVE-2018-1950 XF CONFIRM
codesys_group -- codesys_products	Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.	2019-02-19	not yet calculated	CVE-2018-20025 BID MISC
codesys_group -- codesys_products	Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.	2019-02-19	not yet calculated	CVE-2018-20026 BID MISC
ibm -- robotic_process_automation_with_automation_anywhere	IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to upload arbitrary files to the system. IBM X-Force ID: 155008.	2019-02-21	not yet calculated	CVE-2018-2006 BID XF CONFIRM
liquidware_labs -- profileunity	An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demonstrated by use of PowerShell.	2019-02-20	not yet calculated	CVE-2018-20146 MISC
wordpress -- wordpress	The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.	2019-02-17	not yet calculated	CVE-2018-20782 MISC EXPLOIT-DB
neato_robotics -- neato_botvac_connected_devices	Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power cycle occurs, this does not completely reset the chip: memory contents are still in place. Also, it restarts into a boot menu that enables XMODEM upload and execution of an unsigned QNX IFS system image, thereby completing the bypass of secure boot. Moreover, the attacker can craft custom IFS data and write it to unused memory to extract all memory contents that had previously been present. This includes the original firmware and sensitive information such as Wi-Fi credentials.	2019-02-23	not yet calculated	CVE-2018-20785 MISC
intel -- usb_3.0_extensible_host_controller_driver	Code injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access.	2019-02-18	not yet calculated	CVE-2018-3700 BID CONFIRM
sonicwall -- sonicos_gen_5	In SonicWall SonicOS, administrators without full permissions can download imported certificates. Occurs when administrators who are not in the SonicWall Administrators user group attempt to download imported certificates. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier.	2019-02-19	not yet calculated	CVE-2018-9867 CONFIRM MISC
intel -- data_center_manager_sdk	Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.	2019-02-18	not yet calculated	CVE-2019-0102 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.	2019-02-18	not yet calculated	CVE-2019-0103 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.	2019-02-18	not yet calculated	CVE-2019-0104 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access.	2019-02-18	not yet calculated	CVE-2019-0105 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access.	2019-02-18	not yet calculated	CVE-2019-0106 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access.	2019-02-18	not yet calculated	CVE-2019-0107 BID CONFIRM
intel -- data_center_manager_sdk	Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access.	2019-02-18	not yet calculated	CVE-2019-0108 BID CONFIRM
intel -- data_center_manager_sdk	Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.	2019-02-18	not yet calculated	CVE-2019-0109 BID CONFIRM
intel -- data_center_manager_sdk	Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.	2019-02-18	not yet calculated	CVE-2019-0110 BID CONFIRM
intel -- data_center_manager_sdk	Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.	2019-02-18	not yet calculated	CVE-2019-0111 BID CONFIRM
intel -- data_center_manager_sdk	Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access.	2019-02-18	not yet calculated	CVE-2019-0112 BID CONFIRM
sap -- disclosure_management	SAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-02-15	not yet calculated	CVE-2019-0254 BID MISC MISC
cisco -- ip_phone_7800_and_8800_series	A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to missing length validation of certain Cisco Discovery Protocol or LLDP packet header fields. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted phone. A successful exploit could allow the attacker to cause the affected phone to reload unexpectedly, resulting in a temporary DoS condition. Versions prior to 12.6(1)MN80 are affected.	2019-02-21	not yet calculated	CVE-2019-1684 BID CISCO
cisco -- firepower_threat_defense_software	A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.	2019-02-21	not yet calculated	CVE-2019-1691 BID CISCO
cisco -- internet_of_things_field_network_director_software	A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by importing a crafted XML file with malicious entries, which could allow the attacker to read files within the affected application. Versions prior to 4.4(0.26) are affected.	2019-02-21	not yet calculated	CVE-2019-1698 BID CISCO
drupal -- drupal	Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.)	2019-02-21	not yet calculated	CVE-2019-6340 BID CONFIRM CONFIRM
mirc -- mirc	mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).	2019-02-18	not yet calculated	CVE-2019-6453 MISC MISC MISC MISC EXPLOIT-DB MISC
citrix -- netscaler_gateway	Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled.	2019-02-22	not yet calculated	CVE-2019-6485 BID MISC
amazon -- fire_os	Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.	2019-02-16	not yet calculated	CVE-2019-7399 BID MISC
bootstrap -- bootstrap	In Bootstrap before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.	2019-02-20	not yet calculated	CVE-2019-8331 MISC MISC
hiawatha -- hiawatha	In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled.	2019-02-16	not yet calculated	CVE-2019-8358 CONFIRM
lg -- device_manager	The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link and an open DACL.	2019-02-18	not yet calculated	CVE-2019-8372 MISC MISC MISC
advancecomp -- advancecomp	An issue was discovered in AdvanceCOMP before 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.	2019-02-16	not yet calculated	CVE-2019-8379 MISC MISC
advancecomp -- advancecomp	An issue was discovered in AdvanceCOMP before 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.	2019-02-16	not yet calculated	CVE-2019-8383 MISC MISC
zoho_manageengine -- servicedesk_plus	Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.	2019-02-16	not yet calculated	CVE-2019-8394 BID EXPLOIT-DB CONFIRM
zoho_manageengine -- servicedesk_plus	An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.	2019-02-16	not yet calculated	CVE-2019-8395 CONFIRM
total.js -- total.js	index.js in Total.js Platform before 3.2.3 allows path traversal.	2019-02-18	not yet calculated	CVE-2019-8903 MISC MISC
pfsense -- pfsense	The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.	2019-02-20	not yet calculated	CVE-2019-8953 MISC MISC MISC MISC
mdaemon_technologies -- mdaemon_webmail	MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).	2019-02-21	not yet calculated	CVE-2019-8983 MISC
mdaemon_technologies -- mdaemon_webmail	MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).	2019-02-21	not yet calculated	CVE-2019-8984 MISC
signiant -- manager+agents	In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.	2019-02-21	not yet calculated	CVE-2019-8996 MISC
british_airways -- entertainment_system	The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks against Entertainment applications, as demonstrated by using mouse copy-and-paste actions to trigger a Chat buffer overflow or possibly have unspecified other impact.	2019-02-22	not yet calculated	CVE-2019-9019 MISC
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.	2019-02-22	not yet calculated	CVE-2019-9020 MISC MISC
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.	2019-02-22	not yet calculated	CVE-2019-9021 MISC
php -- php	An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.	2019-02-22	not yet calculated	CVE-2019-9022 MISC
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.	2019-02-22	not yet calculated	CVE-2019-9023 MISC MISC MISC MISC MISC MISC MISC
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.	2019-02-22	not yet calculated	CVE-2019-9024 MISC
php -- php	An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.	2019-02-22	not yet calculated	CVE-2019-9025 MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function InflateVarName() in inflate.c when called from ReadNextCell in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9026 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9027 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9028 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9029 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9030 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.	2019-02-23	not yet calculated	CVE-2019-9031 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.	2019-02-23	not yet calculated	CVE-2019-9032 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9033 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9034 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9035 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9036 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.	2019-02-23	not yet calculated	CVE-2019-9037 MISC MISC
matio -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.	2019-02-23	not yet calculated	CVE-2019-9038 MISC MISC
s-cms -- s-cms_php	S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.	2019-02-23	not yet calculated	CVE-2019-9040 MISC
zzzcms -- zzzphp	An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.	2019-02-23	not yet calculated	CVE-2019-9041 MISC
sitemagic_cms -- sitemagic_cms	An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php.	2019-02-23	not yet calculated	CVE-2019-9042 MISC
gorose -- gorose	GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.	2019-02-23	not yet calculated	CVE-2019-9047 MISC
pluck -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.	2019-02-23	not yet calculated	CVE-2019-9048 MISC
pluck -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete modules via a /admin.php?action=module_delete&var1= URI.	2019-02-23	not yet calculated	CVE-2019-9049 MISC
pluck -- pluck	An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.	2019-02-23	not yet calculated	CVE-2019-9050 MISC
pluck -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI.	2019-02-23	not yet calculated	CVE-2019-9051 MISC
pluck -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete pictures via a /admin.php?action=deleteimage&var1= URI.	2019-02-23	not yet calculated	CVE-2019-9052 MISC
phpscriptsmall.com -- online_food_ordering_script	PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.	2019-02-23	not yet calculated	CVE-2019-9062 MISC
phpscriptsmall.com -- auction_website_script	PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.	2019-02-23	not yet calculated	CVE-2019-9063 MISC
phpscriptsmall.com -- cab_booking_script	PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.	2019-02-23	not yet calculated	CVE-2019-9064 MISC
phpscriptsmall.com -- custom_t-shirt_ecommerce_script	PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount.	2019-02-23	not yet calculated	CVE-2019-9065 MISC
phpscriptsmall.com -- php_appointment_booking_script	PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.	2019-02-23	not yet calculated	CVE-2019-9066 MISC
gnu -- binutils	An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.	2019-02-23	not yet calculated	CVE-2019-9070 MISC MISC
gnu -- binutils	An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.	2019-02-23	not yet calculated	CVE-2019-9071 MISC MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.	2019-02-23	not yet calculated	CVE-2019-9072 MISC MISC MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.	2019-02-23	not yet calculated	CVE-2019-9073 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.	2019-02-23	not yet calculated	CVE-2019-9074 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.	2019-02-23	not yet calculated	CVE-2019-9075 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.	2019-02-23	not yet calculated	CVE-2019-9076 MISC
gnu -- binutils	An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.	2019-02-23	not yet calculated	CVE-2019-9077 MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

OpenSSL Releases Security Update

February 26, 2019, 1:30 pm

≫ Next: National Consumer Protection Week

≪ Previous: SB19-056: Vulnerability Summary for the Week of February 18, 2019

$

0

0

Original release date: February 26, 2019

OpenSSL version 1.0.2r has been released to address a vulnerability for users of versions 1.0.2–1.0.2q. An attacker could exploit this vulnerability to obtain sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the OpenSSL Security Advisory and apply the necessary update.

---

This product is provided subject to this Notification and this Privacy & Use policy.

National Consumer Protection Week

February 27, 2019, 1:13 pm

≫ Next: Cisco Releases Security Updates

≪ Previous: OpenSSL Releases Security Update

$

0

0

Original release date: February 27, 2019

National Consumer Protection Week (NCPW) is March 3–9. This annual event encourages individuals and businesses to learn about their consumer rights and how to keep themselves secure. The Federal Trade Commission (FTC) and its NCPW partners provide free resources to protect consumers from fraud, scams, and identity theft.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages consumers to review FTC’s NCPW resource page, participate in the NCPW Twitter chats and Facebook Live event, and review the following CISA tips:

• Protecting Your Privacy
• Avoiding Social Engineering and Phishing Attacks
• Preventing and Responding to Identity Theft

---

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates

February 27, 2019, 1:29 pm

≫ Next: Adobe Releases Security Updates for ColdFusion

≪ Previous: National Consumer Protection Week

$

0

0

Original release date: February 27, 2019

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Advisories and apply the necessary updates:

• Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability cisco-sa-20190227-rmi-cmd-ex
• Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability cisco-sa-20190227-wmda-cmdinj

---

This product is provided subject to this Notification and this Privacy & Use policy.

Adobe Releases Security Updates for ColdFusion

March 1, 2019, 3:40 pm

≫ Next: SB19-063: Vulnerability Summary for the Week of February 25, 2019

≪ Previous: Cisco Releases Security Updates

$

0

0

Original release date: March 01, 2019

Adobe has released security updates to address a vulnerability in ColdFusion. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Adobe Security Bulletin APSB19-14 and apply the necessary updates or mitigation.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-063: Vulnerability Summary for the Week of February 25, 2019

March 4, 2019, 6:06 am

≫ Next: IRS Launches ‘Dirty Dozen’ Campaign on Tax Scams

≪ Previous: Adobe Releases Security Updates for ColdFusion

$

0

0

Original release date: March 04, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
antfin -- sofa-hessian	SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XString is mishandled, related to Resin Gadget.	2019-02-27	7.5	CVE-2019-9212 MISC
baigo -- baigo_cms	An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_base.inc.php file.	2019-02-28	7.5	CVE-2019-9227 MISC
checkpoint -- zonealarm	Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.	2019-03-01	7.2	CVE-2018-8790 MISC MISC MISC
cisco -- rv110w_firmware	A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.	2019-02-28	10.0	CVE-2019-1663 BID CISCO
cordaware -- bestinformed	Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and insecure access patterns. These issues allow remote attackers to downgrade encrypted connections to cleartext.	2019-02-25	7.5	CVE-2019-6266 MISC
d-link -- dir-825_rev.b_firmware	An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password.	2019-02-25	7.5	CVE-2019-9123 MISC
d-link -- dir-878_firmware	An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.	2019-02-25	7.5	CVE-2019-9124 MISC
d-link -- dir-878_firmware	An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.	2019-02-25	7.5	CVE-2019-9125 MISC MISC
fizzday -- gorose	GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.	2019-02-23	7.5	CVE-2019-9047 MISC
flexera -- flexnet_publisher	A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.	2019-02-25	7.5	CVE-2018-20033 SECUNIA
gnu -- glibc	In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.	2019-02-25	7.5	CVE-2019-9169 BID MISC MISC MISC MISC
google -- android	In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-117838472.	2019-02-28	9.3	CVE-2019-1986 BID CONFIRM
google -- android	In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-118143775.	2019-02-28	9.3	CVE-2019-1987 BID CONFIRM
google -- android	In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution in system_server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-118372692.	2019-02-28	9.3	CVE-2019-1988 BID CONFIRM
google -- android	In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-110166268.	2019-02-28	9.3	CVE-2019-1991 BID CONFIRM
google -- android	In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-116222069.	2019-02-28	7.6	CVE-2019-1992 BID CONFIRM
google -- android	In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-119819889.	2019-02-28	7.2	CVE-2019-1993 BID CONFIRM
google -- android	In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value. This could lead to unwanted access to development settings, with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-117770924.	2019-02-28	9.3	CVE-2019-1994 BID CONFIRM
google -- android	In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.	2019-02-28	7.2	CVE-2019-1999 BID CONFIRM EXPLOIT-DB
google -- android	In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025789.	2019-02-28	7.2	CVE-2019-2000 BID CONFIRM EXPLOIT-DB
j2store -- j2store	SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.	2019-02-26	7.5	CVE-2019-9184 MISC
jamf -- self_service	Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacOS/Terminal" into the TCP data stream.	2019-02-25	7.9	CVE-2019-9146 MISC
linux -- linux_kernel	In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.	2019-02-22	7.8	CVE-2019-9003 MISC BID MISC MISC
live555 -- streaming_media	In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.	2019-02-27	7.5	CVE-2019-9215 MISC
micode -- xiaomi_perseus-p-oss	The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbg_write in drivers/input/touchscreen/ft5x46/ft5x46_ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.	2019-02-24	7.1	CVE-2018-20787 MISC
micode -- xiaomi_perseus-p-oss	The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sde_evtlog_filter_write in drivers/gpu/drm/msm/sde_dbg.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.	2019-02-24	7.1	CVE-2019-9111 MISC
micode -- xiaomi_perseus-p-oss	The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.	2019-02-24	7.1	CVE-2019-9112 MISC
mozilla -- firefox	Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.	2019-02-28	7.5	CVE-2018-12390 BID BID SECTRACK REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST MLIST GENTOO GENTOO UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.	2019-02-28	9.3	CVE-2018-12391 BID BID SECTRACK CONFIRM GENTOO CONFIRM CONFIRM CONFIRM
mozilla -- firefox	When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.	2019-02-28	7.5	CVE-2018-12392 BID BID SECTRACK REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST MLIST GENTOO GENTOO UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.	2019-02-28	7.5	CVE-2018-12405 BID REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 module. This results in a potentially exploitable crash. This vulnerability affects Firefox < 64.	2019-02-28	7.5	CVE-2018-12407 BID CONFIRM UBUNTU CONFIRM
mozilla -- firefox	A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.	2019-02-28	7.5	CVE-2018-18492 BID REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.	2019-02-28	7.5	CVE-2018-18493 BID REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.	2019-02-28	7.5	CVE-2018-18498 BID REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a file, does not check for hard links. This behavior may lead to code execution, denial of service or escalation of privileges.	2019-02-27	7.2	CVE-2019-5665 CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateContext in which the product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array, which may lead to denial of service or escalation of privileges.	2019-02-27	7.2	CVE-2019-5666 CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to code execution, denial of service or escalation of privileges.	2019-02-27	7.2	CVE-2019-5667 CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual in which the application dereferences a pointer that it expects to be valid, but is NULL, which may lead to denial of service or escalation of privileges.	2019-02-27	7.2	CVE-2019-5668 CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer, which may lead to denial of service or escalation of privileges.	2019-02-27	7.2	CVE-2019-5669 CONFIRM
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service, escalation of privileges, code execution or information disclosure.	2019-02-27	7.2	CVE-2019-5670 CONFIRM
opensourcebms -- open_source_background_management_system	ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.	2019-02-24	10.0	CVE-2019-9082 MISC
pangea-comm -- fax_ata	Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.	2019-02-28	7.8	CVE-2019-6551 BID MISC
phoenixcontact -- axc_1050_firmware	Phoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories.	2019-02-26	9.0	CVE-2019-9201 MISC
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.	2019-02-22	7.5	CVE-2019-9020 BID MISC MISC DEBIAN
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.	2019-02-22	7.5	CVE-2019-9021 BID BID MISC DEBIAN
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.	2019-02-22	7.5	CVE-2019-9023 BID MISC MISC MISC MISC MISC MISC MISC DEBIAN
qualcomm -- ipq8074_firmware	Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	7.2	CVE-2018-11289 BID CONFIRM
qualcomm -- mdm9150_firmware	Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	7.2	CVE-2018-11931 BID CONFIRM
qualcomm -- mdm9150_firmware	Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	7.5	CVE-2018-11945 BID CONFIRM
qualcomm -- mdm9150_firmware	Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.	2019-02-25	7.2	CVE-2018-13900 BID CONFIRM
qualcomm -- mdm9206_firmware	Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.	2019-02-25	7.5	CVE-2018-13904 BID CONFIRM
qualcomm -- mdm9206_firmware	KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, SD 210/SD 212/SD 205, SD 439 / SD 429, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24.	2019-02-25	7.2	CVE-2018-13905 BID CONFIRM
std42 -- elfinder	elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.	2019-02-26	7.5	CVE-2019-9194 CONFIRM CONFIRM CONFIRM
webkitgtk -- webkitgtk	The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).	2019-02-24	7.5	CVE-2019-8375 MISC MISC MISC MISC
zzzcms -- zzzphp	An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.	2019-02-23	7.5	CVE-2019-9041 MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
advancemame -- advancecomp	In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)	2019-02-27	4.3	CVE-2019-9210 MLIST MISC
auction_website_script_project -- auction_website_script	PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.	2019-02-23	4.0	CVE-2019-9063 MISC
b3log -- symphony	An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java.	2019-02-25	4.3	CVE-2019-9142 MISC
baigo -- baigo_cms	An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the opt[base][BG_SITE_NAME] parameter to the bg_console/index.php?m=opt&c=request URI.	2019-02-28	4.3	CVE-2019-9226 MISC
british_airways -- entertainment_system	The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks against Entertainment applications, as demonstrated by using mouse copy-and-paste actions to trigger a Chat buffer overflow or possibly have unspecified other impact.	2019-02-22	4.6	CVE-2019-9019 MISC
ca -- privileged_access_manager	An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gain sensitive information or alter configuration.	2019-02-26	6.4	CVE-2019-7392 BID MISC
cab_booking_script_project -- cab_booking_script	PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.	2019-02-23	5.0	CVE-2019-9064 MISC
canonical -- ubuntu_linux	A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.	2019-02-28	5.0	CVE-2018-12393 BID BID SECTRACK REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST MLIST GENTOO GENTOO UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
carel -- pcoweb_card_firmware	The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password (which is 1234), or reconfiguring "party mode" or "vacation mode."	2019-03-01	5.0	CVE-2019-9484 MISC
cisco -- spa112_firmware	A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security (TLS)-encrypted Session Initiation Protocol (SIP) conversation. The vulnerability is due to the improper validation of server certificates. An attacker could exploit this vulnerability by crafting a malicious server certificate to present to the client. An exploit could allow an attacker to eavesdrop on TLS-encrypted traffic and potentially route or redirect calls initiated by an affected device. Affected software include version 7.6.2 of the Cisco Small Business SPA525 Series IP Phones and Cisco Small Business SPA5X5 Series IP Phones and version 1.4.2 of the Cisco Small Business SPA500 Series IP Phones and Cisco Small Business SPA112 Series IP Phones.	2019-02-25	5.8	CVE-2019-1683 BID CISCO
citrix -- netscaler_application_delivery_controller_firmware	Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled.	2019-02-22	4.3	CVE-2019-6485 BID MISC MISC
cordaware -- bestinformed	The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands and escalate privileges.	2019-02-25	4.6	CVE-2019-6265 MISC
custom_t-shirt_ecommerce_script_project -- custom_t-shirt_ecommerce_script	PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount.	2019-02-23	4.0	CVE-2019-9065 MISC
d-link -- dir-825_rev.b_firmware	An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request.	2019-02-25	6.5	CVE-2019-9122 MISC
d-link -- dir-825_rev.b_firmware	An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN information of the device.	2019-02-25	5.0	CVE-2019-9126 MISC
deltaww -- screeneditor	Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files.	2019-02-28	4.3	CVE-2019-6547 BID MISC
etsi -- enterprise_transport_security	The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.	2019-02-26	4.3	CVE-2019-9191 BID MISC
exiv2 -- exiv2	An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-25	6.8	CVE-2019-9143 BID MISC MISC
exiv2 -- exiv2	An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in the file bigtiffimage.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-25	6.8	CVE-2019-9144 BID MISC MISC
f5 -- big-ip_access_policy_manager	On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles.	2019-02-26	6.4	CVE-2019-6592 BID CONFIRM
f5 -- big-ip_access_policy_manager	On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as Zombie POODLE and GOLDENDOODLE.)	2019-02-26	4.3	CVE-2019-6593 CONFIRM
f5 -- big-ip_access_policy_manager	On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATA_FINs in the reassembly queue, which can lead to an infinite loop in some circumstances.	2019-02-26	4.3	CVE-2019-6594 CONFIRM
f5 -- big-ip_access_policy_manager	Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI.	2019-02-26	4.3	CVE-2019-6595 BID CONFIRM
freedesktop -- poppler	A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-26	6.8	CVE-2019-9200 BID MISC MISC
gnu -- binutils	An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.	2019-02-23	6.8	CVE-2019-9070 BID MISC MISC
gnu -- binutils	An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.	2019-02-23	4.3	CVE-2019-9071 BID MISC MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.	2019-02-23	4.3	CVE-2019-9072 MISC MISC MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.	2019-02-23	4.3	CVE-2019-9073 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.	2019-02-23	4.3	CVE-2019-9074 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.	2019-02-23	6.8	CVE-2019-9075 MISC
gnu -- binutils	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.	2019-02-23	4.3	CVE-2019-9076 MISC
gnu -- binutils	An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.	2019-02-23	6.8	CVE-2019-9077 BID MISC
gnu -- glibc	In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match.	2019-02-25	5.0	CVE-2009-5155 MISC MISC MISC MISC MISC MISC MISC
gnu -- glibc	In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\227|)(\\1\\1|t1|\\\2537)+' in grep.	2019-02-25	5.0	CVE-2018-20796 BID MISC MISC
gnu -- glibc	** DISPUTED ** In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\1\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern.	2019-02-26	5.0	CVE-2019-9192 MISC
gnu -- pspp	There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to denial of service.	2019-02-27	4.3	CVE-2019-9211 BID MISC
google -- android	In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This could lead to local information disclosure via an insecure wireless connection with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-117508900.	2019-02-28	5.0	CVE-2019-1997 BID CONFIRM
google -- android	In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This could lead to local denial of service that is not fixed by a factory reset, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-116055338.	2019-02-28	4.9	CVE-2019-1998 BID CONFIRM
gurock -- testrail	An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (available in the description editor), allowing remote authenticated users to execute arbitrary code by uploading an image file with an executable extension but a safe Content-Type value, and then accessing it via a direct request to the file in the file-upload directory (if it's accessible according to the server configuration).	2019-02-25	6.5	CVE-2018-20063 MISC
hdfgroup -- hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5VM_memcpyvv in H5VM.c when called from H5D__compact_readvv in H5Dcompact.c.	2019-02-25	6.8	CVE-2019-9151 MISC
hdfgroup -- hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MM_xstrdup in H5MM.c when called from H5O_dtype_decode_helper in H5Odtype.c.	2019-02-25	6.8	CVE-2019-9152 MISC
hornerautomation -- cscape	Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.	2019-02-28	6.8	CVE-2019-6555 BID MISC
hsycms -- hsycms	An issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the /book page.	2019-02-25	4.3	CVE-2019-9145 MISC
ibm -- bigfix_platform	IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets deployed to the associated sites due to not enabling authenticated access. IBM X-Force ID: 156869.	2019-02-27	5.0	CVE-2019-4061 CONFIRM BID XF
leonerd -- libvterm	libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.	2019-02-24	5.0	CVE-2018-20786 MISC MISC
libming -- ming	Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.	2019-02-24	6.8	CVE-2019-9113 MISC
libming -- ming	Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.	2019-02-24	6.8	CVE-2019-9114 MISC
linux -- linux_kernel	In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.	2019-02-25	4.6	CVE-2019-9162 MISC BID MISC MISC MISC MISC
maccms -- maccms	Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).	2019-02-27	4.3	CVE-2019-8410 MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function InflateVarName() in inflate.c when called from ReadNextCell in mat5.c.	2019-02-23	5.0	CVE-2019-9026 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell() in mat5.c.	2019-02-23	5.0	CVE-2019-9027 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.	2019-02-23	6.4	CVE-2019-9028 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.	2019-02-23	5.0	CVE-2019-9029 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.	2019-02-23	6.4	CVE-2019-9030 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.	2019-02-23	5.0	CVE-2019-9031 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.	2019-02-23	5.0	CVE-2019-9032 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.	2019-02-23	6.4	CVE-2019-9033 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.	2019-02-23	6.4	CVE-2019-9034 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.	2019-02-23	6.4	CVE-2019-9035 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.	2019-02-23	5.0	CVE-2019-9036 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.	2019-02-23	6.4	CVE-2019-9037 MISC MISC
matio_project -- matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.	2019-02-23	5.0	CVE-2019-9038 MISC MISC
mcafee -- agent	Buffer Access with Incorrect Length Value in McAfee Agent (MA) 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets.	2019-02-28	5.0	CVE-2019-3598 BID CONFIRM
mcafee -- agent	Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled.	2019-02-28	4.3	CVE-2019-3599 CONFIRM
mcafee -- endpoint_security	Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.	2019-02-28	6.1	CVE-2019-3582 CONFIRM
micode -- xiaomi_perseus-p-oss	drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted application for denial of service.	2019-02-24	4.3	CVE-2018-20788 MISC
mozilla -- firefox	Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63.	2019-02-28	6.8	CVE-2018-12388 BID SECTRACK CONFIRM UBUNTU CONFIRM
mozilla -- firefox	By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are otherwise restricted. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.	2019-02-28	5.0	CVE-2018-12395 BID SECTRACK REDHAT REDHAT CONFIRM MLIST GENTOO UBUNTU DEBIAN CONFIRM CONFIRM
mozilla -- firefox	A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.	2019-02-28	4.3	CVE-2018-12396 BID SECTRACK REDHAT REDHAT CONFIRM MLIST GENTOO UBUNTU DEBIAN CONFIRM CONFIRM
mozilla -- firefox	By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63.	2019-02-28	4.3	CVE-2018-12398 BID SECTRACK CONFIRM CONFIRM UBUNTU CONFIRM
mozilla -- firefox	When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox < 63.	2019-02-28	4.3	CVE-2018-12399 BID SECTRACK CONFIRM UBUNTU CONFIRM
mozilla -- firefox	In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63.	2019-02-28	5.0	CVE-2018-12400 BID SECTRACK CONFIRM CONFIRM
mozilla -- firefox	Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox < 63.	2019-02-28	5.0	CVE-2018-12401 BID SECTRACK CONFIRM UBUNTU CONFIRM
mozilla -- firefox	The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by including resources otherwise unreachable to the malicious page, if they can convince the visitor to save the complete web page. Similarly, SameSite cookies are sent on cross-origin requests when the "Save Page As..." menu item is selected to save a page, which can result in saving the wrong version of resources based on those cookies. This vulnerability affects Firefox < 63.	2019-02-28	4.3	CVE-2018-12402 BID SECTRACK CONFIRM CONFIRM UBUNTU CONFIRM
mozilla -- firefox	If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63.	2019-02-28	5.0	CVE-2018-12403 BID SECTRACK CONFIRM UBUNTU CONFIRM
mozilla -- firefox	Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.	2019-02-28	6.8	CVE-2018-12406 BID CONFIRM UBUNTU CONFIRM
mozilla -- firefox	A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.	2019-02-28	4.3	CVE-2018-18494 BID REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST UBUNTU UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM CONFIRM
mozilla -- firefox	WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions. This vulnerability affects Firefox < 64.	2019-02-28	4.3	CVE-2018-18495 BID CONFIRM UBUNTU CONFIRM
mozilla -- firefox	When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. *Note: This issue only affects Windows operating systems. Other operating systems are not affected.*. This vulnerability affects Firefox < 64.	2019-02-28	6.8	CVE-2018-18496 BID CONFIRM CONFIRM
mozilla -- firefox	Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to open privileged about: or file: locations. This vulnerability affects Firefox < 64.	2019-02-28	4.3	CVE-2018-18497 BID CONFIRM UBUNTU CONFIRM
mozilla -- firefox	A same-origin policy violation allowing the theft of cross-origin URL entries when using a meta http-equiv="refresh" on a page to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.	2019-02-28	4.3	CVE-2018-18499 CONFIRM CONFIRM CONFIRM CONFIRM
mozilla -- firefox_esr	Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.	2019-02-28	6.8	CVE-2018-12389 BID BID SECTRACK REDHAT REDHAT REDHAT REDHAT CONFIRM MLIST MLIST GENTOO GENTOO UBUNTU DEBIAN DEBIAN CONFIRM CONFIRM
neatorobotics -- botvac_connected_firmware	Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power cycle occurs, this does not completely reset the chip: memory contents are still in place. Also, it restarts into a boot menu that enables XMODEM upload and execution of an unsigned QNX IFS system image, thereby completing the bypass of secure boot. Moreover, the attacker can craft custom IFS data and write it to unused memory to extract all memory contents that had previously been present. This includes the original firmware and sensitive information such as Wi-Fi credentials.	2019-02-23	4.4	CVE-2018-20785 MISC
netapp -- clustered_data_ontap	Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive information to an unauthenticated user.	2019-02-27	5.0	CVE-2019-5491 BID CONFIRM
netgate -- pfsense	The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.	2019-03-01	5.0	CVE-2018-20798 MISC
nvidia -- gpu_driver	NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not release a resource after its effective lifetime has ended, which may lead to denial of service.	2019-02-27	4.9	CVE-2019-5671 CONFIRM
online_food_ordering_script_project -- online_food_ordering_script	PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.	2019-02-23	6.0	CVE-2019-9062 MISC
openssl -- openssl	If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).	2019-02-27	4.3	CVE-2019-1559 BID CONFIRM MLIST CONFIRM UBUNTU DEBIAN CONFIRM
php -- php	An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.	2019-02-22	5.0	CVE-2019-9022 MISC DEBIAN
php -- php	An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.	2019-02-22	5.0	CVE-2019-9024 BID MISC DEBIAN
pluck-cms -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.	2019-02-23	5.8	CVE-2019-9048 MISC
pluck-cms -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete modules via a /admin.php?action=module_delete&var1= URI.	2019-02-23	5.8	CVE-2019-9049 MISC
pluck-cms -- pluck	An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.	2019-02-23	6.5	CVE-2019-9050 MISC
pluck-cms -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI.	2019-02-23	5.8	CVE-2019-9051 MISC
pluck-cms -- pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete pictures via a /admin.php?action=deleteimage&var1= URI.	2019-02-23	5.8	CVE-2019-9052 MISC
podofo_project -- podofo	An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.	2019-02-27	4.3	CVE-2018-20797 MISC
podofo_project -- podofo	PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-02-26	6.8	CVE-2019-9199 MISC MISC
qualcomm -- ipq8074_firmware	Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 800, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	4.9	CVE-2018-11820 BID CONFIRM
qualcomm -- ipq8074_firmware	Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	4.9	CVE-2018-11864 BID CONFIRM
qualcomm -- ipq8074_firmware	Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	4.6	CVE-2018-11938 BID CONFIRM
qualcomm -- mdm9150_firmware	Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	4.9	CVE-2018-11845 BID CONFIRM
qualcomm -- mdm9150_firmware	Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.	2019-02-25	4.6	CVE-2018-13913 CONFIRM
qualcomm -- mdm9150_firmware	Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20.	2019-02-25	4.6	CVE-2018-13914 CONFIRM
qualcomm -- mdm9150_firmware	Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS605, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SXR1130.	2019-02-25	6.6	CVE-2018-5839 BID CONFIRM
qualcomm -- mdm9607_firmware	Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130.	2019-02-25	5.0	CVE-2018-11935 BID CONFIRM
qualcomm -- mdm9650_firmware	Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU, QCS605, SD 410/12, SD 615/16/SD 415, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SXR1130.	2019-02-25	6.4	CVE-2018-11932 BID CONFIRM
qualcomm -- msm8996au_firmware	Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MSM8996AU, QCS605, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.	2019-02-25	4.9	CVE-2018-11948 BID CONFIRM
s-cms -- s-cms	S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.	2019-02-23	6.8	CVE-2019-9040 MISC
schoolcms -- schoolcms	SchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c=site&a=save by using the .jpg extension, changing the Content-Type to image/php, and placing PHP code after the JPEG data. This ultimately allows execution of arbitrary PHP code.	2019-02-26	6.5	CVE-2019-9181 MISC
semcosoft -- semcosoft	A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form.	2019-02-23	4.3	CVE-2018-18692 MISC
sitemagic -- sitemagic_cms	An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php.	2019-02-23	6.5	CVE-2019-9042 MISC
sublimetext -- sublime_text_3	** DISPUTED ** DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublime_text.exe to open a .txt file within an attacker's %LOCALAPPDATA%\Temp\sublime_text folder. NOTE: the vendor's position is "This does not appear to be a bug with Sublime Text, but rather one with Windows that has been patched."	2019-02-25	6.8	CVE-2019-9116 MISC
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.	2019-02-25	6.4	CVE-2018-20789 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.	2019-02-25	6.4	CVE-2018-20790 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.	2019-02-25	4.3	CVE-2018-20791 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.	2019-02-25	5.0	CVE-2018-20792 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.	2019-02-25	5.0	CVE-2018-20793 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.	2019-02-25	5.0	CVE-2018-20794 EXPLOIT-DB
tecrail -- responsive_filemanager	tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.	2019-02-25	5.0	CVE-2018-20795 EXPLOIT-DB
vembu -- storegrid	Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.	2019-02-23	4.3	CVE-2014-10078 MISC MISC
vembu -- storegrid	In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.	2019-02-23	5.0	CVE-2014-10079 MISC MISC MISC
wireshark -- wireshark	In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.	2019-02-27	5.0	CVE-2019-9208 BID MISC MISC MISC
wireshark -- wireshark	In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.	2019-02-27	5.0	CVE-2019-9209 BID MISC MISC MISC
wireshark -- wireshark	In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation.	2019-02-27	5.0	CVE-2019-9214 BID MISC MISC MISC
woocommerce -- woocommerce	WooCommerce before 3.5.5 allows XSS via a Photoswipe caption.	2019-02-25	4.3	CVE-2019-9168 MISC
wuzhicms -- wuzhi_cms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.	2019-02-24	4.3	CVE-2019-9107 MISC MISC
wuzhicms -- wuzhi_cms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.	2019-02-24	4.3	CVE-2019-9109 MISC MISC
wuzhicms -- wuzhi_cms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.	2019-02-24	4.3	CVE-2019-9110 MISC MISC
wuzhicms -- wuzhicms	XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.	2019-02-24	4.3	CVE-2019-9108 MISC MISC
zzzcms -- zzzphp	There is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the filetext parameter.	2019-02-26	6.8	CVE-2019-9182 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
apache -- airflow	In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.	2019-02-27	3.5	CVE-2018-20244 MISC
avaya -- one-x_communicator	Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.2.x versions prior to 6.2 SP13.	2019-02-26	2.1	CVE-2019-7006 BID CONFIRM CONFIRM
google -- android	In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure, sending files accessible to AOSP Mail to a remote email recipient, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-32589229.	2019-02-28	2.1	CVE-2019-1995 BID CONFIRM
google -- android	In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9. Android ID: A-111451066.	2019-02-28	3.3	CVE-2019-1996 BID CONFIRM
google -- android	The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-117422211.	2019-02-28	2.1	CVE-2019-2001 BID CONFIRM
misp -- misp	In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).	2019-03-01	3.5	CVE-2019-9482 MISC
mozilla -- firefox	A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being displayed to the user. This allows extensions to run content scripts in local pages without permission warnings when a local file is opened. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.	2019-02-28	3.6	CVE-2018-12397 BID SECTRACK REDHAT REDHAT CONFIRM MLIST GENTOO UBUNTU DEBIAN CONFIRM CONFIRM
php_appointment_booking_script_project -- php_appointment_booking_script	PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.	2019-02-23	3.5	CVE-2019-9066 MISC
qualcomm -- mdm9150_firmware	Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.	2019-02-25	2.1	CVE-2018-13912 CONFIRM
zzcms -- zzcms	zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.	2019-02-24	3.5	CVE-2019-9078 MISC

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
amazon -- ring_doorbell	Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.	2019-03-01	not yet calculated	CVE-2019-9483 MISC MISC
bento4 -- bento4	An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (for example) the mp42hls binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-01	not yet calculated	CVE-2019-9544 MISC MISC
cisco -- webex_meetings_desktop_app_and_webex_productivity_tools_for_windows	A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.	2019-02-28	not yet calculated	CVE-2019-1674 BID CISCO
cisco -- webex_teams	A vulnerability in the client application for iOS of Cisco Webex Teams could allow an authenticated, remote attacker to upload arbitrary files within the scope of the iOS application. The vulnerability is due to improper input validation in the client application. An attacker could exploit this vulnerability by sending a malicious file to a targeted user and persuading the user to manually open it. An exploit could allow the attacker to overwrite sensitive application files and eventually cause a denial of service (DoS) condition by foreclosing future access to the system to the targeted user. This vulnerability is fixed in version 3.13.26920.	2019-02-25	not yet calculated	CVE-2019-1689 BID CISCO
grin -- grin	util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files in an archive.	2019-02-26	not yet calculated	CVE-2019-9195 MISC MISC
ibm -- san_volume_controller_and _storwize_and_spectrum_virtualize_and_flashsystem_products	IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenticated user to download arbitrary files from the operating system. IBM X-Force ID: 148757.	2019-02-27	not yet calculated	CVE-2018-1775 BID XF CONFIRM
invision -- power_board	Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.	2019-03-01	not yet calculated	CVE-2019-8278 MISC
irisnet-crypto -- irisnet-crypto	In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.	2019-02-24	not yet calculated	CVE-2019-9115 MISC
laravel_framework -- laravel_framework	The Illuminate component of Laravel Framework 5.7.x has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the PendingCommand class in PendingCommand.php.	2019-02-24	not yet calculated	CVE-2019-9081 MISC MISC
pfsense -- pfsense	In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.	2019-03-01	not yet calculated	CVE-2018-20799 MISC
php -- php	An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.	2019-02-22	not yet calculated	CVE-2019-9025 MISC
poppler -- poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.	2019-03-01	not yet calculated	CVE-2019-9545 MISC MISC
poppler -- poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.	2019-03-01	not yet calculated	CVE-2019-9543 MISC MISC
solarwinds -- orion_platform	SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.	2019-03-01	not yet calculated	CVE-2019-9546 CONFIRM
storage_performance_development_kit -- storage_performance_development_kit	In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.	2019-03-01	not yet calculated	CVE-2019-9547 CONFIRM CONFIRM
vanilla -- forums	Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.	2019-03-01	not yet calculated	CVE-2019-8279 MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

IRS Launches ‘Dirty Dozen’ Campaign on Tax Scams

March 4, 2019, 2:34 pm

≫ Next: Cisco Releases Security Updates

≪ Previous: SB19-063: Vulnerability Summary for the Week of February 25, 2019

$

0

0

Original release date: March 04, 2019

The Internal Revenue Service (IRS) has launched its annual awareness campaign on the 12 most prevalent tax scams, known as the “Dirty Dozen.” As part of the campaign, IRS will highlight one scam each weekday. The first topic in the campaign focuses on internet phishing scams that lead to tax fraud and identity theft. IRS warns to be on alert for a continuing surge of fake emails, texts, websites, and social media attempts to steal users’ personal information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages taxpayers, businesses, and tax professionals to review the IRS’s Dirty Dozen alert, check the IRS website for more daily Dirty Dozen tax scams, and see CISA’s Tip on Avoiding Social Engineering and Phishing Attacks.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates

March 6, 2019, 2:01 pm

≫ Next: ICSJWG Spring Meeting and Call for Abstracts (Deadline Extended)

≪ Previous: IRS Launches ‘Dirty Dozen’ Campaign on Tax Scams

$

0

0

Original release date: March 06, 2019

Cisco has released multiple security updates to address vulnerabilities in various Cisco products. An attacker could exploit some of those vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisories and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

ICSJWG Spring Meeting and Call for Abstracts (Deadline Extended)

March 7, 2019, 10:05 am

≫ Next: Google Releases Security Updates for Chrome

≪ Previous: Cisco Releases Security Updates

$

0

0

Original release date: March 07, 2019

The Industrial Control Systems Joint Working Group (ICSJWG)—a collaborative and coordinating body operating under the Critical Infrastructure Partnership Advisory Council (CIPAC) framework—will hold the 2019 ICSJWG Spring Meeting in Kansas City, MO, April 23–25, 2019. The Spring Meeting kicks off the 10th anniversary of ICSJWG biannual meetings.

ICSJWG has extended its deadline for abstracts to be presented at the meeting to 5 p.m. ET, March 15, 2019.

The Cybersecurity and Infrastructure Security Agency (CISA) ICSJWG facilitates information sharing to reduce the risk to the Nation’s industrial control systems.

Visit the ICSJWG website for registration and submission information.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Google Releases Security Updates for Chrome

March 7, 2019, 10:49 am

≫ Next: SB19-070: Vulnerability Summary for the Week of March 4, 2019

≪ Previous: ICSJWG Spring Meeting and Call for Abstracts (Deadline Extended)

$

0

0

Original release date: March 07, 2019

Google has released Chrome version 72.0.3626.121 for Windows, Mac, and Linux. This version addresses a vulnerability that a remote attacker could exploit to take control of an affected system. This vulnerability was detected in exploits in the wild.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Google Chrome blog entry and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-070: Vulnerability Summary for the Week of March 4, 2019

March 11, 2019, 1:14 am

≫ Next: Adobe Releases Security Updates

≪ Previous: Google Releases Security Updates for Chrome

$

0

0

Original release date: March 11, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
airdroid -- airdroid	The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultaneous sdctl/comm/lite_auth/ requests.	2019-03-06	7.8	CVE-2019-9599 EXPLOIT-DB MISC
apache -- jmeter	Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMeterEngine and proceed with an attack using untrusted data deserialization. This only affect tests running in Distributed mode. Note that versions before 4.0 are not able to encrypt traffic between the nodes, nor authenticate the participating nodes so upgrade to JMeter 5.1 is also advised.	2019-03-06	7.5	CVE-2019-0187 MLIST BID
apache -- solr	In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.	2019-03-07	7.5	CVE-2019-0192 MLIST BID
apple -- iphone_os	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.	2019-03-05	9.3	CVE-2019-6213 BID CONFIRM CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges.	2019-03-05	9.3	CVE-2019-6218 BID CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.	2019-03-04	7.5	CVE-2019-6235 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
bluecms_project -- bluecms	BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.	2019-03-06	7.5	CVE-2019-9594 MISC
checkpoint -- zonealarm	Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.	2019-03-01	7.2	CVE-2018-8790 BID MISC MISC MISC
cisco -- nx-os	A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escape a restricted shell on an affected device. The vulnerability is due to insufficient sanitization of user-supplied input when issuing a specific CLI command with parameters on an affected device. An attacker could exploit this vulnerability by authenticating to the device CLI and issuing certain commands. A successful exploit could allow the attacker to escape the restricted shell and execute arbitrary commands with root-level privileges on the affected device. This vulnerability only affects Cisco Nexus 9000 Series ACI Mode Switches that are running a release prior to 14.0(3d).	2019-03-06	7.2	CVE-2019-1591 BID CISCO
cisco -- nx-os	A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. The attacker must authenticate with valid user credentials. The vulnerability is due to the incorrect implementation of a Bash shell command that allows role-based access control (RBAC) to be bypassed. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level by executing commands that should be restricted to other roles. For example, a dev-ops user could escalate their privilege level to admin with a successful exploit of this vulnerability.	2019-03-06	7.2	CVE-2019-1593 BID CISCO
cisco -- nx-os	A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials. The vulnerability is due to incorrect permissions of a system executable. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level to root. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-07	7.2	CVE-2019-1596 CISCO
dolibarr -- dolibarr	An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.	2019-03-07	7.5	CVE-2018-16809 MISC
fengoffice -- feng_office	Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php.	2019-03-07	7.5	CVE-2019-9623 MISC EXPLOIT-DB
flarumchina -- flarumchina	FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.	2019-03-04	7.5	CVE-2019-9566 MISC
freedesktop -- poppler	Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.	2019-03-08	7.5	CVE-2019-9631 MISC
ibm -- financial_transaction_manager	IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998.	2019-03-05	7.5	CVE-2019-4032 CONFIRM XF
layerbb -- layerbb	LayerBB 1.1.1 has SQL Injection via the search.php search_query parameter.	2019-03-07	7.5	CVE-2018-17988 EXPLOIT-DB
microsoft -- .net_framework	A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.	2019-03-05	9.3	CVE-2019-0613 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0590 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0591 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0593 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0605 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0607 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0610 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0640 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0642 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0651, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0644 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0652, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0651 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0655.	2019-03-05	7.6	CVE-2019-0652 BID CONFIRM
microsoft -- chakracore	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-0640, CVE-2019-0642, CVE-2019-0644, CVE-2019-0651, CVE-2019-0652.	2019-03-05	7.6	CVE-2019-0655 BID CONFIRM
microsoft -- edge	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645, CVE-2019-0650.	2019-03-05	7.6	CVE-2019-0634 BID CONFIRM
microsoft -- edge	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634, CVE-2019-0650.	2019-03-05	7.6	CVE-2019-0645 BID CONFIRM
microsoft -- edge	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0634, CVE-2019-0645.	2019-03-05	7.6	CVE-2019-0650 BID CONFIRM
microsoft -- exchange_server	An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686.	2019-03-05	9.3	CVE-2019-0724 BID CONFIRM
microsoft -- internet_explorer	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'.	2019-03-05	7.6	CVE-2019-0606 BID CONFIRM
microsoft -- office	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0672, CVE-2019-0673, CVE-2019-0674, CVE-2019-0675.	2019-03-05	9.3	CVE-2019-0671 BID CONFIRM
microsoft -- office	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0673, CVE-2019-0674, CVE-2019-0675.	2019-03-05	9.3	CVE-2019-0672 BID CONFIRM
microsoft -- office	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0674, CVE-2019-0675.	2019-03-05	9.3	CVE-2019-0673 BID CONFIRM
microsoft -- office	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0673, CVE-2019-0675.	2019-03-05	9.3	CVE-2019-0674 BID CONFIRM
microsoft -- office	A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0673, CVE-2019-0674.	2019-03-05	9.3	CVE-2019-0675 BID CONFIRM
microsoft -- sharepoint_enterprise_server	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604.	2019-03-05	9.3	CVE-2019-0594 BID CONFIRM
microsoft -- sharepoint_enterprise_server	A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594.	2019-03-05	9.3	CVE-2019-0604 BID CONFIRM
microsoft -- visual_studio_code	A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.	2019-03-05	9.3	CVE-2019-0728 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.	2019-03-05	9.3	CVE-2019-0595 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.	2019-03-05	9.3	CVE-2019-0596 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0598, CVE-2019-0599, CVE-2019-0625.	2019-03-05	9.3	CVE-2019-0597 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.	2019-03-05	9.3	CVE-2019-0598 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0625.	2019-03-05	9.3	CVE-2019-0599 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.	2019-03-05	9.3	CVE-2019-0618 BID CONFIRM
microsoft -- windows_10	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.	2019-03-05	7.2	CVE-2019-0623 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0598, CVE-2019-0599.	2019-03-05	9.3	CVE-2019-0625 BID CONFIRM
microsoft -- windows_10	A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.	2019-03-05	7.5	CVE-2019-0626 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0633.	2019-03-05	9.0	CVE-2019-0630 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0630.	2019-03-05	9.0	CVE-2019-0633 BID CONFIRM
microsoft -- windows_10	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0618.	2019-03-05	9.3	CVE-2019-0662 BID CONFIRM
motorola -- c1_firmware	An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNetworkTomographySettings API function, as demonstrated by shell metacharacters in the tomography_ping_number field.	2019-03-07	10.0	CVE-2019-9117 MISC
motorola -- c1_firmware	An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.	2019-03-07	10.0	CVE-2019-9118 MISC
motorola -- c1_firmware	An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteSettings API function, as demonstrated by shell metacharacters in the staticroute_list field.	2019-03-07	10.0	CVE-2019-9119 MISC
motorola -- c1_firmware	An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWLanACLSettings API function, as demonstrated by shell metacharacters in the wl(0).(0)_maclist field.	2019-03-07	10.0	CVE-2019-9120 MISC
motorola -- c1_firmware	An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetSmartQoSSettings API function, as demonstrated by shell metacharacters in the smartqos_priority_devices field.	2019-03-07	10.0	CVE-2019-9121 MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.	2019-03-05	8.5	CVE-2019-6522 BID MISC
moxa -- eds-405a_firmware	Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.	2019-03-05	7.5	CVE-2019-6557 BID MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.	2019-03-05	10.0	CVE-2019-6563 BID MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces.	2019-03-05	10.0	CVE-2019-3918 MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, unauthenticated attacker to /GponForm/fsetup_Form. An attacker can leverage this vulnerability to potentially execute arbitrary code.	2019-03-05	7.5	CVE-2019-3922 MISC
phpshe -- phpshe	PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.	2019-03-07	7.5	CVE-2019-9626 MISC
solarwinds -- orion_platform	SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.	2019-03-01	7.5	CVE-2019-9546 CONFIRM
twinkletoessoftware -- booked	phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP code, because Presenters/Admin/ManageThemePresenter.php does not ensure an image file extension.	2019-03-05	7.5	CVE-2019-9581 MISC MISC EXPLOIT-DB
zzcms -- zzcms	zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.	2019-03-07	7.5	CVE-2018-17412 MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
1234n -- minicms	MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891.	2019-03-06	5.8	CVE-2019-9603 MISC
apache -- mesos	When parsing a JSON payload with deeply nested JSON structures, the parser in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.1, 1.6.0 to 1.6.1, and 1.7.0 might overflow the stack due to unbounded recursion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.	2019-03-05	5.0	CVE-2018-11793 BID MISC
apache -- qpid_broker-j	A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (AMQP 0-8, 0-9, 0-91 and 0-10). Users of Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 utilizing AMQP protocols 0-8, 0-9, 0-91, 0-10 must upgrade to Qpid Broker-J versions 7.0.7 or 7.1.1 or later.	2019-03-06	5.0	CVE-2019-0200 BID MLIST
apowersoft -- apowermanager	The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=PhoneRequestAuthorization requests.	2019-03-06	5.0	CVE-2019-9601 EXPLOIT-DB MISC
appcms -- appcms	AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.	2019-03-06	4.3	CVE-2019-9595 MISC
apple -- icloud	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6212 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM UBUNTU
apple -- icloud	A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6215 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM UBUNTU EXPLOIT-DB
apple -- icloud	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6216 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6217 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6226 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6227 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting.	2019-03-05	4.3	CVE-2019-6229 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6233 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- icloud	A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6234 BID CONFIRM CONFIRM CONFIRM CONFIRM CONFIRM
apple -- iphone_os	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.	2019-03-05	5.8	CVE-2019-6200 BID CONFIRM CONFIRM
apple -- iphone_os	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.	2019-03-05	6.8	CVE-2019-6202 BID CONFIRM CONFIRM CONFIRM
apple -- iphone_os	An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.	2019-03-04	5.0	CVE-2019-6206 BID CONFIRM
apple -- iphone_os	A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.	2019-03-05	4.3	CVE-2019-6208 BID CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.	2019-03-05	4.3	CVE-2019-6209 BID CONFIRM CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.	2019-03-05	6.8	CVE-2019-6211 CONFIRM CONFIRM
apple -- iphone_os	A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.	2019-03-05	6.8	CVE-2019-6214 BID CONFIRM CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.	2019-03-05	5.0	CVE-2019-6219 BID CONFIRM CONFIRM CONFIRM
apple -- iphone_os	A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.	2019-03-05	5.0	CVE-2019-6223 CONFIRM CONFIRM
apple -- iphone_os	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.	2019-03-05	6.8	CVE-2019-6224 BID CONFIRM CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- iphone_os	A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox.	2019-03-05	6.8	CVE-2019-6230 BID CONFIRM CONFIRM CONFIRM CONFIRM
apple -- iphone_os	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.	2019-03-05	4.3	CVE-2019-6231 BID CONFIRM CONFIRM CONFIRM CONFIRM
apple -- itunes	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges.	2019-03-05	6.8	CVE-2019-6221 BID CONFIRM CONFIRM CONFIRM
apple -- mac_os_x	An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.	2019-03-05	4.3	CVE-2019-6220 BID CONFIRM
apple -- safari	A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.	2019-03-05	4.3	CVE-2019-6228 BID CONFIRM CONFIRM
axiosys -- bento4	An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (for example) the mp42hls binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-01	6.8	CVE-2019-9544 MISC MISC
bluemind -- bluemind	In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.	2019-03-04	5.0	CVE-2019-9563 MISC MISC MISC
bolt -- bolt	Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.	2019-03-07	6.5	CVE-2019-9185 MISC MISC MISC
chshcms -- cscms	An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.	2019-03-07	4.3	CVE-2019-9598 MISC
cisco -- nx-os	A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete input validation of Extensible Authentication Protocol over LAN (EAPOL) frames. An attacker could exploit this vulnerability by sending a crafted EAPOL frame to an interface on the targeted device. A successful exploit could allow the attacker to cause the Layer 2 (L2) forwarding process to restart multiple times, leading to a system-level restart of the device and a DoS condition. Note: This vulnerability affects only NX-OS devices configured with 802.1X functionality. Cisco Nexus 1000V Switch for VMware vSphere devices are affected in versions prior to 5.2(1)SV3(1.4b). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(5)N1(1) and 7.1(5)N1(1b). Nexus 7000 and 7700 Series Switches are affected in versions prior to 8.2(3). Nexus 9000 Series Fabric Switches in ACI Mode are affected in versions prior to 13.2(1l). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).	2019-03-06	6.1	CVE-2019-1594 BID CISCO
cisco -- nx-os	A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition. This vulnerability has been fixed in version 7.3(5)N1(1).	2019-03-06	6.1	CVE-2019-1595 BID CISCO
directadmin -- directadmin	JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.	2019-03-07	6.8	CVE-2019-9625 MISC EXPLOIT-DB
dolibarr -- dolibarr	An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.	2019-03-07	4.3	CVE-2018-16808 MISC
dotcms -- dotcms	dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter.	2019-03-07	5.8	CVE-2018-17422 MISC
ebrigade -- ebrigade	eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as demonstrated by reading the user-data/save/backup.sql file.	2019-03-07	4.0	CVE-2019-9622 MISC MISC EXPLOIT-DB
freedesktop -- poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.	2019-03-01	6.8	CVE-2019-9543 BID MISC MISC
freedesktop -- poppler	An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.	2019-03-01	6.8	CVE-2019-9545 MISC MISC
glyphandcog -- xpdfreader	There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.	2019-03-06	6.8	CVE-2019-9587 MISC MISC
glyphandcog -- xpdfreader	There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-06	6.8	CVE-2019-9588 MISC MISC
glyphandcog -- xpdfreader	There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-06	6.8	CVE-2019-9589 MISC MISC
gnome -- gdk-pixbuf	GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.	2019-03-07	6.8	CVE-2017-12447 MISC MISC
gnu -- binutils	The aout_32_swap_std_reloc_out function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils before 2.31, allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted file, as demonstrated by objcopy.	2019-03-07	4.3	CVE-2018-14038 MISC MISC
golang -- go	Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.	2019-03-08	6.8	CVE-2019-9634 MISC
hyphp -- hybbs	An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.	2019-03-07	4.3	CVE-2018-14499 MISC
ibm -- cloud_private	IBM Cloud Private 3.1.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 153319.	2019-03-05	5.8	CVE-2018-1939 BID XF CONFIRM
ibm -- infosphere_information_governance_catalog	IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 151639.	2019-03-05	5.8	CVE-2018-1875 CONFIRM XF
ibm -- sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.	2019-03-05	4.3	CVE-2019-4063 BID XF CONFIRM
imagemagick -- imagemagick	In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.	2019-03-07	5.0	CVE-2019-7175 MISC MISC
jtbc -- jtbc	/console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.	2019-03-07	6.8	CVE-2018-17429 MISC
libjpeg-turbo -- libjpeg-turbo	get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.	2019-03-07	4.3	CVE-2018-14498 MISC MISC MISC
linux -- linux_kernel	In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.	2019-03-05	4.9	CVE-2019-9213 MISC BID MISC MISC MISC MISC MISC MISC EXPLOIT-DB
medical_store_script_project -- medical_store_script	PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file.	2019-03-06	5.0	CVE-2019-9607 MISC
microsoft -- .net_core	A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.	2019-03-05	4.3	CVE-2019-0657 BID REDHAT CONFIRM
microsoft -- chakracore	A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.	2019-03-05	6.8	CVE-2019-0649 BID CONFIRM
microsoft -- chakracore	An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0648.	2019-03-05	4.3	CVE-2019-0658 BID CONFIRM
microsoft -- edge	A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.	2019-03-05	4.3	CVE-2019-0641 BID CONFIRM
microsoft -- edge	An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.	2019-03-05	4.3	CVE-2019-0643 BID CONFIRM
microsoft -- edge	An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object was created.The update addresses the vulnerability by changing the way certain functions handle objects in memory, aka Scripting Engine Information Disclosure Vulnerability. This CVE ID is unique from CVE-2019-0658.	2019-03-05	4.3	CVE-2019-0648 BID CONFIRM
microsoft -- edge	A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability'.	2019-03-05	4.3	CVE-2019-0654 BID CONFIRM
microsoft -- excel	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.	2019-03-05	4.3	CVE-2019-0669 BID CONFIRM
microsoft -- excel_viewer	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.	2019-03-05	4.3	CVE-2019-0540 BID CONFIRM
microsoft -- exchange_server	An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0724.	2019-03-05	5.8	CVE-2019-0686 BID CONFIRM
microsoft -- internet_explorer	An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully exploited this vulnerability could test for the presence of files on disk, aka 'Internet Explorer Information Disclosure Vulnerability'.	2019-03-05	4.3	CVE-2019-0676 BID CONFIRM
microsoft -- java_software_development_kit	An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.	2019-03-05	5.0	CVE-2019-0741 BID CONFIRM
microsoft -- powershell_core	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0631, CVE-2019-0632.	2019-03-05	4.6	CVE-2019-0627 BID CONFIRM
microsoft -- powershell_core	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0632.	2019-03-05	4.6	CVE-2019-0631 BID CONFIRM
microsoft -- powershell_core	A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.	2019-03-05	4.6	CVE-2019-0632 BID CONFIRM
microsoft -- sharepoint_enterprise_server	An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.	2019-03-05	6.5	CVE-2019-0668 BID CONFIRM
microsoft -- sharepoint_enterprise_server	A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint Spoofing Vulnerability'.	2019-03-05	5.8	CVE-2019-0670 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.	2019-03-05	4.3	CVE-2019-0602 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.	2019-03-05	4.3	CVE-2019-0615 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0619, CVE-2019-0660, CVE-2019-0664.	2019-03-05	4.3	CVE-2019-0616 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660, CVE-2019-0664.	2019-03-05	4.3	CVE-2019-0619 BID CONFIRM
microsoft -- windows_10	A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.	2019-03-05	5.0	CVE-2019-0637 BID CONFIRM
microsoft -- windows_10	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.	2019-03-05	6.9	CVE-2019-0656 BID CONFIRM
microsoft -- windows_10	An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.	2019-03-05	4.4	CVE-2019-0659 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0664.	2019-03-05	4.3	CVE-2019-0660 BID CONFIRM
microsoft -- windows_7	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0619, CVE-2019-0660.	2019-03-05	4.3	CVE-2019-0664 BID CONFIRM
mitel -- connect_onsite	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.	2019-03-06	4.3	CVE-2019-9591 MISC
mitel -- connect_onsite	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.	2019-03-06	4.3	CVE-2019-9592 MISC
mitel -- connect_onsite	A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.	2019-03-06	4.3	CVE-2019-9593 MISC
monstra -- monstra	Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbidden_types variable.	2019-03-07	6.5	CVE-2018-17418 MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.	2019-03-05	5.0	CVE-2019-6518 BID MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.	2019-03-05	5.0	CVE-2019-6520 BID MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.	2019-03-05	5.0	CVE-2019-6524 BID MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.	2019-03-05	4.0	CVE-2019-6559 BID MISC
moxa -- eds-405a_firmware	Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.	2019-03-05	6.8	CVE-2019-6561 BID MISC
moxa -- eds-405a_firmware	Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.	2019-03-05	4.3	CVE-2019-6565 BID MISC
netgate -- pfsense	In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.	2019-03-01	5.0	CVE-2018-20799 MISC
njiandan-cms_project -- njiandan-cms	njiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.	2019-03-07	6.8	CVE-2019-8437 MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a crafted HTTP request.	2019-03-05	5.0	CVE-2019-3917 MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usb_restore_Form?script/.	2019-03-05	6.5	CVE-2019-3919 MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/device_Form?script/.	2019-03-05	6.5	CVE-2019-3920 MISC
nokia -- i-240w-q_gpon_ont_firmware	The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usb_Form?script/. An attacker can leverage this vulnerability to potentially execute arbitrary code.	2019-03-05	6.5	CVE-2019-3921 EXPLOIT-DB MISC
phome -- empirecms	EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.	2019-03-07	6.8	CVE-2018-18449 MISC
phpmywind -- phpmywind	An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php.	2019-03-07	4.3	CVE-2019-7660 MISC
phpmywind -- phpmywind	An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability.	2019-03-07	4.3	CVE-2019-7661 MISC
popojicms -- popojicms	An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935.	2019-03-03	6.8	CVE-2019-9549 MISC
psigridconnect -- iec104_security_proxy_firmware	PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Smart Telecontrol Unit TCG Versions 5.0.27, 5.1.19, 6.0.16 and prior, and IEC104 Security Proxy Version 2.2.10 and prior The web application browser interprets input as active HTML, JavaScript, or VBScript, which could allow an attacker to execute arbitrary code.	2019-03-05	6.5	CVE-2019-6528 BID MISC
quizandsurveymaster -- quiz_and_survey_master	The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.	2019-03-05	4.3	CVE-2019-9575 MISC MISC MISC MISC
sagemcom -- f@st_5260_firmware	Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small.	2019-03-05	5.0	CVE-2019-9555 MISC
samba -- samba	A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.	2019-03-06	4.0	CVE-2019-3824 CONFIRM MISC MLIST CONFIRM UBUNTU DEBIAN
schoolcms -- schoolcms	SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Static substring, changing the Content-Type to application/zip, and placing PHP code after the ZIP header. This ultimately allows execution of arbitrary PHP code in Public\Home\1_Static.php because of mishandling in the Application\Admin\Controller\ThemeController.class.php Upload() function.	2019-03-05	6.5	CVE-2019-9572 MISC
simplemachines -- simple_machines_forum	Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.	2019-03-07	4.3	CVE-2013-7467 MISC
simplemachines -- simple_machines_forum	Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.	2019-03-07	6.8	CVE-2013-7468 MISC
spdk -- storage_performance_development_kit	In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.	2019-03-01	5.0	CVE-2019-9547 CONFIRM CONFIRM
tengcon -- t-920_plc_firmware	An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service (persistent failure mode) by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 (aka UID 0x43) requests to TCP port 502.	2019-03-06	5.0	CVE-2019-9590 MISC
theolivetree -- ftp_server	The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers to cause a denial of service via a client that makes many connection attempts and drops certain packets.	2019-03-06	5.0	CVE-2019-9600 EXPLOIT-DB MISC
ucms_project -- ucms	An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.	2019-03-07	4.3	CVE-2018-16804 MISC
webmin -- webmin	Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI.	2019-03-07	6.8	CVE-2019-9624 MISC EXPLOIT-DB
yaml-cpp_project -- yaml-cpp	The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.	2019-03-07	4.3	CVE-2018-20710 MISC
zrlog -- zrlog	An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter.	2019-03-07	6.5	CVE-2018-17420 MISC
zrlog -- zrlog	An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname.	2019-03-07	4.3	CVE-2018-17421 MISC
zyxel -- nbg-418n_firmware	Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.	2019-03-07	6.8	CVE-2019-6710 MISC MISC EXPLOIT-DB
zzcms -- zzcms	XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.	2019-03-07	4.3	CVE-2018-17413 MISC
zzcms -- zzcms	zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.	2019-03-07	6.5	CVE-2018-17414 MISC
zzcms -- zzcms	zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.	2019-03-07	6.5	CVE-2018-17415 MISC
zzcms -- zzcms	A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.	2019-03-07	6.5	CVE-2018-17416 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
cisco -- nx-os	A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms of user-supplied input sent to an affected device. A successful exploit could allow the attacker unauthorized access to read arbitrary files on an affected device. This vulnerability has been fixed in version 14.0(1h).	2019-03-06	2.1	CVE-2019-1588 BID CISCO
dhcms_project -- dhcms	DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.	2019-03-03	3.5	CVE-2019-9550 MISC
dilicms -- dilicms	An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka site_name.	2019-03-07	3.5	CVE-2019-8438 MISC
dilicms -- dilicms	An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka site_domain.	2019-03-07	3.5	CVE-2019-8439 MISC
dilicms -- dilicms	An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.	2019-03-07	3.5	CVE-2019-8440 MISC
ibm -- cloud_private	IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153317.	2019-03-05	2.1	CVE-2018-1937 BID XF CONFIRM
ibm -- cloud_private	IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318.	2019-03-05	2.1	CVE-2018-1938 BID XF CONFIRM
ibm -- infosphere_information_governance_catalog	IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.	2019-03-05	3.3	CVE-2018-1899 CONFIRM XF
ibm -- rational_doors_next_generation	IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152735.	2019-03-06	3.5	CVE-2018-1911 CONFIRM XF
ibm -- rational_doors_next_generation	IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152736.	2019-03-06	3.5	CVE-2018-1912 CONFIRM XF
ibm -- sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 155905.	2019-03-05	3.5	CVE-2019-4027 BID XF CONFIRM
ibm -- sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155906.	2019-03-05	3.5	CVE-2019-4028 BID XF CONFIRM
ibm -- sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 155907.	2019-03-05	3.5	CVE-2019-4029 BID XF CONFIRM
ibm -- websphere_application_server	IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.	2019-03-06	3.5	CVE-2019-4030 CONFIRM XF
microsoft -- team_foundation_server	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0743.	2019-03-05	3.5	CVE-2019-0742 BID CONFIRM
microsoft -- team_foundation_server	A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0742.	2019-03-05	3.5	CVE-2019-0743 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0601.	2019-03-05	1.9	CVE-2019-0600 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'HID Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0600.	2019-03-05	1.9	CVE-2019-0601 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.	2019-03-05	2.1	CVE-2019-0621 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.	2019-03-05	2.1	CVE-2019-0628 BID CONFIRM
microsoft -- windows_10	An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.	2019-03-05	2.1	CVE-2019-0636 BID CONFIRM
microsoft -- windows_10	An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0621, CVE-2019-0661.	2019-03-05	2.1	CVE-2019-0663 BID CONFIRM
microsoft -- windows_7	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0621, CVE-2019-0663.	2019-03-05	2.1	CVE-2019-0661 BID CONFIRM
personal_video_collection_script_project -- personal_video_collection_script	PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature.	2019-03-06	3.5	CVE-2019-9606 MISC
pivotal_software -- operations_manager	Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.	2019-03-07	3.5	CVE-2019-3776 CONFIRM
vanillaforums -- vanilla_forums	Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.	2019-03-01	3.5	CVE-2019-8279 MISC
wdoyo -- doyocms	An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.	2019-03-03	3.5	CVE-2019-9551 MISC
wuzhicms -- wuzhi_cms	WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI.	2019-03-07	3.5	CVE-2018-17425 MISC
wuzhicms -- wuzhi_cms	WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI.	2019-03-07	3.5	CVE-2018-17426 MISC
yzmcms -- yzmcms	An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter.	2019-03-05	3.5	CVE-2019-9570 MISC

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
apache -- solr	Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.	2019-03-08	not yet calculated	CVE-2017-3164 MLIST BID
apple -- multiple_products	A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.	2019-03-05	not yet calculated	CVE-2019-6205 BID CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- multiple_products	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.	2019-03-05	not yet calculated	CVE-2019-6225 BID CONFIRM CONFIRM CONFIRM EXPLOIT-DB
apple -- multiple_products	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.	2019-03-05	not yet calculated	CVE-2019-6210 BID CONFIRM CONFIRM CONFIRM CONFIRM
atlassian -- sourcetree_for_macos	There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.	2019-03-08	not yet calculated	CVE-2018-20234 CONFIRM
atlassian -- sourcetree_for_windows	There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.	2019-03-08	not yet calculated	CVE-2018-20235 CONFIRM
atlassian -- sourcetree_for_windows	There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.	2019-03-08	not yet calculated	CVE-2018-20236 CONFIRM
botan -- botan	A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement.	2019-03-08	not yet calculated	CVE-2018-20187 MISC MISC MISC
cisco -- multiple_products	Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54 and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). Cisco UCS 6200 and 6300 Fabric Interconnect devices are affected in versions prior to 3.2(2b).	2019-03-07	not yet calculated	CVE-2019-1597 CISCO
cisco -- multiple_products	Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of LDAP packets by an affected device. An attacker could exploit these vulnerabilities by sending an LDAP packet crafted using Basic Encoding Rules (BER) to an affected device. The LDAP packet must have a source IP address of an LDAP server configured on the targeted device. A successful exploit could cause the affected device to reload, resulting in a DoS condition. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. Firepower 9300 Security Appliances are affected in versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.2(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(2). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(20), 7.3(2)D1(1), and 8.2(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(1). UCS 6200 and 6300 Fabric Interconnect are affected in versions prior to 3.2(2b).	2019-03-07	not yet calculated	CVE-2019-1598 CISCO
cisco -- nexus_9000_series_aci_mode_switch_software	A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers files for the bashroot component on an affected device. An attacker could exploit this vulnerability by authenticating to the affected device with a crafted user ID, which may allow temporary administrative access to escalate privileges. A successful exploit could allow the attacker to escalate privileges on an affected device. This Vulnerability has been fixed in version 4.0(1h)	2019-03-06	not yet calculated	CVE-2019-1585 BID CISCO
cisco -- multiple_products	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(2). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(6). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3), and 8.3(2). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(9) and7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1609 CISCO
cisco -- multiple_products	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability. Nexus 3000, 3500, and Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).	2019-03-08	not yet calculated	CVE-2019-1606 CISCO
cisco -- multiple_products	A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to an issue with allocating and freeing memory buffers in the network stack. An attacker could exploit this vulnerability by sending crafted TCP streams to an affected device in a sustained way. A successful exploit could cause the network stack of an affected device to run out of available buffers, impairing operations of control plane and management plane protocols, resulting in a DoS condition. Note: This vulnerability can be triggered only by traffic that is destined to an affected device and cannot be exploited using traffic that transits an affected device. Nexus 1000V Switch for Microsoft Hyper-V is affected in versions prior to 5.2(1)SM3(2.1). Nexus 1000V Switch for VMware vSphere is affected in versions prior to 5.2(1)SV3(4.1a). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(6) and 9.2(2). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(11), 7.0(3)I7(6), and 9.2(2). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5) and 9.2(2). Nexus 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(5)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22. Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5) and 9.2(2). UCS 6200 and 6300 Series Fabric Interconnect are affected in versions prior to 3.2(3j) and 4.0(2a). UCS 6400 Series Fabric Interconnect are affected in versions prior to 4.0(2a).	2019-03-07	not yet calculated	CVE-2019-1599 CISCO
cisco -- multiple_products	A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to improper implementation of file system permissions. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow the attacker to access sensitive and critical files. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. Firepower 9300 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-07	not yet calculated	CVE-2019-1600 CISCO
cisco -- multiple_products	A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow an attacker to use the content of this configuration file to bypass authentication and log in as any user of the device. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1601 CISCO
cisco -- multiple_products	A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1602 BID CISCO
cisco -- multiple_products	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1603 BID CISCO
cisco -- multiple_products	A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID (GID). An attacker could exploit this vulnerability by taking advantage of a logic error that will permit the use of higher privileged commands than what is necessarily assigned. A successful exploit could allow an attacker to execute commands with elevated privileges on the underlying Linux shell of an affected device. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 8.2(3), and 8.3(2). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1604 BID CISCO
cisco -- multiple_products	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1605 BID CISCO
cisco -- multiple_products	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).	2019-03-08	not yet calculated	CVE-2019-1608 CISCO
cisco -- multiple_products	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).	2019-03-08	not yet calculated	CVE-2019-1607 CISCO
cloud_foundry -- cli	Cloud Foundry CLI, versions prior to v6.43.0, improperly exposes passwords when verbose/trace/debugging is turned on. A local unauthenticated or remote authenticated malicious user with access to logs may gain part or all of a users password.	2019-03-07	not yet calculated	CVE-2019-3781 CONFIRM
cloud_foundry -- container_runtime	Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.	2019-03-08	not yet calculated	CVE-2019-3780 CONFIRM
cloud_foundry -- container_runtime	Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.	2019-03-08	not yet calculated	CVE-2019-3779 CONFIRM
cloud_foundry -- stratos	Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id.	2019-03-07	not yet calculated	CVE-2019-3784 CONFIRM
cloud_foundry -- stratos	Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user.	2019-03-07	not yet calculated	CVE-2019-3783 CONFIRM
cloud_foundry -- uaa	Cloud Foundry UAA, versions prior to v70.0, allows a user to update their own email address. A remote authenticated user can impersonate a different user by changing their email address to that of a different user.	2019-03-07	not yet calculated	CVE-2019-3775 CONFIRM
cyberark -- endpoint_privilege_manager	A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administrator privileges) to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path.	2019-03-08	not yet calculated	CVE-2019-9627 MISC
dell -- wes_wyse_device_agent_and_wyse_thinlinux_hagent	Dell WES Wyse Device Agent versions prior to 14.1.2.9 and Dell Wyse ThinLinux HAgent versions prior to 5.4.55 00.10 contain a buffer overflow vulnerability. An unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code on the system with privileges of the FTP client by sending specially crafted input data to the affected system. The FTP code that contained the vulnerability has been removed.	2019-03-07	not yet calculated	CVE-2019-3712 MISC
druide -- antidote_rx_and_hd	Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occurs because the product attempts to access a share with the PLUG-INS subdomain name; an attacker may be able to use Active Directory Domain Services to register that name.	2019-03-04	not yet calculated	CVE-2019-9565 MISC MISC
eloan -- eloan	Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.	2019-03-03	not yet calculated	CVE-2019-9552 MISC
esafenet -- cdg	ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.	2019-03-08	not yet calculated	CVE-2019-9632 MISC
gnome -- glib	gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).	2019-03-08	not yet calculated	CVE-2019-9633 MISC
golang -- go	An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation, leading to denial of service.	2019-03-07	not yet calculated	CVE-2018-17419 MISC
hashicorp -- consul	HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is used in unusual circumstances.	2019-03-05	not yet calculated	CVE-2019-8336 MISC
invision -- power_board	Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.	2019-03-01	not yet calculated	CVE-2019-8278 BID MISC
jenkins -- jenkins	An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in src/main/java/org/jvnet/hudson/plugins/repositoryconnector/ArtifactDeployer.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/Repository.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/UserPwd.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the password stored in the plugin configuration.	2019-03-08	not yet calculated	CVE-2019-1003038 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java, src/main/java/hudson/plugins/emailext/plugins/content/ScriptContent.java, src/main/java/hudson/plugins/emailext/plugins/trigger/AbstractScriptTrigger.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003032 CONFIRM
jenkins -- jenkins	An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/codecentric/jenkins/appd/AppDynamicsResultsPublisher.java that allows attackers without permission to obtain passwords configured in jobs to obtain them.	2019-03-08	not yet calculated	CVE-2019-1003039 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003029 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003030 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScript.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003031 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003033 CONFIRM
jenkins -- jenkins	A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/SandboxDslScriptLoader.groovy that allows attackers with control over Job DSL definitions to execute arbitrary code on the Jenkins master JVM.	2019-03-08	not yet calculated	CVE-2019-1003034 CONFIRM
jenkins -- jenkins	An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.	2019-03-08	not yet calculated	CVE-2019-1003035 CONFIRM
jenkins -- jenkins	A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.	2019-03-08	not yet calculated	CVE-2019-1003036 CONFIRM
jenkins -- jenkins	An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.	2019-03-08	not yet calculated	CVE-2019-1003037 CONFIRM
microsoft -- azure_iot_java_sdk	An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'.	2019-03-05	not yet calculated	CVE-2019-0729 BID CONFIRM
microsoft -- windows_hyber-v	An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.	2019-03-05	not yet calculated	CVE-2019-0635 BID CONFIRM
netapp -- snapcenter	NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.	2019-03-04	not yet calculated	CVE-2018-5482 BID CONFIRM
netapp -- snapcenter_server	NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.	2019-03-04	not yet calculated	CVE-2017-15515 BID CONFIRM
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java.	2019-03-06	not yet calculated	CVE-2019-9615 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadFile URI.	2019-03-06	not yet calculated	CVE-2019-9617 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadScrawl URI.	2019-03-06	not yet calculated	CVE-2019-9616 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.	2019-03-06	not yet calculated	CVE-2019-9611 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. A command execution vulnerability exists via a template file with '<#assign ex="freemarker.template.utility.Execute"?new()> ${ ex("' followed by the command.	2019-03-06	not yet calculated	CVE-2019-9614 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadVideo URI.	2019-03-06	not yet calculated	CVE-2019-9613 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/upload URI.	2019-03-06	not yet calculated	CVE-2019-9612 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/comn/service/editUploadImage URI.	2019-03-06	not yet calculated	CVE-2019-9609 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. It has admin/cms/template/getTemplates.html?res_path=res&up_dir=../ directory traversal, related to the getTemplates function in TemplateController.java.	2019-03-06	not yet calculated	CVE-2019-9610 MISC
ofcms -- ofcms	An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA to the admin/ueditor/uploadImage URI.	2019-03-06	not yet calculated	CVE-2019-9608 MISC
openssl -- openssl	ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c-dev (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k-dev (Affected 1.1.0-1.1.0j).	2019-03-06	not yet calculated	CVE-2019-1543 CONFIRM CONFIRM CONFIRM
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.	2019-03-08	not yet calculated	CVE-2019-9638 MISC
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.	2019-03-08	not yet calculated	CVE-2019-9639 MISC
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.	2019-03-08	not yet calculated	CVE-2019-9640 MISC
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.	2019-03-08	not yet calculated	CVE-2019-9641 MISC
php -- php	An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.	2019-03-08	not yet calculated	CVE-2019-9637 MISC
pivotal -- application_service	Pivotal Application Service (PAS), versions 2.2.x prior to 2.2.12, 2.3.x prior to 2.3.7 and 2.4.x prior to 2.4.3, contain apps manager that uses a cloud controller proxy that fails to verify SSL certs. A remote unauthenticated attacker that could hijack the Cloud Controller's DNS record could intercept access tokens sent to the Cloud Controller, giving the attacker access to the user's resources in the Cloud Controller	2019-03-07	not yet calculated	CVE-2019-3777 BID CONFIRM
pivotal -- spring_security_oauth	Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the "redirect_uri" parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).	2019-03-07	not yet calculated	CVE-2019-3778 BID CONFIRM
pixar -- renderman	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.	2019-03-08	not yet calculated	CVE-2018-4054 MISC
pixar -- renderman	A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit.	2019-03-08	not yet calculated	CVE-2019-5015 MISC
pixar -- renderman	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.	2019-03-08	not yet calculated	CVE-2018-4055 MISC
python -- python	Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly.	2019-03-08	not yet calculated	CVE-2019-9636 MISC MISC MISC
rainbow_pdf -- office_server_document_converter	A heap overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation between size and the number of properties in PropertySet packets, causing an out-of-bounds write that leads to heap corruption and consequent code execution.	2019-03-07	not yet calculated	CVE-2019-5019 MISC
simple_machines -- simple_machines_forum	Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.	2019-03-07	not yet calculated	CVE-2013-7466 MISC
apache -- traffic_server	sslheaders plugin extracts information from the client certificate and sets headers in the request based on the configuration of the plugin. The plugin doesn't strip the headers from the request in some scenarios. This problem was discovered in versions 6.0.0 to 6.0.3, 7.0.0 to 7.1.5, and 8.0.0 to 8.0.1.	2019-03-07	not yet calculated	CVE-2018-11783 BID MLIST
stackstorm -- web_ui	In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.	2019-03-08	not yet calculated	CVE-2019-9580 MISC MISC MISC
suse -- supportutils	Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges	2019-03-05	not yet calculated	CVE-2018-19636 CONFIRM
suse -- supportutils	In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.	2019-03-05	not yet calculated	CVE-2018-19638 CONFIRM
suse -- supportutils	If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.	2019-03-05	not yet calculated	CVE-2018-19639 CONFIRM
suse -- supportutils	If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.	2019-03-05	not yet calculated	CVE-2018-19640 CONFIRM
suse -- supportutils	Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection	2019-03-05	not yet calculated	CVE-2018-19637 CONFIRM
tibco -- jasperreports_server_and_jasperreports_server_for_activematrix_bpm	The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.	2019-03-07	not yet calculated	CVE-2019-8986 MISC CONFIRM
tibco -- multiple_products	The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.	2019-03-07	not yet calculated	CVE-2018-18816 MISC CONFIRM
tibco -- multiple_products	The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability that theoretically allows unauthenticated users to bypass authorization checks for portions of the HTTP interface to the JasperReports Server. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.	2019-03-07	not yet calculated	CVE-2018-18815 MISC CONFIRM CONFIRM
tibco -- multiple_products	The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions up to and including 6.3.4; 6.4.1; 6.4.2; 6.4.21; 7.1.0; 7.2.0, TIBCO JasperReports Library Community Edition: versions up to and including 6.7.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.21, TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.3; 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.	2019-03-07	not yet calculated	CVE-2018-18809 MISC CONFIRM
tibco -- multiple_products	The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a race-condition vulnerability that may allow any users with domain save privileges to gain superuser privileges. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.	2019-03-07	not yet calculated	CVE-2018-18808 MISC CONFIRM
ultravnc -- ultravnc	UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204.	2019-03-05	not yet calculated	CVE-2019-8262 MISC
ultravnc -- ultravnc	UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.	2019-03-05	not yet calculated	CVE-2018-15361 MISC
ultravnc -- ultravnc	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.	2019-03-05	not yet calculated	CVE-2019-8261 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8274 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8276 MISC
ultravnc -- ultravnc	UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.	2019-03-08	not yet calculated	CVE-2019-8269 MISC
ultravnc -- ultravnc	UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211.	2019-03-08	not yet calculated	CVE-2019-8270 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8271 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8272 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8273 MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8266 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8275 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 contains multiple memory leaks (CWE-655) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8277 MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8267 MISC
ultravnc -- ultravnc	UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.	2019-03-05	not yet calculated	CVE-2019-8260 MISC
ultravnc -- ultravnc	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.	2019-03-08	not yet calculated	CVE-2019-8280 MISC
ultravnc -- ultravnc	UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.	2019-03-05	not yet calculated	CVE-2019-8259 MISC
ultravnc -- ultravnc	UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.	2019-03-05	not yet calculated	CVE-2019-8258 MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8265 MISC
ultravnc -- ultravnc	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.	2019-03-08	not yet calculated	CVE-2019-8264 MISC
ultravnc -- ultravnc	UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This vulnerability has been fixed in revision 1206.	2019-03-05	not yet calculated	CVE-2019-8263 MISC MISC
ultravnc -- ultravnc	UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207.	2019-03-08	not yet calculated	CVE-2019-8268 MISC
wordpress -- wordpress	The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.	2019-03-04	not yet calculated	CVE-2019-9568 MISC MISC MISC MISC
wordpress -- wordpress	The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications.	2019-03-05	not yet calculated	CVE-2019-9573 MISC
wordpress -- wordpress	The Blog2Social plugin before 5.0.3 for WordPress allows wp-admin/admin.php?page=blog2social-ship XSS.	2019-03-05	not yet calculated	CVE-2019-9576 MISC MISC MISC
wordpress -- wordpress	The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role.	2019-03-05	not yet calculated	CVE-2019-9574 MISC
wordpress -- wordpress	The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.	2019-03-04	not yet calculated	CVE-2019-9567 MISC MISC MISC MISC
yubico -- libu2f-host	In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device.	2019-03-05	not yet calculated	CVE-2019-9578 MISC MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

Adobe Releases Security Updates

March 12, 2019, 7:00 am

≫ Next: Microsoft Releases March 2019 Security Updates

≪ Previous: SB19-070: Vulnerability Summary for the Week of March 4, 2019

$

0

0

Original release date: March 12, 2019

Adobe has released security updates to address vulnerabilities in Adobe Photoshop CC and Adobe Digital Editions. An attacker could exploit these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Adobe Security Bulletins APSB19-15 and APSB19-16 and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Microsoft Releases March 2019 Security Updates

March 12, 2019, 12:02 pm

≫ Next: Google Releases Security Updates for Chrome

≪ Previous: Adobe Releases Security Updates

$

0

0

Original release date: March 12, 2019

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Microsoft’s March 2019 Security Update Summary and Deployment Information and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

Google Releases Security Updates for Chrome

March 13, 2019, 1:28 pm

≫ Next: Cisco Releases Security Updates

≪ Previous: Microsoft Releases March 2019 Security Updates

$

0

0

Original release date: March 13, 2019

Google has released Chrome version 73.0.3683.75 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system. 

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Chrome Release and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates

March 13, 2019, 1:39 pm

≫ Next: WordPress Releases Security Update

≪ Previous: Google Releases Security Updates for Chrome

$

0

0

Original release date: March 13, 2019

Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit one of these vulnerabilities to cause a denial-of-service condition.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Advisories and apply the necessary updates:

• Common Services Platform Collector Static Credential Vulnerability cisco-sa-20190313-cspcscv
• Small Business SPA514G IP Phones SIP Denial of Service Vulnerability cisco-sa-20190313-sip

---

This product is provided subject to this Notification and this Privacy & Use policy.

WordPress Releases Security Update

March 14, 2019, 7:15 am

≫ Next: MS-ISAC Releases Security Primer on TrickBot Malware

≪ Previous: Cisco Releases Security Updates

$

0

0

Original release date: March 14, 2019

WordPress 5.1 and prior versions are affected by a vulnerability. An attacker could exploit this vulnerability to take control of an affected website.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the WordPress Security and Maintenance Release and upgrade to WordPress 5.1.1.

---

This product is provided subject to this Notification and this Privacy & Use policy.

MS-ISAC Releases Security Primer on TrickBot Malware

March 14, 2019, 1:33 pm

≫ Next: Microsoft Releases Security Update for Azure Linux Guest Agent

≪ Previous: WordPress Releases Security Update

$

0

0

Original release date: March 14, 2019

The Multi-State Information Sharing and Analysis Center (MS-ISAC) has released a security primer on TrickBot malware. TrickBot is a modular banking Trojan that targets users’ financial information and acts as a dropper for other malware. An attacker can leverage TrickBot’s modules to steal banking information, conduct system and network reconnaissance, harvest credentials, and achieve network propagation.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review MS-ISAC’s White Paper: Security Primer – TrickBot for more information and best practice recommendations.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Microsoft Releases Security Update for Azure Linux Guest Agent

March 14, 2019, 6:42 pm

≫ Next: VMware Releases Security Updates for Workstation and Horizon

≪ Previous: MS-ISAC Releases Security Primer on TrickBot Malware

$

0

0

Original release date: March 14, 2019

Microsoft has released an update to address a vulnerability in Azure Linux Guest Agent. An attacker could exploit this vulnerability to obtain access to sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Microsoft Security Advisory and apply the necessary update.

---

This product is provided subject to this Notification and this Privacy & Use policy.