VMware Releases Security Updates for Workstation and Horizon

March 15, 2019, 8:38 am

≫ Next: Intel Releases Security Advisories on Multiple Products

≪ Previous: Microsoft Releases Security Update for Azure Linux Guest Agent

$

0

0

Original release date: March 15, 2019

VMware has released security updates to address vulnerabilities affecting Workstation 14 and 15, and Horizon 6 and 7. An attacker could exploit some of these vulnerabilities to take control of an affected system.  

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review VMware Security Advisories VMSA-2019-0002 and VMSA-2019-0003 and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

Intel Releases Security Advisories on Multiple Products

March 15, 2019, 9:28 am

≫ Next: New Zealand Tragedy-Related Scams and Malware Campaigns

≪ Previous: VMware Releases Security Updates for Workstation and Horizon

$

0

0

Original release date: March 15, 2019

Intel has released security updates and recommendations to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Intel Product Security Center Advisories page, apply the necessary mitigations, and refer to software vendors for appropriate patches, when available.

---

This product is provided subject to this Notification and this Privacy & Use policy.

New Zealand Tragedy-Related Scams and Malware Campaigns

March 15, 2019, 3:18 pm

≫ Next: SB19-077: Vulnerability Summary for the Week of March 11, 2019

≪ Previous: Intel Releases Security Advisories on Multiple Products

$

0

0

Original release date: March 15, 2019

In the wake of the recent New Zealand mosque shooting, the Cybersecurity and Infrastructure Security Agency (CISA) advises users to watch out for possible malicious cyber activity seeking to capitalize on this tragic event. Users should exercise caution in handling emails related to the shooting, even if they appear to originate from trusted sources. Fraudulent emails often contain links or attachments that direct users to phishing or malware-infected websites. Emails requesting donations from duplicitous charitable organizations are also common after tragic events. Be wary of fraudulent social media pleas, calls, texts, donation websites, and door-to-door solicitations relating to the event.

To avoid becoming a victim of malicious activity, users and administrators should consider taking the following preventive measures:

• Use caution when opening email attachments, and do not click on links in unsolicited email messages. Refer to CISA’s Tip on Using Caution with Email Attachments.
• Review CISA’s Tip on Staying Safe on Social Networking Sites.
• Refer to CISA’s Tip on Avoiding Social Engineering and Phishing Attacks.
• Review the information from the Federal Trade Commission on Before Giving to a Charity.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-077: Vulnerability Summary for the Week of March 11, 2019

March 18, 2019, 6:07 am

≫ Next: Now Available: Recording of Chinese Malicious Cyber Activity Briefing

≪ Previous: New Zealand Tragedy-Related Scams and Malware Campaigns

$

0

0

Original release date: March 18, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
atlassian -- sourcetree	There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.	2019-03-08	9.0	CVE-2018-20234 CONFIRM
atlassian -- sourcetree	There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.	2019-03-08	9.0	CVE-2018-20235 BID CONFIRM
atlassian -- sourcetree	There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.	2019-03-08	9.3	CVE-2018-20236 BID CONFIRM
cisco -- nx-os	A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow an attacker to use the content of this configuration file to bypass authentication and log in as any user of the device. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	7.2	CVE-2019-1601 BID CISCO
cisco -- nx-os	A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID (GID). An attacker could exploit this vulnerability by taking advantage of a logic error that will permit the use of higher privileged commands than what is necessarily assigned. A successful exploit could allow an attacker to execute commands with elevated privileges on the underlying Linux shell of an affected device. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 8.2(3), and 8.3(2). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	7.2	CVE-2019-1604 BID CISCO
cisco -- nx-os	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	7.2	CVE-2019-1605 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).	2019-03-08	7.2	CVE-2019-1607 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).	2019-03-08	7.2	CVE-2019-1608 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(2). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(6). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3), and 8.3(2). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(9) and7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	7.2	CVE-2019-1609 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 3500 Platform Switches and Nexus 3000 Series Switches software versions prior to 7.0(3)I7(4) are affected.	2019-03-11	7.2	CVE-2019-1610 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Firepower 4100 Series Next-Generation Firewalls are affected running software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222. Firepower 9300 Security Appliance are affected running software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(25) and 8.3(1). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(5). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(5). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected running software versions prior to 7.1(5)N1(1b) and 7.3(4)N1(1). Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(5). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5).	2019-03-11	7.2	CVE-2019-1611 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Stand are affected running software versions prior to 7.0(3)F3(5).	2019-03-11	7.2	CVE-2019-1612 BID CISCO
cisco -- nx-os	A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this vulnerability by sending malicious HTTP or HTTPS packets to the management interface of an affected system that has the NX-API feature enabled. A successful exploit could allow the attacker to perform a command-injection attack and execute arbitrary commands with root privileges. Note: NX-API is disabled by default. MDS 9000 Series Multilayer Switches are affected running software versions prior to 8.1(1b) and 8.2(3). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(4). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected running software versions prior to 7.3(4)N1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 7000 and 7700 Series Switches are affected running software versions prior to 7.3(3)D1(1) and 8.2(3).	2019-03-11	9.0	CVE-2019-1614 BID CISCO
cisco -- spa514g_firmware	A vulnerability in the implementation of Session Initiation Protocol (SIP) processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SIP request messages by an affected device. An attacker could exploit this vulnerability by sending crafted SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. Cisco has not released software updates that address this vulnerability. This vulnerability affects Cisco Small Business SPA514G IP Phones that are running firmware release 7.6.2SR2 or earlier.	2019-03-13	7.8	CVE-2018-0389 BID CISCO
cobham -- satcom_sailor_800_firmware	Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could be leveraged to achieve a Denial of Service (DoS) condition, where the device would require a factory reset to return to normal operation.	2019-03-15	7.8	CVE-2018-19393 MISC MISC
ftpgetter -- ftpgetter	FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that sends crafted responses. Long responses can also crash the FTP client with memory corruption.	2019-03-13	7.5	CVE-2019-9760 MISC EXPLOIT-DB
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154069.	2019-03-11	7.2	CVE-2018-1978 BID XF CONFIRM
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078.	2019-03-11	7.2	CVE-2018-1980 BID XF CONFIRM
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155893.	2019-03-11	7.2	CVE-2019-4015 BID XF CONFIRM
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 155894.	2019-03-11	7.2	CVE-2019-4016 BID XF CONFIRM
ibm -- websphere_mq	IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887.	2019-03-11	7.2	CVE-2018-1998 XF CONFIRM
intel -- converged_security_management_engine_firmware	Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.	2019-03-14	7.2	CVE-2018-12191 CONFIRM
intel -- converged_security_management_engine_firmware	Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.	2019-03-14	7.2	CVE-2018-12192 CONFIRM
intel -- converged_security_management_engine_firmware	Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.	2019-03-14	7.2	CVE-2018-12199 CONFIRM
intel -- graphics_driver	Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.	2019-03-14	7.2	CVE-2018-12214 CONFIRM
intel -- graphics_driver	Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.	2019-03-14	7.2	CVE-2018-12216 CONFIRM
intel -- graphics_driver	Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access.	2019-03-14	7.2	CVE-2018-12220 CONFIRM
intel -- platform_sample_firmware	Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.	2019-03-14	7.2	CVE-2018-12203 CONFIRM
intel -- platform_sample_firmware	Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow privileged user to potentially execute arbitrary code via local access.	2019-03-14	7.2	CVE-2018-12204 CONFIRM
intel -- platform_sample_firmware	Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow unauthenticated user to potentially execute arbitrary code via physical access.	2019-03-14	7.2	CVE-2018-12205 CONFIRM
microvirt -- memu	An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.	2019-03-13	7.2	CVE-2018-20621 MISC
nablarch_project -- nablarch	Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.	2019-03-12	8.5	CVE-2019-5918 JVN MISC
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.	2019-03-08	7.5	CVE-2019-9638 MISC DEBIAN
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.	2019-03-08	7.5	CVE-2019-9639 MISC DEBIAN
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.	2019-03-08	7.5	CVE-2019-9640 MISC DEBIAN
php -- php	An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.	2019-03-08	7.5	CVE-2019-9641 MISC DEBIAN
phpshe -- phpshe	A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.	2019-03-13	7.5	CVE-2019-9762 MISC
pixar -- renderman	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.	2019-03-08	7.2	CVE-2018-4054 MISC
pixar -- renderman	A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit.	2019-03-08	7.2	CVE-2019-5015 MISC
podofo_project -- podofo	PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.	2019-03-11	7.5	CVE-2019-9687 MISC
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.	2019-03-15	7.5	CVE-2018-20177 MISC CONFIRM
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20179 MISC CONFIRM
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20180 MISC CONFIRM
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20181 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20182 BID MISC MLIST CONFIRM GENTOO DEBIAN
sdcms -- sdcms	An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions (such as "eval") are blocked but others (such as "system") are not, and because ".php" is blocked but ".PHP" is not blocked.	2019-03-10	7.5	CVE-2019-9651 MISC
shanda -- maplestory_online	In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.	2019-03-12	7.2	CVE-2019-9729 MISC
tinysvcmdns_project -- tinysvcmdns	In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection of the CPU and the operating system), or disclosure of memory content via error messages or a server response. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."	2019-03-13	9.4	CVE-2019-9748 MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
1024tools -- 1024tools	DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.	2019-03-12	4.3	CVE-2019-9736 MISC
apache -- solr	Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.	2019-03-08	5.0	CVE-2017-3164 MLIST BID
blog_mini_project -- blog_mini	In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.	2019-03-14	4.3	CVE-2019-9765 MISC
botan_project -- botan	A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement.	2019-03-08	4.3	CVE-2018-20187 MISC MISC MISC
checkstyle -- checkstyle	Checkstyle before 8.18 loads external DTDs by default.	2019-03-11	5.0	CVE-2019-9658 MISC MISC MISC MISC
chuango -- a11_pstn/lcd/rfid_touch_alarm_system_firmware	The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.	2019-03-11	6.4	CVE-2019-9659 MISC
cisco -- enterprise_chat_and_email	Multiple vulnerabilities in the web-based management interface of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit these vulnerabilities either by injecting malicious code in a chat window or by sending a crafted link to a user of the interface. In both cases, the attacker must persuade the user to click the crafted link or open the chat window that contains the attacker's code. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Version 11.6(1) is affected.	2019-03-11	4.3	CVE-2019-1702 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	4.6	CVE-2019-1603 BID CISCO
cisco -- nx-os	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(27) and 8.2(3). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3500 Platform Switches are affected running software versions prior to 6.0(2)A8(11) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9), 7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22) and 8.2(3).	2019-03-11	4.6	CVE-2019-1613 BID CISCO
cisco -- nx-os	A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signatures for software images. An attacker could exploit this vulnerability by loading an unsigned software image on an affected device. A successful exploit could allow the attacker to boot a malicious software image. Note: The fix for this vulnerability requires a BIOS upgrade as part of the software upgrade. For additional information, see the Details section of this advisory. Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I7(5). Nexus 9000 Series Fabric Switches in ACI Mode are affected running software versions prior to 13.2(1l). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5).	2019-03-11	4.6	CVE-2019-1615 BID CISCO
cisco -- nx-os	A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Cisco Fabric Services packets. An attacker could exploit this vulnerability by sending a crafted Cisco Fabric Services packet to an affected device. A successful exploit could allow the attacker to cause a buffer overflow, resulting in process crashes and a DoS condition on the device. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(25), 8.1(1b), 8.3(1). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5) Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22) and 8.2(3). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5). UCS 6200, 6300, and 6400 Fabric Interconnects are affected running software versions prior to 3.2(3j) and 4.0(2a).	2019-03-11	5.0	CVE-2019-1616 BID CISCO
cleanersoft -- free_mp3_cd_ripper	Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .mp3 file.	2019-03-14	6.8	CVE-2019-9766 EXPLOIT-DB
cleanersoft -- free_mp3_cd_ripper	Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted .wma file.	2019-03-14	6.8	CVE-2019-9767 MISC EXPLOIT-DB
cmsmadesimple -- cms_made_simple	class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).	2019-03-11	5.0	CVE-2019-9692 MISC MISC
cmsmadesimple -- cms_made_simple	In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow (parameter show_id), _Getshowinfo (parameter show_id), _Getpictureinfo (parameter picture_id), _AdjustNameSeq (parameter shownumber), _Updatepicture (parameter picture_id), and _Deletepicture (parameter picture_id).	2019-03-11	6.5	CVE-2019-9693 MISC MISC
codecrafters -- ability_mail_server	Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.	2019-03-12	4.3	CVE-2019-9557 MISC
cyberark -- endpoint_privilege_manager	A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administrator privileges) to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path.	2019-03-08	6.9	CVE-2019-9627 BID MISC
editor.md_project -- editor.md	Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.	2019-03-12	4.3	CVE-2019-9737 MISC
esafenet -- electronic_document_security_management_system	ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.	2019-03-08	5.0	CVE-2019-9632 MISC
ffmpeg -- ffmpeg	In FFmpeg 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.	2019-03-12	4.3	CVE-2019-9718 BID MISC
ffmpeg -- ffmpeg	A denial of service in the subtitle decoder in FFmpeg 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.	2019-03-12	4.3	CVE-2019-9721 BID MISC
gitnoteapp -- gitnote	gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.top.require('child_process').execFile substring in the onerror attribute of an IMG element.	2019-03-14	6.8	CVE-2019-9785 MISC MISC
gnome -- glib	gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).	2019-03-08	4.3	CVE-2019-9633 BID MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y dimension.	2019-03-14	5.0	CVE-2019-9770 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c.	2019-03-14	5.0	CVE-2019-9771 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.	2019-03-14	5.0	CVE-2019-9772 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z dimension.	2019-03-14	5.0	CVE-2019-9773 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c.	2019-03-14	6.4	CVE-2019-9774 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.	2019-03-14	6.4	CVE-2019-9775 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than CVE-2019-9779).	2019-03-14	5.0	CVE-2019-9776 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec.	2019-03-14	5.0	CVE-2019-9777 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec.	2019-03-14	5.0	CVE-2019-9778 MISC MISC
gnu -- libredwg	An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than CVE-2019-9776).	2019-03-14	5.0	CVE-2019-9779 MISC MISC
golang -- go	An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.	2019-03-13	4.3	CVE-2019-9741 MISC
golangtc -- gopher	jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.	2019-03-12	4.3	CVE-2019-9738 MISC
gpsd_project -- gpsd	gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.	2019-03-13	5.8	CVE-2018-17937 BID MISC
ibm -- api_connect	IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.	2019-03-11	4.0	CVE-2018-2009 BID XF CONFIRM
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152858.	2019-03-11	4.6	CVE-2018-1922 BID XF CONFIRM
ibm -- db2	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability that can potentially result in arbitrary code execution. IBM X-Force ID: 152859.	2019-03-11	4.6	CVE-2018-1923 BID XF CONFIRM
ibm -- rational_engineering_lifecycle_manager	IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URL link of a the view, and access information that should not be able to see. IBM X-Force ID: 153120.	2019-03-14	4.0	CVE-2018-1929 CONFIRM XF
ibm -- sdk	IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081.	2019-03-11	4.6	CVE-2018-1890 XF CONFIRM CONFIRM CONFIRM
ibm -- websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM X-Force ID: 152531.	2019-03-11	4.0	CVE-2018-1902 BID XF CONFIRM
ibm -- websphere_mq	IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915.	2019-03-11	6.0	CVE-2018-1974 XF CONFIRM
ichain -- insurance_wallet	Directory traversal vulnerability in iChain Insurance Wallet App for iOS Version 1.3.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.	2019-03-12	5.0	CVE-2019-5923 JVN MISC
intel -- converged_security_management_engine_firmware	Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.	2019-03-14	4.6	CVE-2018-12185 CONFIRM
intel -- converged_security_management_engine_firmware	Insufficient input validation in Intel CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially execute arbitrary code via local access.	2019-03-14	4.6	CVE-2018-12190 CONFIRM
intel -- converged_security_management_engine_firmware	Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.	2019-03-14	4.6	CVE-2018-12196 CONFIRM
intel -- converged_security_management_engine_firmware	Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before version 5.00.04.012 may allow an unauthenticated user to potentially execute arbitrary code via physical access.	2019-03-14	4.6	CVE-2018-12208 CONFIRM
intel -- graphics_driver	Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.	2019-03-14	4.6	CVE-2018-12221 CONFIRM
intel -- graphics_driver	Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.	2019-03-14	4.6	CVE-2018-12223 CONFIRM
intel -- rapid_storage_technology_enterprise	Improper permissions in the installer for Intel(R) Accelerated Storage Manager in RSTe v5.5 and before may allow an authenticated user to potentially enable escalation of privilege via local access.	2019-03-14	4.6	CVE-2019-0135 CONFIRM
intel -- usb_3.0_creator_utility	Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.	2019-03-14	4.6	CVE-2019-0129 CONFIRM
iotivity -- iotivity	In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01 Unauthorized" response is mishandled. NOTE: the vendor states "While this is an interesting attack, there is no plan for maintainer to fix, as we are migrating to IoTivity Lite."	2019-03-13	6.4	CVE-2019-9750 MISC
jenkins -- appdynamics	An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/codecentric/jenkins/appd/AppDynamicsResultsPublisher.java that allows attackers without permission to obtain passwords configured in jobs to obtain them.	2019-03-08	4.0	CVE-2019-1003039 CONFIRM
jenkins -- azure_vm_agents	An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.	2019-03-08	4.0	CVE-2019-1003035 CONFIRM
jenkins -- azure_vm_agents	A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.	2019-03-08	4.0	CVE-2019-1003036 CONFIRM
jenkins -- azure_vm_agents	An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.	2019-03-08	4.0	CVE-2019-1003037 CONFIRM
jenkins -- email_extension	A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java, src/main/java/hudson/plugins/emailext/plugins/content/ScriptContent.java, src/main/java/hudson/plugins/emailext/plugins/trigger/AbstractScriptTrigger.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003032 CONFIRM
jenkins -- groovy	A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003033 CONFIRM
jenkins -- job_dsl	A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/SandboxDslScriptLoader.groovy that allows attackers with control over Job DSL definitions to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003034 CONFIRM
jenkins -- matrix_project	A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScript.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003031 CONFIRM
jenkins -- pipeline:_groovy	A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003030 CONFIRM
jenkins -- script_security	A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.	2019-03-08	6.5	CVE-2019-1003029 CONFIRM
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS.	2019-03-12	4.3	CVE-2019-9711 BID MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.	2019-03-12	4.3	CVE-2019-9712 BID MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.	2019-03-12	5.0	CVE-2019-9713 BID MISC
joomla -- joomla!	An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.	2019-03-12	4.3	CVE-2019-9714 BID MISC
jtbc -- jtbc_php	An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring.	2019-03-11	6.4	CVE-2019-9662 MISC
kartatopia -- piluscart	PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.	2019-03-14	6.8	CVE-2019-9769 EXPLOIT-DB
korenix -- jetport_web_manager	The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.	2019-03-12	4.3	CVE-2019-9725 MISC
lexmark -- cx725h_firmware	On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.	2019-03-12	4.0	CVE-2018-17944 CONFIRM
libofx_project -- libofx	An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.	2019-03-11	6.8	CVE-2019-9656 MISC MISC
maccms -- maccms	Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates.	2019-03-14	6.5	CVE-2019-9829 MISC
mailtraq -- webmail	Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.	2019-03-12	4.3	CVE-2019-9558 MISC
microsoft -- teams	Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-03-12	6.8	CVE-2019-5922 JVN BID
microsoft -- windows_7	Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.	2019-03-12	6.8	CVE-2019-5921 JVN BID
nablarch_project -- nablarch	An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.	2019-03-12	6.4	CVE-2019-5919 JVN MISC
ncrafts -- formcraft	Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.	2019-03-12	6.8	CVE-2019-5920 JVN MISC MISC
openstack -- neutron	An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)	2019-03-12	4.0	CVE-2019-9735 BID MISC
openwsman_project -- openwsman	Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server.	2019-03-14	5.0	CVE-2019-3816 CONFIRM BID CONFIRM
openwsman_project -- openwsman	Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.	2019-03-14	5.0	CVE-2019-3833 CONFIRM BID CONFIRM
php -- php	An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.	2019-03-08	5.0	CVE-2019-9637 MISC DEBIAN
php -- php	** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible."	2019-03-11	6.8	CVE-2019-9675 MISC MISC
phpshe -- phpshe	An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authentication. This occurs because of the call to wechat_getxml in include/plugin/payment/wechat/notify_url.php.	2019-03-13	5.0	CVE-2019-9761 MISC
pixar -- renderman	A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.	2019-03-08	4.9	CVE-2018-4055 MISC
python -- python	Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly.	2019-03-08	5.0	CVE-2019-9636 BID MISC MISC MISC
python -- python	An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n followed by an HTTP header or a Redis command.	2019-03-12	4.3	CVE-2019-9740 MISC
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak.	2019-03-15	5.0	CVE-2018-20174 MISC CONFIRM
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20175 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20176 MISC CONFIRM
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20178 BID MISC MLIST CONFIRM GENTOO DEBIAN
rednao -- smart_forms	Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.	2019-03-12	6.8	CVE-2019-5924 JVN MISC
sap -- advanced_business_application_programming_platform_kernel	ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.	2019-03-12	6.5	CVE-2019-0270 BID MISC MISC
sap -- banking_services_from_sap	Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges.	2019-03-12	6.5	CVE-2019-0276 BID MISC MISC
sap -- businessobjects_business_intelligence	SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.	2019-03-12	5.5	CVE-2019-0268 BID MISC MISC
sap -- hana_extended_application_services	SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer with privileges to the SAP space (XML External Entity vulnerability).	2019-03-12	5.5	CVE-2019-0277 BID MISC MISC
sap -- mobile_platform_sdk	SAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service (i.e. denial of service). Fixed in versions 3.1 SP03 PL02, SDK 3.1 SP04, or later.	2019-03-12	5.0	CVE-2019-0274 BID MISC MISC
sdcms -- sdcms	There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the t2 parameter.	2019-03-10	6.8	CVE-2019-9652 MISC
sftnow -- sftnow	sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.	2019-03-11	6.8	CVE-2019-9688 MISC
stackstorm -- stackstorm	In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.	2019-03-08	4.3	CVE-2019-9580 MISC MISC MISC
thinkst -- canarytokens	Thinkst Canarytokens through 2019-03-01 relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token.	2019-03-14	5.0	CVE-2019-9768 MISC
tinycc -- tinycc	An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to an 1 byte out of bounds write in the end_macro function in tccpp.c.	2019-03-13	4.3	CVE-2019-9754 MISC
tinysvcmdns_project -- tinysvcmdns	In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompress_nlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a result, the mDNS server hangs after receiving the malicious mDNS packet. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."	2019-03-13	5.0	CVE-2019-9747 MISC
treasuredata -- fluent_bit	An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After processing a crafted packet, the plugin's mqtt_packet_drop function (in /plugins/in_mqtt/mqtt_prot.c) executes the memmove() function with a negative size parameter. That leads to a crash of the whole Fluent Bit server via a SIGSEGV signal.	2019-03-13	5.0	CVE-2019-9749 MISC
webmproject -- libwebm	In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.	2019-03-13	5.0	CVE-2019-9746 MISC MISC
wordpress -- wordpress	WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php.	2019-03-14	6.8	CVE-2019-9787 BID MISC MISC MISC MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
cisco -- application_policy_infrastructure_controller	A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.	2019-03-11	3.3	CVE-2019-1690 BID CISCO
cobham -- satcom_sailor_800_firmware	Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a relevant field (e.g., Satellite name), and then restoring the malicious configuration file.	2019-03-15	3.5	CVE-2018-19394 MISC MISC
dradisframework -- dradis	Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	2019-03-12	3.5	CVE-2019-5925 JVN MISC
ibm -- rational_collaborative_lifecycle_management	IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 144884.	2019-03-14	3.5	CVE-2018-1658 CONFIRM XF
ibm -- rational_collaborative_lifecycle_management	IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145509.	2019-03-14	3.5	CVE-2018-1688 CONFIRM XF
ibm -- rational_engineering_lifecycle_manager	IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152734.	2019-03-14	3.5	CVE-2018-1910 CONFIRM XF
ibm -- rational_engineering_lifecycle_manager	IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152738.	2019-03-14	3.5	CVE-2018-1914 CONFIRM XF
ibm -- rational_engineering_lifecycle_manager	IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152740.	2019-03-14	3.5	CVE-2018-1916 CONFIRM XF
ibm -- rational_engineering_lifecycle_manager	IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153495.	2019-03-14	3.5	CVE-2018-1952 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148613.	2019-03-14	3.5	CVE-2018-1759 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148617.	2019-03-14	3.5	CVE-2018-1763 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148618.	2019-03-14	3.5	CVE-2018-1764 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150426.	2019-03-14	3.5	CVE-2018-1823 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150427.	2019-03-14	3.5	CVE-2018-1824 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150428.	2019-03-14	3.5	CVE-2018-1825 CONFIRM XF
ibm -- rational_quality_manager	IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150432.	2019-03-14	3.5	CVE-2018-1829 CONFIRM XF
ibm -- rational_team_concert	IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615.	2019-03-14	3.5	CVE-2018-1761 CONFIRM BID XF
ibm -- rational_team_concert	IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154135.	2019-03-14	3.5	CVE-2018-1982 CONFIRM BID XF
ibm -- rational_team_concert	IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154136.	2019-03-14	3.5	CVE-2018-1983 CONFIRM XF
ibm -- rational_team_concert	IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154137.	2019-03-14	3.5	CVE-2018-1984 CONFIRM BID XF
intel -- converged_security_management_engine_firmware	Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.	2019-03-14	2.1	CVE-2018-12188 CONFIRM
intel -- converged_security_management_engine_firmware	Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.	2019-03-14	2.1	CVE-2018-12189 CONFIRM
intel -- graphics_driver	Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read device configuration information via local access.	2019-03-14	2.1	CVE-2018-12209 CONFIRM
intel -- graphics_driver	Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.	2019-03-14	2.1	CVE-2018-12210 CONFIRM
intel -- graphics_driver	Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.	2019-03-14	2.1	CVE-2018-12211 CONFIRM
intel -- graphics_driver	Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.	2019-03-14	2.1	CVE-2018-12212 CONFIRM
intel -- graphics_driver	Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.	2019-03-14	2.1	CVE-2018-12213 CONFIRM
intel -- graphics_driver	Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to cause a denial of service via local access.	2019-03-14	2.1	CVE-2018-12215 CONFIRM
intel -- graphics_driver	Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to read device configuration information via local access.	2019-03-14	2.1	CVE-2018-12217 CONFIRM
intel -- graphics_driver	Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a memory leak via local access.	2019-03-14	2.1	CVE-2018-12218 CONFIRM
intel -- graphics_driver	Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.	2019-03-14	2.1	CVE-2018-12219 CONFIRM
intel -- graphics_driver	Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.	2019-03-14	2.1	CVE-2018-12222 CONFIRM
intel -- graphics_driver	Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.	2019-03-14	2.1	CVE-2018-12224 CONFIRM
intel -- graphics_driver	Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.	2019-03-14	2.1	CVE-2018-18089 CONFIRM
intel -- graphics_driver	Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable denial of service via local access.	2019-03-14	2.1	CVE-2018-18090 CONFIRM
intel -- graphics_driver	Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an unprivileged user to potentially enable a denial of service via local access.	2019-03-14	2.1	CVE-2018-18091 CONFIRM
jenkins -- repository_connector	An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in src/main/java/org/jvnet/hudson/plugins/repositoryconnector/ArtifactDeployer.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/Repository.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/UserPwd.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the password stored in the plugin configuration.	2019-03-08	2.1	CVE-2019-1003038 CONFIRM
mcafee -- database_security	Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.	2019-03-12	2.1	CVE-2019-3615 BID CONFIRM
rsa -- archer_grc_platform	RSA Archer versions, prior to 6.5 SP1, contain an information exposure vulnerability. Users' session information is logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further attacks.	2019-03-13	2.1	CVE-2019-3715 FULLDISC
rsa -- archer_grc_platform	RSA Archer versions, prior to 6.5 SP2, contain an information exposure vulnerability. The database connection password may get logged in plain text in the RSA Archer log files. An authenticated malicious local user with access to the log files may obtain the exposed password to use it in further attacks.	2019-03-13	2.1	CVE-2019-3716 BID FULLDISC
sap -- businessobjects_business_intelligence	SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.	2019-03-12	3.5	CVE-2019-0269 BID MISC MISC
sap -- netweaver_java_application_server	SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting (XSS) vulnerability.	2019-03-12	3.5	CVE-2019-0275 BID MISC MISC
yzmcms -- yzmcms	Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.	2019-03-11	3.5	CVE-2019-9660 MISC
yzmcms -- yzmcms	Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,	2019-03-11	3.5	CVE-2019-9661 MISC

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abap -- server_and_platform	ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, leading to an XML External Entity (XEE) vulnerability. Fixed in Kernel 7.21 or 7.22, that is ABAP Server 7.00 to 7.31 and Kernel 7.45, 7.49 or 7.53, that is ABAP Server 7.40 to 7.52 or ABAP Platform.	2019-03-12	not yet calculated	CVE-2019-0271 BID MISC MISC
airmore -- airmore	The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /?Key=PhoneRequestAuthorization requests.	2019-03-15	not yet calculated	CVE-2019-9831 EXPLOIT-DB MISC
azure-umqtt-c -- azure-umqtt-c	azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectors.	2019-03-12	not yet calculated	CVE-2019-5917 JVN BID MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges.	2019-03-15	not yet calculated	CVE-2018-18255 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher.	2019-03-15	not yet calculated	CVE-2018-18256 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option.	2019-03-15	not yet calculated	CVE-2018-18252 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.	2019-03-15	not yet calculated	CVE-2018-18253 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing a Trojan horse program at an app pathname.	2019-03-15	not yet calculated	CVE-2018-18254 MISC
circuitwerkes -- sicon-8	CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.	2019-03-15	not yet calculated	CVE-2019-5616 MISC
cisco -- common_services_platform_collector	A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.	2019-03-13	not yet calculated	CVE-2019-1723 BID CISCO
cisco -- dna_center	A vulnerability in the web-based management interface of Cisco DNA Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco DNA Center versions prior to 1.2.5 are affected.	2019-03-11	not yet calculated	CVE-2019-1707 BID CISCO
cisco -- nx-os_software	A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability. Nexus 3000, 3500, and Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).	2019-03-08	not yet calculated	CVE-2019-1606 BID CISCO
cisco -- nx-os_software	A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).	2019-03-08	not yet calculated	CVE-2019-1602 BID CISCO
cisco -- nx-os_software	A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2).	2019-03-11	not yet calculated	CVE-2019-1617 BID CISCO
cloud_foundry_foundation -- cloud_controller	Cloud Foundry Cloud Controller, versions prior to 1.78.0, contain an endpoint with improper authorization. A remote authenticated malicious user with read permissions can request package information and receive a signed bit-service url that grants the user write permissions to the bit-service.	2019-03-13	not yet calculated	CVE-2019-3785 CONFIRM
cloud_foundry_foundation -- container_runtime	Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.	2019-03-08	not yet calculated	CVE-2019-3780 CONFIRM
cloud_foundry_foundation -- container_runtime	Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.	2019-03-08	not yet calculated	CVE-2019-3779 CONFIRM
cobham -- satcom_sailor_250_and_500_devices	Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.	2019-03-15	not yet calculated	CVE-2018-19391 MISC MISC
cobham -- satcom_sailor_250_and_500_devices	Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password (including the default "admin" account), without prior knowledge of their password. All that is required is knowledge of the username and attack vector (/index.lua?pageID=Administration usernameAdmChange, passwordAdmChange1, and passwordAdmChange2 fields).	2019-03-15	not yet calculated	CVE-2018-19392 MISC MISC
ethereum -- cryptobotsbattle_token	An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.	2019-03-15	not yet calculated	CVE-2018-17882 MISC MISC
f5 -- big-ip	In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.	2019-03-13	not yet calculated	CVE-2019-6597 CONFIRM
f5 -- big-ip	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, may lead to disruption of TMUI services. This attack requires an authenticated user with any role (other than the No Access role). The No Access user role cannot login and does not have the access level to perform the attack.	2019-03-13	not yet calculated	CVE-2019-6598 CONFIRM
f5 -- big-ip	In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may result with an improper handling on the JSON response when it is injected by a malicious script via a remote cross-site scripting (XSS) attack.	2019-03-13	not yet calculated	CVE-2019-6599 BID CONFIRM
f5 -- big-ip	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the "guest" role, unsanitized values can be reflected to the client via the login page. This can lead to a cross-site scripting attack against unauthenticated clients.	2019-03-13	not yet calculated	CVE-2019-6600 CONFIRM
f5 -- big-ip	In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.	2019-03-13	not yet calculated	CVE-2019-6601 CONFIRM
f5 -- big-ip_apm	In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually leading to a crash. Only systems offering DTLS connections via APM are impacted.	2019-03-13	not yet calculated	CVE-2019-6596 BID CONFIRM
feifeicms -- feifeicms	FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature.	2019-03-14	not yet calculated	CVE-2019-9825 MISC MISC
fujitsu -- wireless_keyboard_set	The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.	2019-03-15	not yet calculated	CVE-2019-9835 MISC
g_data_software -- total_security	gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation.	2019-03-13	not yet calculated	CVE-2019-9742 MISC MISC
google -- android	The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests.	2019-03-15	not yet calculated	CVE-2019-9833 EXPLOIT-DB
google -- android	The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a configured port.	2019-03-15	not yet calculated	CVE-2019-9832 EXPLOIT-DB MISC
highcharts_js -- highcharts_js	In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.	2019-03-14	not yet calculated	CVE-2018-20801 MISC MISC
huawei -- oceanstor_uds_devices	Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.	2019-03-13	not yet calculated	CVE-2015-2254 CONFIRM
ibm -- content_navigator	IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. When editing an executable file in ICN with Edit service, it will be executed on the user's workstation. IBM X-Force ID: 156000.	2019-03-14	not yet calculated	CVE-2019-4034 BID XF CONFIRM
ibm -- robotic_process_automation_with_automation_anywhere	IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152671.	2019-03-14	not yet calculated	CVE-2018-1908 CONFIRM XF
intel -- active_management_technology	Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.	2019-03-14	not yet calculated	CVE-2018-12187 CONFIRM
intel -- capability_licensing_service	Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.	2019-03-14	not yet calculated	CVE-2018-12200 CONFIRM
intel -- matrix_storage_manager	Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalation of privilege via local access.	2019-03-14	not yet calculated	CVE-2019-0121 CONFIRM
intel -- multiple_products	Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor may allow privileged user to potentially leverage existing features via local access.	2019-03-14	not yet calculated	CVE-2018-12202 CONFIRM
intel -- multiple_products	Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.	2019-03-14	not yet calculated	CVE-2018-12201 CONFIRM
intel -- server_platform_services_heci_subsystem	Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.	2019-03-14	not yet calculated	CVE-2018-12198 CONFIRM
intel -- sgx_sdk_for_linux_and_sgx_sdk_for_windows	Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.	2019-03-14	not yet calculated	CVE-2019-0122 CONFIRM
jupyter -- notebook	An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of error messages, though not reproduced with other browsers. This occurs because Internet Explorer's error messages can include the content of any invalid JavaScript that was encountered.	2019-03-12	not yet calculated	CVE-2019-9644 MISC
mybb -- mybb	An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event.	2019-03-10	not yet calculated	CVE-2019-9650 MISC MISC
netdata -- netdata	The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to steal authentication credentials or to control how the site is rendered to the user.	2019-03-15	not yet calculated	CVE-2019-9834 EXPLOIT-DB MISC
nexus -- 9000_series_switches_in_standalone_nx-os_mode	A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to an incorrect permissions setting. An attacker could exploit this vulnerability by replacing valid agent files with malicious code. A successful exploit could result in the execution of code supplied by the attacker. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running versions prior to 7.0(3)I7(5).	2019-03-11	not yet calculated	CVE-2019-1618 BID CISCO
open_ticket_request_system -- open_ticket_request_system	An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm.	2019-03-13	not yet calculated	CVE-2019-9751 MISC
open_ticket_request_system -- open_ticket_request_system	An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. An attacker who is logged into OTRS as an agent or a customer user may upload a carefully crafted resource in order to cause execution of JavaScript in the context of OTRS. This is related to Content-type mishandling in Kernel/Modules/PictureUpload.pm.	2019-03-13	not yet calculated	CVE-2019-9752 MISC
open_ticket_request_system -- open_ticket_request_system	An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.	2019-03-13	not yet calculated	CVE-2018-20800 MISC
opensuse -- yast2-multipath	In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection	2019-03-15	not yet calculated	CVE-2018-17955 CONFIRM
opensuse -- yast2-printer	In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.	2019-03-15	not yet calculated	CVE-2018-20106 CONFIRM
opensuse -- yast2-samba-provision	In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list	2019-03-15	not yet calculated	CVE-2018-17956 CONFIRM
pacman -- pacman	pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacman renames the downloaded package file to match the name given in this header. However, pacman did not sanitize this name, which may contain slashes, before calling rename(). A malicious server (or a network MitM if downloading over HTTP) can send a Content-Disposition header to make pacman place the file anywhere in the filesystem, potentially leading to arbitrary root code execution. Notably, this bypasses pacman's package signature checking. This occurs in curl_download_internal in lib/libalpm/dload.c.	2019-03-11	not yet calculated	CVE-2019-9686 MISC MISC MISC
paul_vixie -- vixie_cron	Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.	2019-03-11	not yet calculated	CVE-2019-9706 MISC MISC MISC
paul_vixie -- vixie_cron	Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.	2019-03-11	not yet calculated	CVE-2019-9705 BID MISC
paul_vixie -- vixie_cron	Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.	2019-03-11	not yet calculated	CVE-2019-9704 BID MISC
rsa -- authentication_manager	RSA Authentication Manager versions prior to 8.4 P1 contain an Insecure Credential Management Vulnerability. A malicious Operations Console administrator may be able to obtain the value of a domain password that another Operations Console administrator had set previously and use it for attacks.	2019-03-13	not yet calculated	CVE-2019-3711 BID FULLDISC
topvision -- cc8800_cmts_c-e_devices	Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz with userName=admin in a cookie.	2019-03-15	not yet calculated	CVE-2018-18205 MISC MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8267 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8272 MISC
ultravnc -- ultravnc	UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207.	2019-03-08	not yet calculated	CVE-2019-8268 MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8265 MISC
ultravnc -- ultravnc	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.	2019-03-08	not yet calculated	CVE-2019-8280 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 contains multiple memory leaks (CWE-655) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8277 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8276 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8275 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8274 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8273 MISC
ultravnc -- ultravnc	UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.	2019-03-08	not yet calculated	CVE-2019-8266 MISC
ultravnc -- ultravnc	UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.	2019-03-08	not yet calculated	CVE-2019-8271 MISC
ultravnc -- ultravnc	UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211.	2019-03-08	not yet calculated	CVE-2019-8270 MISC
ultravnc -- ultravnc	UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.	2019-03-08	not yet calculated	CVE-2019-8269 MISC
ultravnc -- ultravnc	UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.	2019-03-08	not yet calculated	CVE-2019-8264 MISC
webargs -- webargs	An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meaning that incorrect JSON payloads could have been parsed for concurrent requests.	2019-03-11	not yet calculated	CVE-2019-9710 MISC MISC
wordpress -- wordpress	The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area."	2019-03-10	not yet calculated	CVE-2019-9646 MISC MISC MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

Now Available: Recording of Chinese Malicious Cyber Activity Briefing

March 19, 2019, 10:03 am

≫ Next: Microsoft Ending Support for Windows 7

≪ Previous: SB19-077: Vulnerability Summary for the Week of March 11, 2019

$

0

0

Original release date: March 19, 2019

The Cybersecurity and Infrastructure Security Agency (CISA) has posted the February 14, 2019, Awareness Briefing on Chinese Malicious Cyber Activity. This webinar provides background and mitigation techniques on Chinese malicious cyber activity targeting managed service providers (MSPs).   

CISA encourages MSPs and their customers to view the February 14, 2019, Awareness Briefing on Chinese Malicious Cyber Activity and to review the page on Chinese Malicious Cyber Activity for more information.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Microsoft Ending Support for Windows 7

March 19, 2019, 11:14 am

≫ Next: Mozilla Releases Security Updates for Firefox

≪ Previous: Now Available: Recording of Chinese Malicious Cyber Activity Briefing

$

0

0

Original release date: March 19, 2019

All software products have a life-cycle. After January 14, 2020, Microsoft will no longer provide security updates or support for PCs running the Windows 7 operating system. After this date, this product will no longer receive free:

• Technical support for any issues
• Software updates
• Security updates or fixes

Computers running the Windows 7 operating system will continue to work even after support ends. However, using unsupported software may increase the risks from viruses and other security threats.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to upgrade to a currently supported operating system. For more information, see the Microsoft End of Support FAQ.

 

---

This product is provided subject to this Notification and this Privacy & Use policy.

Mozilla Releases Security Updates for Firefox

March 19, 2019, 11:32 am

≫ Next: Cisco Releases Security Advisories for Multiple Products

≪ Previous: Microsoft Ending Support for Windows 7

$

0

0

Original release date: March 19, 2019

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for Firefox ESR 60.6 and Firefox 66 and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Advisories for Multiple Products

March 20, 2019, 1:50 pm

≫ Next: Drupal Releases Security Updates

≪ Previous: Mozilla Releases Security Updates for Firefox

$

0

0

Original release date: March 20, 2019

Cisco has released several security advisories to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates.

• Cisco IP Phone 8800 Series Path Traversal Vulnerability cisco-sa-20190320-ipptv
• Cisco IP Phone 8800 Series File Upload Denial of Service Vulnerability cisco-sa-20190320-ipfudos
• Cisco IP Phone 8800 Series Authorization Bypass Vulnerability cisco-sa-20190320-ipab
• Cisco IP Phone 7800 Series and 8800 Series Remote Code Execution Vulnerability cisco-sa-20190320-ip-phone-rce
• Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability cisco-sa-20190320-ip-phone-csrf
   

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

Drupal Releases Security Updates

March 20, 2019, 2:51 pm

≫ Next: Mozilla Releases Security Updates for Firefox

≪ Previous: Cisco Releases Security Advisories for Multiple Products

$

0

0

Original release date: March 20, 2019

Drupal has released security updates to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Drupal Security Advisory and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Mozilla Releases Security Updates for Firefox

March 22, 2019, 2:35 pm

≫ Next: SB19-084: Vulnerability Summary for the Week of March 18, 2019

≪ Previous: Drupal Releases Security Updates

$

0

0

Original release date: March 22, 2019

Mozilla has released security updates to address vulnerabilities in Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for Firefox 60.6.1 and Firefox 66.0.1 and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-084: Vulnerability Summary for the Week of March 18, 2019

March 25, 2019, 7:04 am

≫ Next: Mozilla Releases Security Update for Thunderbird

≪ Previous: Mozilla Releases Security Updates for Firefox

$

0

0

Original release date: March 25, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
airmore -- airmore	The AirMore application through 1.6.1 for Android allows remote attackers to cause a denial of service (system hang) via many simultaneous /?Key=PhoneRequestAuthorization requests.	2019-03-15	7.8	CVE-2019-9831 EXPLOIT-DB MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option.	2019-03-15	7.2	CVE-2018-18252 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges.	2019-03-15	7.2	CVE-2018-18255 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher.	2019-03-15	7.2	CVE-2018-18256 MISC
caret -- caret	Caret before 2019-02-22 allows Remote Code Execution.	2019-03-22	7.5	CVE-2019-9927 MISC
designchemical -- social_network_tabs	The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.	2019-03-21	7.5	CVE-2018-20555 MISC
ens -- webgalamb	subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.	2019-03-21	7.5	CVE-2018-19510 MISC MISC
ens -- webgalamb	In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory.	2019-03-21	9.0	CVE-2018-19512 MISC MISC
ens -- webgalamb	In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval() expression in the subscriber.php file.	2019-03-21	7.5	CVE-2018-19514 MISC MISC
ens -- webgalamb	In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atment_sddd1xGz, or xls_bgimport query parameters, most of these methods become available to unauthenticated users.	2019-03-21	7.5	CVE-2018-19515 MISC MISC
five9 -- agent_desktop_plus	Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).	2019-03-17	7.5	CVE-2018-15509 MISC
hidglobal -- easylobby_solo	EasyLobby Solo could allow a local attacker to gain elevated privileges on the system. By visiting the kiosk and typing "esc" to exit the program, an attacker could exploit this vulnerability to perform unauthorized actions on the computer.	2019-03-21	7.2	CVE-2018-17491 XF
kioware -- kioware_server	KioWare Server 4.9.6 allows local users to gain privileges by replacing \kioware_com\KWSS.exe with a Trojan horse program, because \kioware_com has "Everyone: (F)" permissions.	2019-03-21	7.2	CVE-2018-18435 MISC EXPLOIT-DB
openmrs -- openmrs	OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.	2019-03-21	10.0	CVE-2018-19276 MISC EXPLOIT-DB
opensuse -- yast2-printer	In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.	2019-03-15	9.3	CVE-2018-20106 CONFIRM
portier -- portier	An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number.	2019-03-21	7.5	CVE-2019-5722 MISC BUGTRAQ EXPLOIT-DB MISC
putty -- putty	In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.	2019-03-21	7.5	CVE-2019-9895 MISC
putty -- putty	Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.	2019-03-21	7.5	CVE-2019-9898 BID MISC
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.	2019-03-15	7.5	CVE-2018-20177 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20179 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20180 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20181 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory corruption and probably even a remote code execution.	2019-03-15	7.5	CVE-2018-20182 BID MISC MLIST CONFIRM GENTOO DEBIAN
roxyfileman -- roxy_fileman	Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.	2019-03-21	7.5	CVE-2018-20526 MISC EXPLOIT-DB
school_attendance_monitoring_system_project -- school_attendance_monitoring_system	School Attendance Monitoring System 1.0 has SQL Injection via user/controller.php?action=edit.	2019-03-21	7.5	CVE-2018-18798 MISC EXPLOIT-DB
solarwinds -- serv-u_ftp_server	SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.	2019-03-21	9.0	CVE-2018-15906 MISC MISC MISC
thresholdsecurity -- evisitorpass	eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button. By visiting the kiosk and clicking the full screen button in the bottom right, an attacker could exploit this vulnerability to close the program and launch other processes on the system.	2019-03-21	7.2	CVE-2018-17493 XF
thresholdsecurity -- evisitorpass	eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start Menu. By visiting the kiosk and pressing windows key twice, an attacker could exploit this vulnerability to close the program and launch other processes on the system.	2019-03-21	7.2	CVE-2018-17494 XF
thresholdsecurity -- evisitorpass	eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.	2019-03-21	7.2	CVE-2018-17495 XF
thresholdsecurity -- evisitorpass	eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system.	2019-03-21	7.2	CVE-2018-17496 XF

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abantecart -- abantecart	AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring.	2019-03-21	4.3	CVE-2018-20141 MISC MISC MISC
advance_b2b_script_project -- advance_b2b_script	PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.	2019-03-21	6.8	CVE-2018-20633 MISC
advance_b2b_script_project -- advance_b2b_script	PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.	2019-03-21	4.0	CVE-2018-20634 MISC
advance_b2b_script_project -- advance_b2b_script	PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.	2019-03-21	4.0	CVE-2018-20635 MISC
airdrop_project -- airdrop	The AirDrop application through 2.0 for Android allows remote attackers to cause a denial of service via a client that makes many socket connections through a configured port.	2019-03-15	5.0	CVE-2019-9832 EXPLOIT-DB MISC
airties -- air_5341_firmware	AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.	2019-03-21	6.8	CVE-2019-6967 MISC MISC MISC EXPLOIT-DB
artifex -- ghostscript	In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.	2019-03-21	6.8	CVE-2019-6116 CONFIRM CONFIRM MISC MLIST MLIST BID REDHAT MISC CONFIRM MLIST FEDORA FEDORA UBUNTU DEBIAN EXPLOIT-DB
bestpractical -- request_tracker	The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.	2019-03-21	5.0	CVE-2018-18898 CONFIRM FEDORA FEDORA
booking_calendar_project -- booking_calendar	SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.	2019-03-21	6.5	CVE-2018-20556 MISC EXPLOIT-DB
bose -- soundtouch	An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app.	2019-03-21	4.3	CVE-2018-12638 MISC MISC
broadcastboxes -- scion-8_firmware	CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.	2019-03-15	5.0	CVE-2019-5616 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.	2019-03-15	6.9	CVE-2018-18253 MISC
capmon -- access_manager	An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the cal_whitelist table in the Custom App Launcher (CAL) database, and potentially gain privileges by placing a Trojan horse program at an app pathname.	2019-03-15	4.6	CVE-2018-18254 MISC
car_rental_script_project -- car_rental_script	PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.	2019-03-21	6.8	CVE-2018-20648 MISC
colossusxt -- colossuscoinxt	ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.	2019-03-21	5.0	CVE-2018-19158 MISC CONFIRM MISC
coyoapp -- coyo	COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS) via URLs used by "iFrame" widgets.	2019-03-21	4.3	CVE-2018-16519 MISC MISC MISC CONFIRM
cryptobots -- battletoken	An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.	2019-03-15	5.0	CVE-2018-17882 MISC MISC
deltek -- ajera	Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.	2019-03-21	6.5	CVE-2018-20221 MISC MISC
dnnsoftware -- dotnetnuke	DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML.	2019-03-21	4.3	CVE-2018-14486 MISC MISC
dropbear_ssh_project -- dropbear_ssh	It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts.	2019-03-21	5.0	CVE-2017-2659 CONFIRM MISC
ens -- webgalamb	wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS.	2019-03-21	4.3	CVE-2018-19509 MISC MISC
ens -- webgalamb	wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password.	2019-03-21	4.3	CVE-2018-19511 MISC MISC
ens -- webgalamb	In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.	2019-03-21	5.0	CVE-2018-19513 MISC MISC
fasterxml -- jackson-databind	An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.	2019-03-21	5.1	CVE-2018-12022 CONFIRM CONFIRM CONFIRM MISC MISC MISC
fasterxml -- jackson-databind	An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.	2019-03-21	5.1	CVE-2018-12023 MISC MISC MISC MISC MISC CONFIRM CONFIRM
fedoraproject -- fedora	Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.	2019-03-21	5.0	CVE-2019-5885 CONFIRM CONFIRM CONFIRM CONFIRM
five9 -- agent_desktop_plus	Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhone(issue 1 of 2).	2019-03-21	5.0	CVE-2018-15508 MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA remerge method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7347.	2019-03-21	6.8	CVE-2019-6727 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7353.	2019-03-21	4.3	CVE-2019-6728 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7423.	2019-03-21	6.8	CVE-2019-6729 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7368.	2019-03-21	6.8	CVE-2019-6730 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7369.	2019-03-21	6.8	CVE-2019-6731 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AFParseDateEx method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7453.	2019-03-21	4.3	CVE-2019-6732 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7576.	2019-03-21	4.3	CVE-2019-6733 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setInterval method. By performing actions in JavaScript, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7452.	2019-03-21	4.3	CVE-2019-6734 MISC MISC
foxitsoftware -- phantompdf	This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7355.	2019-03-21	4.3	CVE-2019-6735 MISC MISC
fujitsu -- gk900_firmware	The receiver (aka bridge) component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption.	2019-03-15	5.8	CVE-2019-9835 BID MISC
get-simple. -- getsimplecms	GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.	2019-03-21	5.8	CVE-2019-9915 MISC MISC
haproxy -- haproxy	An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.	2019-03-21	5.0	CVE-2018-20615 MLIST BID REDHAT UBUNTU MLIST
ibm -- infosphere_streams	IBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134632.	2019-03-21	4.3	CVE-2017-1713 CONFIRM XF
image_sharing_script_project -- image_sharing_script	PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.	2019-03-21	5.0	CVE-2019-7430 MISC
image_sharing_script_project -- image_sharing_script	PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory.	2019-03-21	4.0	CVE-2019-7431 MISC
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and signing in as a visitor, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.	2019-03-21	4.6	CVE-2018-17487 XF
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.	2019-03-21	4.6	CVE-2018-17488 XF
layerbb -- layerbb	LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.	2019-03-21	5.8	CVE-2018-17996 MISC MISC MISC EXPLOIT-DB
layerbb -- layerbb	LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).	2019-03-21	4.3	CVE-2018-17997 MISC CONFIRM EXPLOIT-DB
macpaw -- cleanmymac_x	An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.	2019-03-21	6.6	CVE-2019-5011 MISC
microweber -- microweber	Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.	2019-03-21	4.3	CVE-2018-19917 MISC MISC MISC MISC
moodle -- moodle	Moodle 3.5.x before 3.5.4 allows SSRF.	2019-03-21	6.0	CVE-2019-6970 MISC
my-netdata -- netdata	The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection. Successful exploitation will allow attacker-supplied HTML to run in the context of the affected browser, potentially allowing the attacker to steal authentication credentials or to control how the site is rendered to the user.	2019-03-15	4.3	CVE-2019-9834 EXPLOIT-DB MISC
opentext -- documentum_webtop	XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.	2019-03-21	4.3	CVE-2019-7416 MISC FULLDISC MISC
phamm -- phamm	Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).	2019-03-17	4.3	CVE-2018-20806 MISC
podcastgenerator -- podcast_generator	Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.	2019-03-21	4.3	CVE-2018-20121 MISC MISC MISC MISC
portier -- portier	An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigenere algorithm is badly outdated. Moreover, the encryption key is static and too short. Due to this, the passwords stored by the application can be easily decrypted.	2019-03-21	5.0	CVE-2019-5723 MISC BUGTRAQ MISC
property_rental_software_project -- property_rental_software	PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory.	2019-03-21	4.0	CVE-2019-7429 MISC
putty -- putty	A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.	2019-03-21	6.4	CVE-2019-9894 MISC
putty -- putty	In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.	2019-03-21	4.6	CVE-2019-9896 MISC
putty -- putty	Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.	2019-03-21	5.0	CVE-2019-9897 MISC
qemu -- qemu	In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.	2019-03-21	4.6	CVE-2019-6778 SUSE MISC BID FEDORA MISC
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak.	2019-03-15	5.0	CVE-2018-20174 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20175 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20176 BID MISC MLIST CONFIRM GENTOO DEBIAN
rdesktop -- rdesktop	rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault).	2019-03-15	5.0	CVE-2018-20178 BID MISC MLIST CONFIRM GENTOO DEBIAN
rental_bike_script_project -- rental_bike_script	PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.	2019-03-21	6.8	CVE-2019-7433 MISC
rental_bike_script_project -- rental_bike_script	PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.	2019-03-21	4.0	CVE-2019-7434 MISC
reputeinfosystems -- repute_arforms	An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php.	2019-03-21	6.4	CVE-2018-15818 MISC MISC
roxyfileman -- roxy_fileman	Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.	2019-03-21	5.0	CVE-2018-20525 MISC EXPLOIT-DB
s-cms -- s-cms	S-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter.	2019-03-22	4.3	CVE-2019-9925 MISC
saltos -- saltos	SaltOS 3.1 r8126 allows CSRF.	2019-03-21	4.3	CVE-2018-18762 MISC EXPLOIT-DB
screen_stream_project -- screen_stream	The Screen Stream application through 3.0.15 for Android allows remote attackers to cause a denial of service via many simultaneous /start-stop requests.	2019-03-15	5.0	CVE-2019-9833 EXPLOIT-DB
simplenia -- pages	The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.	2019-03-21	4.3	CVE-2018-19498 MISC MISC MISC
top-vision -- cc8800ce_firmware	Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz with userName=admin in a cookie.	2019-03-15	5.0	CVE-2018-18205 MISC MISC
twiki -- twiki	bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.	2019-03-21	4.3	CVE-2018-20212 MISC MISC MISC
wowza -- streaming_engine	The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request.	2019-03-21	5.0	CVE-2018-19365 MISC
zenphoto -- zenphoto	Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.	2019-03-21	4.3	CVE-2018-20140 MISC MISC MISC MISC MISC
zohocorp -- manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.	2019-03-21	4.3	CVE-2019-7422 MISC FULLDISC MISC
zohocorp -- manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter.	2019-03-21	4.3	CVE-2019-7423 MISC FULLDISC MISC
zohocorp -- manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to CVE-2009-3903.	2019-03-21	4.3	CVE-2019-7424 MISC FULLDISC MISC
zohocorp -- manageengine_netflow_analyzer	XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter.	2019-03-21	4.3	CVE-2019-7425 MISC FULLDISC MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
advance_b2b_script_project -- advance_b2b_script	PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.	2019-03-21	3.5	CVE-2018-20632 MISC
avast -- free_antivirus	Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.	2019-03-21	2.1	CVE-2018-12572 MISC
envoy -- passport	Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, a token and other sensitive information.	2019-03-21	2.1	CVE-2018-17499 XF
hidglobal -- easylobby_solo	EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintext. By visiting the kiosk and viewing the Visitor table of the database, an attacker could exploit this vulnerability to view stored social security numbers.	2019-03-21	2.1	CVE-2018-17489 XF
hidglobal -- easylobby_solo	EasyLobby Solo is vulnerable to a denial of service. By visiting the kiosk and accessing the task manager, a local attacker could exploit this vulnerability to kill the process or launch new processes at will.	2019-03-21	3.6	CVE-2018-17490 XF
hidglobal -- easylobby_solo	EasyLobby Solo contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.	2019-03-21	2.1	CVE-2018-17492 XF
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and clicking on reports, an attacker could exploit this vulnerability to gain access to all visitor records and obtain sensitive information.	2019-03-21	2.1	CVE-2018-17482 XF
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode. By visiting the kiosk and viewing the driver's license column, an attacker could exploit this vulnerability to view the driver's license number and other personal information.	2019-03-21	2.1	CVE-2018-17483 XF
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while in kiosk mode. By using attack vectors outlined in kiosk breakout, an attacker could exploit this vulnerability to view and edit the database.	2019-03-21	3.6	CVE-2018-17484 XF
jollytech -- lobby_track	Lobby Track Desktop contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.	2019-03-21	2.1	CVE-2018-17485 XF
jollytech -- lobby_track	Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kiosk mode. By visiting the kiosk and selecting find visitor, an attacker could exploit this vulnerability to delete visitor records or remove a host.	2019-03-21	3.6	CVE-2018-17486 XF
opensuse -- yast2-samba-provision	In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list	2019-03-15	2.1	CVE-2018-17956 CONFIRM
qemu -- qemu	In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.	2019-03-21	2.1	CVE-2018-18849 SUSE SUSE SUSE MISC FEDORA MISC UBUNTU
securenvoy -- securaccess	An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone.	2019-03-21	1.9	CVE-2018-18466 MISC
thresholdsecurity -- evisitorpass	eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.	2019-03-21	2.1	CVE-2018-17497 XF
webmin -- webmin	Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.	2019-03-21	3.5	CVE-2018-19191 MISC CONFIRM

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
apache -- hadoop	In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.	2019-03-21	not yet calculated	CVE-2018-11767 MLIST MLIST MLIST
apache -- heron	When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the directory you would like to view. i.e. ..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd.	2019-03-21	not yet calculated	CVE-2018-11789 BID MLIST
apache -- karaf	Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validation on the paths in the zip file. This means that a malicious user could craft a .kar file with ".." directory names and break out of the directories to write arbitrary content to the filesystem. This is the "Zip-slip" vulnerability - https://snyk.io/research/zip-slip-vulnerability. This vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf releases prior 4.2.3 is impacted.	2019-03-21	not yet calculated	CVE-2019-0191 BID MLIST
audiocodes -- ip_phone_420hd_devices	AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.	2019-03-21	not yet calculated	CVE-2018-10093 MISC MISC MISC
audiocodes -- ip_phone_420hd_devices	AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow XSS.	2019-03-21	not yet calculated	CVE-2018-10091 MISC MISC
barracuda -- vpn_client	The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.	2019-03-21	not yet calculated	CVE-2019-6724 CONFIRM MISC CONFIRM
bash -- bash	rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.	2019-03-22	not yet calculated	CVE-2019-9924 MISC MISC
blackberry -- athoc	An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field.	2019-03-21	not yet calculated	CVE-2019-8997 MISC
blogengine.net -- blogengine.net	An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if an authenticated user uploads a PostView.ascx file using the file manager utility, which is currently allowed. This results in remote code execution for an authenticated user.	2019-03-21	not yet calculated	CVE-2019-6714 MISC MISC MISC EXPLOIT-DB
bmc -- remedy_mid-tier	BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+View/.	2019-03-21	not yet calculated	CVE-2018-18862 MISC MISC CONFIRM
chinamobile -- plc_wireless_router	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.	2019-03-21	not yet calculated	CVE-2019-6282 MISC MISC EXPLOIT-DB MISC
chinamobile -- plc_wireless_router	ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.	2019-03-21	not yet calculated	CVE-2019-6279 MISC MISC EXPLOIT-DB MISC
cisco -- ip_phone_7800_series_and_ip_phone_8800_series	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code. The vulnerability exists because the software improperly validates user-supplied input during user authentication. An attacker could exploit this vulnerability by connecting to an affected device using HTTP and supplying malicious user credentials. A successful exploit could allow the attacker to trigger a reload of an affected device, resulting in a DoS condition, or to execute arbitrary code with the privileges of the app user. Cisco fixed this vulnerability in the following SIP Software releases: 10.3(1)SR5 and later for Cisco Unified IP Conference Phone 8831; 11.0(4)SR3 and later for Cisco Wireless IP Phone 8821 and 8821-EX; and 12.5(1)SR1 and later for the rest of the Cisco IP Phone 7800 Series and 8800 Series.	2019-03-22	not yet calculated	CVE-2019-1716 CISCO
cisco -- ip_phone_8800_series	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software does not restrict the maximum size of certain files that can be written to disk. An attacker who has valid administrator credentials for an affected system could exploit this vulnerability by sending a crafted, remote connection request to an affected system. A successful exploit could allow the attacker to write a file that consumes most of the available disk space on the system, causing application functions to operate abnormally and leading to a DoS condition. This vulnerability affects Cisco IP Phone 8800 Series products running a SIP Software release prior to 12.5(1)SR1.	2019-03-22	not yet calculated	CVE-2019-1766 CISCO
cisco -- ip_phone_8800_series	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level permissions. An attacker could exploit this vulnerability by uploading invalid files to an affected device. A successful exploit could allow the attacker to write files in arbitrary locations on the filesystem. This vulnerability affects Cisco IP Phone 8800 Series products running a SIP Software release prior to 11.0(5) for Wireless IP Phone 8821 and 8821-EX; and 12.5(1)SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series.	2019-03-22	not yet calculated	CVE-2019-1765 CISCO
cisco -- ip_phone_8800_series	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical services, and cause a denial of service (DoS) condition. The vulnerability exists because the software fails to sanitize URLs before it handles requests. An attacker could exploit this vulnerability by submitting a crafted URL. A successful exploit could allow the attacker to gain unauthorized access to critical services and cause a DoS condition. This vulnerability affects Cisco IP Phone 8800 Series products running a SIP Software release prior to 11.0(5) for Wireless IP Phone 8821 and 8821-EX; and 12.5(1)SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series. Cisco IP Conference Phone 8831 is not affected.	2019-03-22	not yet calculated	CVE-2019-1763 CISCO
cisco -- ip_phone_8800_series	A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user. This vulnerability affects Cisco IP Phone 8800 Series products running a SIP Software release prior to 11.0(5) for Wireless IP Phone 8821 and 8821-EX; and 12.5(1)SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series. Cisco IP Conference Phone 8831 is not affected.	2019-03-22	not yet calculated	CVE-2019-1764 CISCO
ckeditor -- ckeditor	plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.	2019-03-21	not yet calculated	CVE-2019-9870 MISC MISC
controlbyweb -- x-320m-i_web-enabled instrumentation-grade_data_acquisition_module	A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.	2019-03-21	not yet calculated	CVE-2018-18882 BID MISC
controlbyweb -- x-320m-i_web-enabled instrumentation-grade_data_acquisition_module	A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory reset is required to restore the device to an operational state.	2019-03-21	not yet calculated	CVE-2018-18881 BID MISC
core_ftp -- core_ftp	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal technique (..\..\) to browse outside the root directory to determine the existence of a file on the operating system, and its last modified date.	2019-03-22	not yet calculated	CVE-2019-9649 CONFIRM BID FULLDISC EXPLOIT-DB
core_ftp -- core_ftp	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.	2019-03-22	not yet calculated	CVE-2019-9648 CONFIRM BID FULLDISC EXPLOIT-DB
coturn -- coturn	An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.	2019-03-21	not yet calculated	CVE-2018-4059 MISC
coturn -- coturn	An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.	2019-03-21	not yet calculated	CVE-2018-4058 MISC
cujo -- smart_firewall	An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.	2019-03-21	not yet calculated	CVE-2018-3985 MISC
cujo -- smart_firewall	An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string lengths are handled incorrectly when parsing character strings in mDNS resource records, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.	2019-03-21	not yet calculated	CVE-2018-4003 MISC
cujo -- smart_firewall	An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a new static DHCP address, its corresponding hostname is inserted into the dhcpd.conf file without prior sanitization, allowing for arbitrary execution of system commands. To trigger this vulnerability, an attacker can send a DHCP request message and set up the corresponding static DHCP entry.	2019-03-21	not yet calculated	CVE-2018-3963 MISC
cujo -- smart_firewall	An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the "RDLENGTH" value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.	2019-03-21	not yet calculated	CVE-2018-4011 MISC
cujo -- smart_firewall	An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.	2019-03-21	not yet calculated	CVE-2018-4030 MISC
cujo -- smart_firewall	An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.	2019-03-21	not yet calculated	CVE-2018-3969 MISC
denx -- das_u-boot	An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy image format. To trigger this vulnerability, a local attacker needs to be able to supply the image to boot.	2019-03-21	not yet calculated	CVE-2018-3968 MISC
digi -- transport_lr54	Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.	2019-03-21	not yet calculated	CVE-2018-20162 MISC MISC MISC
donfig -- donfig	An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.	2019-03-21	not yet calculated	CVE-2019-7537 MISC MISC
doorkeeper -- openidconnect	Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt=none value. This allows phishing attacks against the authorization flow.	2019-03-21	not yet calculated	CVE-2019-9837 MISC MISC MISC
envoy -- passport_for_android_and_passport_for_iphone	Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext. An attacker could exploit this vulnerability to obtain sensitive information.	2019-03-21	not yet calculated	CVE-2018-17500 XF
ericsson -- active_library_explorer	XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.	2019-03-21	not yet calculated	CVE-2019-7417 MISC FULLDISC MISC
fatek -- automation_pm_designer_and_automation_fv_designer	A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0.	2019-03-21	not yet calculated	CVE-2016-5800 MISC
flexera_software -- flexnet_publisher	A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.	2019-03-21	not yet calculated	CVE-2018-20034 CONFIRM
flexera_software -- flexnet_publisher	A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.	2019-03-21	not yet calculated	CVE-2018-20032 CONFIRM
flexera_software -- flexnet_publisher	A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.	2019-03-21	not yet calculated	CVE-2018-20031 CONFIRM
gl.inet -- gl-ar300m-lite_devices	Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	2019-03-21	not yet calculated	CVE-2019-6275 MISC EXPLOIT-DB
gl.inet -- gl-ar300m-lite_devices	Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.	2019-03-21	not yet calculated	CVE-2019-6274 MISC EXPLOIT-DB
gl.inet -- gl-ar300m-lite_devices	download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.	2019-03-21	not yet calculated	CVE-2019-6273 MISC EXPLOIT-DB
gl.inet -- gl-ar300m-lite_devices	Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.	2019-03-21	not yet calculated	CVE-2019-6272 MISC EXPLOIT-DB
gnu -- tar	pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.	2019-03-22	not yet calculated	CVE-2019-9923 MISC MISC MISC
graphviz -- graphviz	An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.	2019-03-21	not yet calculated	CVE-2019-9904 MISC MISC
heimdal_security -- thor_agent	Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.	2019-03-21	not yet calculated	CVE-2019-8351 MISC
hms_industrial_networks -- netbiter_ws100_devices	HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.	2019-03-21	not yet calculated	CVE-2018-19694 MISC MISC CONFIRM MISC
hospira -- symbiq_infusion_system	Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.	2019-03-23	not yet calculated	CVE-2015-3965 MISC
hostapd -- hostapd	hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.	2019-03-23	not yet calculated	CVE-2016-10743 MISC
humhub -- humhub	A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.	2019-03-21	not yet calculated	CVE-2019-9094 MISC
humhub -- humhub	A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.	2019-03-21	not yet calculated	CVE-2019-9093 MISC
ibm -- api_connect	IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.	2019-03-22	not yet calculated	CVE-2019-4052 CONFIRM XF
ibm -- content_navigator	IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.	2019-03-22	not yet calculated	CVE-2019-4035 CONFIRM XF
ibm -- db2_for_linux_and_unix_and_windows	IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014.	2019-03-21	not yet calculated	CVE-2019-4094 XF CONFIRM
ibm -- power_9_systems	The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.	2019-03-21	not yet calculated	CVE-2018-1992 XF CONFIRM
ibm -- websphere_mq	IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661.	2019-03-21	not yet calculated	CVE-2018-1836 BID XF CONFIRM
imagemagick -- imagemagick	In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.	2019-03-23	not yet calculated	CVE-2019-9956 BID MISC
insteon -- hub	An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.	2019-03-21	not yet calculated	CVE-2017-16253 MISC
insteon -- hub	An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large.	2019-03-21	not yet calculated	CVE-2017-16255 MISC
insteon -- hub	An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at 0x9d014e4c the value for the flg key is copied using strcpy to the buffer at $sp+0x270. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow.	2019-03-21	not yet calculated	CVE-2017-16254 MISC
invoiceplane -- invoiceplane	InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.	2019-03-21	not yet calculated	CVE-2019-7223 MISC
iobit -- smart_defrag	SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.	2019-03-21	not yet calculated	CVE-2019-6492 MISC
ipycache -- ipycache	A code injection issue was discovered in ipycache through 2016-05-31.	2019-03-21	not yet calculated	CVE-2019-7539 CONFIRM
jiofi -- 4g_m2s_devices	JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi).	2019-03-21	not yet calculated	CVE-2019-7440 MISC
kentix -- multisensor-lan_devices	Kentix MultiSensor-LAN 5.63.00 devices and previous allow Authentication Bypass via an Alternate Path or Channel.	2019-03-21	not yet calculated	CVE-2018-19783 MISC MISC
kill-port -- kill-port	If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.	2019-03-21	not yet calculated	CVE-2019-5414 MISC
lenovo -- dynamic_power_reduction_utility	An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.	2019-03-17	not yet calculated	CVE-2019-6149 BID CONFIRM
libseccomp -- libseccomp	libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.	2019-03-21	not yet calculated	CVE-2019-9893 MISC MISC
libsndfile -- libsndfile	It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.	2019-03-21	not yet calculated	CVE-2019-3832 CONFIRM CONFIRM CONFIRM
libssh2 -- libssh2	An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.	2019-03-21	not yet calculated	CVE-2019-3858 MISC MLIST BID CONFIRM FEDORA BUGTRAQ MISC
libssh2 -- libssh2	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.	2019-03-21	not yet calculated	CVE-2019-3859 MISC MLIST BID CONFIRM FEDORA BUGTRAQ MISC
libssh2 -- libssh2	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.	2019-03-21	not yet calculated	CVE-2019-3862 MISC MLIST BID CONFIRM FEDORA BUGTRAQ MISC
libssh2 -- libssh2	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.	2019-03-21	not yet calculated	CVE-2019-3855 MISC MLIST BID CONFIRM FEDORA BUGTRAQ MISC
limesurvey -- limesurvey	The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.	2019-03-23	not yet calculated	CVE-2019-9960 MISC
linux -- kernel	In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service.	2019-03-21	not yet calculated	CVE-2019-9857 BID MISC MISC
linux -- kernel	The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.	2019-03-21	not yet calculated	CVE-2018-19985 MISC MISC MISC MISC MISC
linux -- kernel	An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.	2019-03-21	not yet calculated	CVE-2018-20669 MISC MLIST MLIST BID MISC
linux -- kernel	The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.	2019-03-21	not yet calculated	CVE-2019-7222 SUSE MISC MLIST BID CONFIRM CONFIRM MISC FEDORA FEDORA
linux -- kernel	The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.	2019-03-21	not yet calculated	CVE-2019-7221 SUSE MISC MISC CONFIRM CONFIRM MISC FEDORA FEDORA
localhost-now -- localhost-now	A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.	2019-03-21	not yet calculated	CVE-2019-5416 MISC
logonbox -- nervepoint_access_manager	An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.	2019-03-21	not yet calculated	CVE-2019-6716 MISC EXPLOIT-DB MISC
mailcleaner -- mailcleaner_community_edition	www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.	2019-03-21	not yet calculated	CVE-2018-20323 MISC MISC
mastercard -- qkr!_with_masterpass	The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.	2019-03-21	not yet calculated	CVE-2019-6702 MISC FULLDISC MISC MISC
morgan -- morgan	An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.	2019-03-21	not yet calculated	CVE-2019-5413 MISC
moxa -- oncell_g3100v2_series_and_oncell g3111/g3151/g3211/g3251_series	Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user?s browser within the trust relationship between their browser and the server.	2019-03-21	not yet calculated	CVE-2016-5819 MISC
moxa -- softcms	Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.	2019-03-21	not yet calculated	CVE-2015-6457 MISC
moxa -- softcms	Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.	2019-03-21	not yet calculated	CVE-2015-6458 MISC
mybb -- mybb	In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page.	2019-03-21	not yet calculated	CVE-2018-14724 EXPLOIT-DB
mybb -- mybb	Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.	2019-03-21	not yet calculated	CVE-2018-14575 MISC MISC MISC
netapp -- service_processor	Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.	2019-03-21	not yet calculated	CVE-2019-5490 CONFIRM
netiq -- edirectory	NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security.	2019-03-21	not yet calculated	CVE-2016-9166 CONFIRM
nokia -- 8810_4g_devices	A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.	2019-03-21	not yet calculated	CVE-2019-7386 MISC FULLDISC MISC MISC MISC
open-xchange -- ox_app_suite	OX App Suite 7.8.4 and earlier allows SSRF.	2019-03-21	not yet calculated	CVE-2018-13103 MISC MISC
open-xchange -- ox_app_suite	OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)	2019-03-21	not yet calculated	CVE-2018-13104 MISC MISC
opentext -- portal	Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI.	2019-03-22	not yet calculated	CVE-2018-20165 MISC
opera_software -- opera	Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.	2019-03-21	not yet calculated	CVE-2018-18913 CONFIRM MISC
patlite -- nbm-d88n_and_nhl-3fb1_and_nhl-3fv1n_devices	A hidden backdoor on PATLITE NBM-D88N, NHL-3FB1, and NHL-3FV1N devices allows attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the _secret1.htm URI. Subsequently, the default password of root for the root account allows an attacker to conduct remote code execution and as a result take over the system.	2019-03-21	not yet calculated	CVE-2018-18473 MISC
phpscriptsmall.com -- advance_crowdfunding_script	PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.	2019-03-21	not yet calculated	CVE-2018-20630 MISC
phpscriptsmall.com -- basic_b2b_script	PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.	2019-03-21	not yet calculated	CVE-2018-20644 MISC
phpscriptsmall.com -- basic_b2b_script	PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.	2019-03-21	not yet calculated	CVE-2018-20645 MISC
phpscriptsmall.com -- basic_b2b_script	PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.	2019-03-21	not yet calculated	CVE-2018-20646 MISC
phpscriptsmall.com -- car_rental_script	PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.	2019-03-21	not yet calculated	CVE-2018-20647 MISC
phpscriptsmall.com -- charity_foundation_script	PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.	2019-03-21	not yet calculated	CVE-2018-20628 MISC
phpscriptsmall.com -- charity_foundation_script	PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.	2019-03-21	not yet calculated	CVE-2018-20629 MISC
phpscriptsmall.com -- chartered_accountant	PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.	2019-03-21	not yet calculated	CVE-2018-20637 MISC
phpscriptsmall.com -- chartered_accountant	PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.	2019-03-21	not yet calculated	CVE-2018-20638 MISC
phpscriptsmall.com -- chartered_accountant	PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.	2019-03-21	not yet calculated	CVE-2018-20636 MISC
phpscriptsmall.com -- consumer_reviews_script	PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.	2019-03-21	not yet calculated	CVE-2018-20627 MISC
phpscriptsmall.com -- consumer_reviews_script	PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.	2019-03-21	not yet calculated	CVE-2018-20626 MISC
phpscriptsmall.com -- entrepreneur_job_portal_script	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.	2019-03-21	not yet calculated	CVE-2018-20642 MISC
phpscriptsmall.com -- entrepreneur_job_portal_script	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.	2019-03-21	not yet calculated	CVE-2018-20639 MISC
phpscriptsmall.com -- entrepreneur_job_portal_script	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.	2019-03-21	not yet calculated	CVE-2018-20641 MISC
phpscriptsmall.com -- entrepreneur_job_portal_script	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.	2019-03-21	not yet calculated	CVE-2018-20640 MISC
phpscriptsmall.com -- entrepreneur_job_portal_script	PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.	2019-03-21	not yet calculated	CVE-2018-20643 MISC
phpscriptsmall.com -- opensource_classified_ads_script	PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.	2019-03-21	not yet calculated	CVE-2019-7436 MISC
phpscriptsmall.com -- opensource_classified_ads_script	PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.	2019-03-21	not yet calculated	CVE-2019-7435 MISC
phpscriptsmall.com -- opensource_classified_ads_script	PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.	2019-03-21	not yet calculated	CVE-2019-7437 MISC
phpscriptsmall.com -- rental_bike_script	PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.	2019-03-21	not yet calculated	CVE-2019-7432 MISC
phpscriptsmall.com -- website_seller_script	PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.	2019-03-21	not yet calculated	CVE-2018-20631 MISC
plohni -- advanced_comment_system	internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The product is discontinued.	2019-03-21	not yet calculated	CVE-2018-18845 MISC MISC
poppler -- poppler	PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.	2019-03-21	not yet calculated	CVE-2019-9903 MISC MISC
powerdns -- authoritative_server	A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint, or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response	2019-03-21	not yet calculated	CVE-2019-3871 MLIST BID CONFIRM MISC
printeron -- enterprise	PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name" or "Server Serial Number" field in the clustering configuration, (2) "name" field in the Edit Group configuration, (3) "Rule Name" field in the Access Control configuration, (4) "Service Name" in the Service Configuration, or (5) First Name or Last Name field in the Edit Account configuration.	2019-03-21	not yet calculated	CVE-2018-17167 MISC
puppet -- chloride	Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride.	2019-03-21	not yet calculated	CVE-2018-6517 CONFIRM
puppet -- discovery	Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.	2019-03-21	not yet calculated	CVE-2018-11747 CONFIRM
python -- python	urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.	2019-03-23	not yet calculated	CVE-2019-9948 MISC MISC
python -- python	An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string or PATH_INFO) followed by an HTTP header or a Redis command. This is similar to CVE-2019-9740.	2019-03-23	not yet calculated	CVE-2019-9947 MISC
python-gnupg -- python-gnupg	python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.	2019-03-21	not yet calculated	CVE-2019-6690 SUSE SUSE MISC BID MLIST MISC BUGTRAQ
qemu -- qemu	hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.	2019-03-21	not yet calculated	CVE-2019-8934 MISC MISC MISC
qemu -- qemu	In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.	2019-03-21	not yet calculated	CVE-2019-6501 MLIST MLIST
qt -- qt	An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.	2019-03-21	not yet calculated	CVE-2018-19872 CONFIRM
raisecom -- multiple_products	An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below. The value of the fmgpon_loid parameter is used in a system call inside the boa binary. Because there is no user input validation, this leads to authenticated code execution on the device.	2019-03-21	not yet calculated	CVE-2019-7384 MISC FULLDISC MISC MISC BID MISC
raisecom -- multiple_products	An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below, The values of the newpass and confpass parameters in /bin/WebMGR are used in a system call in the firmware. Because there is no user input validation, this leads to authenticated code execution on the device.	2019-03-21	not yet calculated	CVE-2019-7385 MISC MISC FULLDISC MISC BID MISC
reliance_jio_infocomm -- jiofi_4g_m2s_devices	cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.	2019-03-21	not yet calculated	CVE-2019-7439 MISC
reliance_jio_infocomm -- jiofi_4g_m2s_devices	cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.	2019-03-21	not yet calculated	CVE-2019-7438 MISC MISC
risi -- gestao_de_horarios	RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.	2019-03-21	not yet calculated	CVE-2019-6491 MISC
samsung -- galaxy_s6	Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029.	2019-03-21	not yet calculated	CVE-2018-14745 MISC MISC CONFIRM
samsung -- x7400gx_syncthru_web_service	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.	2019-03-21	not yet calculated	CVE-2019-7421 MISC FULLDISC MISC MISC
samsung -- x7400gx_syncthru_web_service	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.	2019-03-21	not yet calculated	CVE-2019-7420 MISC FULLDISC MISC MISC
samsung -- x7400gx_syncthru_web_service	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.	2019-03-21	not yet calculated	CVE-2019-7419 MISC FULLDISC MISC MISC
samsung -- x7400gx_syncthru_web_service	XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.	2019-03-21	not yet calculated	CVE-2019-7418 MISC FULLDISC MISC MISC
schneider_electric -- modicon_plc_products	Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.	2019-03-21	not yet calculated	CVE-2015-6462 MISC
schneider_electric -- modicon_plc_products	Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.	2019-03-21	not yet calculated	CVE-2015-6461 MISC
serve -- serve	A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.	2019-03-21	not yet calculated	CVE-2019-5415 MISC
serve -- serve	A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.	2019-03-21	not yet calculated	CVE-2019-5417 MISC
shareit -- shareit_for_android	The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.	2019-03-22	not yet calculated	CVE-2019-9939 MISC
shareit -- shareit_for_android	The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."	2019-03-22	not yet calculated	CVE-2019-9938 MISC
shellinabox -- shellinabox	libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down.	2019-03-21	not yet calculated	CVE-2018-16789 MISC MISC CONFIRM CONFIRM
shenzhen_electronics_coship -- multiple_devices	An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.	2019-03-21	not yet calculated	CVE-2019-6441 MISC MISC MISC MISC EXPLOIT-DB EXPLOIT-DB
shenzhen_skyworth -- multiple_devices	An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Web_passwd function allows remote attackers to cause a denial of service (segmentation fault) or achieve unauthenticated remote code execution because of control of registers S0 through S4 and T4 through T7.	2019-03-21	not yet calculated	CVE-2018-19524 MISC MISC MISC MISC MISC
siemens -- multiple_products	A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.35), Firmware variant MODBUS TCP for EN100 Ethernet module (All versions), Firmware variant DNP3 TCP for EN100 Ethernet module (All versions), Firmware variant IEC104 for EN100 Ethernet module (All versions), Firmware variant Profinet IO for EN100 Ethernet module (All versions), SIPROTEC 5 relays with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.82), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.58). Specially crafted packets to port 102/tcp could cause a denial-of-service condition in the affected products. A manual restart is required to recover the EN100 module functionality of the affected devices. Successful exploitation requires an attacker with network access to send multiple packets to the affected products or modules. As a precondition the IEC 61850-MMS communication needs to be activated on the affected products or modules. No user interaction or privileges are required to exploit the vulnerability. The vulnerability could allow causing a Denial-of-Service condition of the network functionality of the device, compromising the availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.	2019-03-21	not yet calculated	CVE-2018-16563 CONFIRM
siemens -- sicam_products	A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.	2019-03-21	not yet calculated	CVE-2018-13798 CONFIRM
signal_messenger -- open_whisper_and_private_messenger	Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.	2019-03-23	not yet calculated	CVE-2019-9970 MISC
softnas -- cloud	SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deployment best practices and expose SoftNAS StorageCenter ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create new users or execute arbitrary commands with administrative privileges, compromising both the platform and the data.	2019-03-23	not yet calculated	CVE-2019-9945 MISC
solarwinds -- serv-u_ftp_server	SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.	2019-03-21	not yet calculated	CVE-2018-19934 MISC MISC MISC
sonatype -- nexus_repository_manager	Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.	2019-03-21	not yet calculated	CVE-2019-7238 MISC
splunk -- splunk-sdk-python	Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.	2019-03-21	not yet calculated	CVE-2019-5729 CONFIRM
sqlite -- sqlite	In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.	2019-03-22	not yet calculated	CVE-2019-9937 MISC MISC MISC
sqlite -- sqlite	In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.	2019-03-22	not yet calculated	CVE-2019-9936 MISC MISC MISC
sqlitemanager -- sqlitemanager	SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.	2019-03-21	not yet calculated	CVE-2019-9083 MISC
sricam -- ip_cctv_cameras	Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.	2019-03-21	not yet calculated	CVE-2019-6973 MISC MISC EXPLOIT-DB
synaptics -- touchpad_drivers	SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses.	2019-03-21	not yet calculated	CVE-2018-15532 MISC MISC MISC CONFIRM
systemd -- systemd	An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).	2019-03-21	not yet calculated	CVE-2019-6454 SUSE MLIST MLIST BID REDHAT MISC MLIST FEDORA UBUNTU DEBIAN
systrome -- cumilon_isg-600c_and_isg-600h_and_isg-800w_devices	An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/isp_update_edit.php does not properly validate user input, which leads to shell command injection via the des parameter.	2019-03-21	not yet calculated	CVE-2019-7383 MISC MISC FULLDISC MISC BID MISC
systrome -- multiple_devices	An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.	2019-03-21	not yet calculated	CVE-2018-19525 MISC MISC MISC
teracue -- enc-400_devices	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/share/www/check.lp file). By setting this cookie in a browser, an attacker is able to maintain access to every ENC-400 device without knowing the password, which results in authentication bypass. Even if a user changes the password on the device, this token is static and unchanged.	2019-03-21	not yet calculated	CVE-2018-20219 MISC MISC MISC
teracue -- enc-400_devices	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, and some of these pages may disclose sensitive information.	2019-03-21	not yet calculated	CVE-2018-20220 MISC MISC MISC
teracue -- enc-400_devices	An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form.	2019-03-21	not yet calculated	CVE-2018-20218 MISC MISC
the_receptionist -- the_receptionist_for_ipad	The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit this vulnerability to obtain the contact names, phone numbers and emails.	2019-03-21	not yet calculated	CVE-2018-17502 XF
twig -- twig	A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.	2019-03-23	not yet calculated	CVE-2019-9942 MISC MISC
vanilla -- vanilla	In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.	2019-03-21	not yet calculated	CVE-2019-9889 MISC MISC MISC
veritas -- netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator.	2019-03-21	not yet calculated	CVE-2019-9868 MISC
veritas -- netbackup_appliance	An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.	2019-03-21	not yet calculated	CVE-2019-9867 MISC
vertrigoserv -- vertrigoserv	VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.	2019-03-21	not yet calculated	CVE-2019-8938 MISC MISC MISC
wifi-soft -- unibox_controller	An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostic_tools_controller Diagnostic Tools Controller is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.	2019-03-21	not yet calculated	CVE-2019-3496 MISC MLIST MISC
wifi-soft -- unibox_controller	An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools component is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.	2019-03-21	not yet calculated	CVE-2019-3497 MISC MLIST MISC
wifi-soft -- unibox_controller	An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.	2019-03-21	not yet calculated	CVE-2019-3495 MISC MLIST MISC
wordpress -- wordpress	The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.	2019-03-21	not yet calculated	CVE-2019-9912 FULLDISC MISC MISC
wordpress -- wordpress	The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS.	2019-03-21	not yet calculated	CVE-2019-9914 FULLDISC MISC MISC
wordpress -- wordpress	The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS.	2019-03-21	not yet calculated	CVE-2019-9913 FULLDISC MISC MISC
wordpress -- wordpress	The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.	2019-03-21	not yet calculated	CVE-2019-9908 FULLDISC MISC MISC MISC
wordpress -- wordpress	The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account.	2019-03-21	not yet calculated	CVE-2018-19488 MISC
wordpress -- wordpress	The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users.	2019-03-21	not yet calculated	CVE-2018-19487 MISC
wordpress -- wordpress	cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price.	2019-03-21	not yet calculated	CVE-2019-7441 MISC
wordpress -- wordpress	The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS.	2019-03-21	not yet calculated	CVE-2019-9911 FULLDISC MISC MISC
wordpress -- wordpress	A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php.	2019-03-21	not yet calculated	CVE-2019-7299 MISC MISC MISC
wordpress -- wordpress	The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS.	2019-03-21	not yet calculated	CVE-2019-9909 FULLDISC MISC MISC MISC
wordpress -- wordpress	The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.	2019-03-21	not yet calculated	CVE-2019-9910 FULLDISC MISC MISC
wso2 -- api_manager	An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product.	2019-03-21	not yet calculated	CVE-2018-20736 CONFIRM CONFIRM MISC
wso2 -- api_manager	An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.	2019-03-21	not yet calculated	CVE-2018-20737 CONFIRM CONFIRM MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399.	2019-03-23	not yet calculated	CVE-2019-9969 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c.	2019-03-23	not yet calculated	CVE-2019-9966 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.	2019-03-23	not yet calculated	CVE-2019-9967 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem.	2019-03-23	not yet calculated	CVE-2019-9968 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey.	2019-03-23	not yet calculated	CVE-2019-9964 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap.	2019-03-23	not yet calculated	CVE-2019-9965 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap.	2019-03-23	not yet calculated	CVE-2019-9963 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy.	2019-03-23	not yet calculated	CVE-2019-9962 MISC
xpdf -- xpdf	There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-21	not yet calculated	CVE-2019-9878 MISC MISC
xpdf -- xpdf	There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.	2019-03-21	not yet calculated	CVE-2019-9877 MISC MISC
yast -- yast2-multipath	In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection	2019-03-15	not yet calculated	CVE-2018-17955 CONFIRM
ysoft -- safeq_server	YSoft SafeQ Server 6 allows a replay attack.	2019-03-21	not yet calculated	CVE-2018-15498 MISC
yubico -- libu2f-host	Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.	2019-03-21	not yet calculated	CVE-2018-20340 CONFIRM MISC MISC CONFIRM
zoho_manageengine -- adselfservice_plus	An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.	2019-03-21	not yet calculated	CVE-2019-7161 MISC CONFIRM
zyxel -- vmg3312-b10b_dsl-491hnu-b1b_modem	ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.	2019-03-21	not yet calculated	CVE-2019-7391 MISC MISC EXPLOIT-DB MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

Mozilla Releases Security Update for Thunderbird

March 25, 2019, 5:13 pm

≫ Next: Apple Releases Multiple Security Updates

≪ Previous: SB19-084: Vulnerability Summary for the Week of March 18, 2019

$

0

0

Original release date: March 25, 2019

Mozilla has released a security update to address vulnerabilities in Thunderbird. An attacker could exploit these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisory for Thunderbird 60.6.1 and apply the necessary update.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Apple Releases Multiple Security Updates

March 25, 2019, 5:14 pm

≫ Next: ASUS Releases Security Update for Live Update Software

≪ Previous: Mozilla Releases Security Update for Thunderbird

$

0

0

Original release date: March 25, 2019

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates:

• iCloud for Windows 7.11
• iTunes 12.9.4 for Windows
• Safari 12.1
• macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra
• tvOS 12.2
• Xcode 10.2
• iOS 12.2

---

This product is provided subject to this Notification and this Privacy & Use policy.

ASUS Releases Security Update for Live Update Software

March 26, 2019, 9:15 am

≫ Next: Cisco Releases Security Updates for Multiple Products

≪ Previous: Apple Releases Multiple Security Updates

$

0

0

Original release date: March 26, 2019

ASUS has released Live Update version 3.6.8. This version addresses vulnerabilities that a remote attacker could exploit to take control of an affected system. These vulnerabilities were detected in exploits in the wild.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the ASUS article for more information. The article includes a security diagnostic tool that users can run on their device to determine whether it is affected. CISA also encourages users and administrators to review the ASUS FAQ page to confirm that their device has received the upgrade to version 3.6.8 of Live Update.

---

This product is provided subject to this Notification and this Privacy & Use policy.

Cisco Releases Security Updates for Multiple Products

March 27, 2019, 11:02 am

≫ Next: Cisco Releases Security Update for Cisco IOS XE

≪ Previous: ASUS Releases Security Update for Live Update Software

$

0

0

Original release date: March 27, 2019

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisory page and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

---

Cisco Releases Security Update for Cisco IOS XE

March 28, 2019, 8:23 am

≫ Next: VMware Releases Security Updates

≪ Previous: Cisco Releases Security Updates for Multiple Products

$

0

0

Original release date: March 28, 2019

Cisco has released a security update to address a vulnerability in Cisco IOS XE. An attacker could exploit this vulnerability to obtain sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Cisco Security Advisory and apply the necessary update.

---

This product is provided subject to this Notification and this Privacy & Use policy.

VMware Releases Security Updates

March 29, 2019, 9:20 am

≫ Next: SB19-091: Vulnerability Summary for the Week of March 25, 2019

≪ Previous: Cisco Releases Security Update for Cisco IOS XE

$

0

0

Original release date: March 29, 2019

VMware has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the VMware Security Advisories VMSA-2019-0004 and VMSA-2019-0005 and apply the necessary updates.

---

This product is provided subject to this Notification and this Privacy & Use policy.

SB19-091: Vulnerability Summary for the Week of March 25, 2019

April 1, 2019, 5:31 am

≫ Next: Supply Chain Integrity Month

≪ Previous: VMware Releases Security Updates

$

0

0

Original release date: April 01, 2019

The US-CERT Cyber Security Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. The NVD is sponsored by the Department of Homeland Security (DHS) National Cybersecurity and Communications Integration Center (NCCIC) / United States Computer Emergency Readiness Team (US-CERT). For modified or updated entries, please visit the NVD, which contains historical vulnerability information.

The vulnerabilities are based on the CVE vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High - Vulnerabilities will be labeled High severity if they have a CVSS base score of 7.0 - 10.0

• Medium - Vulnerabilities will be labeled Medium severity if they have a CVSS base score of 4.0 - 6.9

• Low - Vulnerabilities will be labeled Low severity if they have a CVSS base score of 0.0 - 3.9

Entries may include additional information provided by organizations and efforts sponsored by US-CERT. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletins is compiled from external, open source reports and is not a direct result of US-CERT analysis.

The NCCIC Weekly Vulnerability Summary Bulletin is created using information from the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

 

High Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abus -- secvest_wireless_alarm_system_fuaa50000_firmware	Due to the use of an insecure algorithm for rolling codes in the ABUS Secvest wireless alarm system FUAA50000 3.01.01 and its remote controls FUBE50014 and FUBE50015, an attacker is able to predict valid future rolling codes, and can thus remotely control the alarm system in an unauthorized way.	2019-03-27	10.0	CVE-2019-9863 MISC
apache -- mesos	A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.	2019-03-25	9.3	CVE-2019-0204 BID MLIST
atlassian -- confluence	The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version 6.9.0 before 6.9.3 (the fixed version for 6.9.x) allows remote attackers to send arbitrary HTTP and WebDAV requests from a Confluence Server or Data Center instance via Server-Side Request Forgery.	2019-03-25	7.5	CVE-2019-3395 MISC
atlassian -- confluence	The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.	2019-03-25	10.0	CVE-2019-3396 MISC
bluecms_project -- bluecms	A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.	2019-03-28	7.5	CVE-2019-10262 MISC
dlink -- dir-816_firmware	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication.	2019-03-25	10.0	CVE-2019-10040 MISC
dlink -- dir-816_firmware	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.	2019-03-25	7.8	CVE-2019-10042 MISC
dovecot -- dovecot	In Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow in the indexer-worker process, which can be used to elevate to root. This occurs because of missing checks in the fts and pop3-uidl components.	2019-03-28	7.2	CVE-2019-7524 MLIST MISC MISC MLIST BUGTRAQ DEBIAN
flatpak -- flatpak	Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.	2019-03-26	7.5	CVE-2019-10063 MISC
fortinet -- fortiportal	A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button	2019-03-25	7.5	CVE-2017-7342 CONFIRM
ghs -- integrity_rtos	An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or current working directory. Modifier expansion triggers this overflow, causing memory corruption or a crash (and also leaks memory address information).	2019-03-25	7.5	CVE-2019-7713 MISC MISC
ghs -- integrity_rtos	An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.	2019-03-25	7.5	CVE-2019-7714 MISC MISC
github -- github	The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a crafted cookie signed with this secret, one can call Marshal.load with arbitrary data, which is a problem because the Marshal data format allows Ruby objects.	2019-03-28	7.5	CVE-2017-18365 MISC MISC
hospira -- mednet	Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.	2019-03-26	10.0	CVE-2014-5401 MISC
hp -- arcsight_logger	Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.	2019-03-25	7.5	CVE-2019-3479 MISC
hp -- arcsight_logger	Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.	2019-03-25	7.5	CVE-2019-3481 MISC
hp -- arcsight_logger	Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.	2019-03-25	7.2	CVE-2019-3484 MISC
linux -- linux_kernel	An issue was discovered in the hwpoison implementation in mm/memory-failure.c in the Linux kernel before 5.0.4. When soft_offline_in_use_page() runs on a thp tail page after pmd is split, an attacker can cause a denial of service (BUG).	2019-03-27	7.8	CVE-2019-10124 MISC BID MISC MISC
linux -- linux_kernel	An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.	2019-03-27	10.0	CVE-2019-10125 MISC
microfocus -- data_protector	Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.	2019-03-25	7.5	CVE-2019-3476 MISC
moodle -- moodle	A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.	2019-03-25	7.5	CVE-2019-3809 CONFIRM CONFIRM CONFIRM
ovirt -- vdsm	A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.	2019-03-25	9.0	CVE-2019-3831 CONFIRM
pfizer -- symbiq_infusion_system_firmware	Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.	2019-03-23	9.0	CVE-2015-3965 MISC
redhat -- ansible	Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.	2019-03-27	7.5	CVE-2019-3828 CONFIRM MISC
softnas -- cloud	SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. The NGINX default configuration file has a check to verify the status of a user cookie. If not set, a user is redirected to the login page. An arbitrary value can be provided for this cookie to access the web interface without valid user credentials. If customers have not followed SoftNAS deployment best practices and expose SoftNAS StorageCenter ports directly to the internet, this vulnerability allows an attacker to gain access to the Webadmin interface to create new users or execute arbitrary commands with administrative privileges, compromising both the platform and the data.	2019-03-23	10.0	CVE-2019-9945 MISC
teclib-edition -- gestionnaire_libre_de_parc_informatique	Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.	2019-03-27	7.5	CVE-2019-10232 MISC
tianocore -- edk_ii	Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.	2019-03-27	7.5	CVE-2019-0160 CONFIRM

Back to top

 

Medium Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
amazon_affiliate_store_project -- amazon_affiliate_store	PHP Scripts Mall Amazon Affiliate Store 2.1.6 allows Parameter Tampering of the payment amount.	2019-03-28	4.0	CVE-2019-9864 MISC
baigo -- baigo_sso	baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.	2019-03-24	6.5	CVE-2019-10015 MISC
cmsmadesimple -- cms_made_simple	CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.	2019-03-24	4.3	CVE-2019-10017 MISC MISC
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.	2019-03-26	6.8	CVE-2019-9053 MISC CONFIRM
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible reach an unserialize call with a crafted value in the m1_allparms parameter, and achieve object injection.	2019-03-26	6.5	CVE-2019-9055 MISC CONFIRM
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.	2019-03-26	6.5	CVE-2019-9057 MISC CONFIRM
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.	2019-03-26	6.5	CVE-2019-9058 MISC CONFIRM
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account, to achieve command injection by modifying the path of the e-mail executable in Mail Settings, setting "sendmail" in the "Mailer" option, and launching the "Forgot your password" feature.	2019-03-26	6.5	CVE-2019-9059 MISC CONFIRM
cmsmadesimple -- cms_made_simple	An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.	2019-03-26	6.5	CVE-2019-9061 MISC CONFIRM
coreftp -- core_ftp	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.	2019-03-22	5.0	CVE-2019-9648 CONFIRM BID FULLDISC EXPLOIT-DB
coreftp -- core_ftp	An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal technique (..\..\) to browse outside the root directory to determine the existence of a file on the operating system, and its last modified date.	2019-03-22	5.0	CVE-2019-9649 CONFIRM BID FULLDISC EXPLOIT-DB
dedecms -- dedecms	In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated.	2019-03-24	4.0	CVE-2019-10014 MISC
dlink -- dir-816_firmware	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication.	2019-03-25	5.0	CVE-2019-10039 MISC
dlink -- dir-816_firmware	The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication.	2019-03-25	5.0	CVE-2019-10041 MISC
dovecot -- dovecot	It was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client certificates. A remote attacker in possession of a valid certificate with an empty username field could possibly use this issue to impersonate other users.	2019-03-27	4.9	CVE-2019-3814 CONFIRM MISC
eclipse -- jetty	In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings.	2019-03-27	5.0	CVE-2018-12545 CONFIRM
eclipse -- mosquitto	In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.	2019-03-27	5.0	CVE-2017-7655 CONFIRM
eclipse -- mosquitto	In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.	2019-03-27	4.0	CVE-2018-12546 CONFIRM
eclipse -- mosquitto	When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, then Mosquitto will treat this as though no ACL file has been defined and use a default allow policy. The new behaviour is to have an empty ACL file mean that all access is denied, which is not a useful configuration but is not unexpected.	2019-03-27	6.8	CVE-2018-12550 CONFIRM
eclipse -- mosquitto	When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability.	2019-03-27	6.8	CVE-2018-12551 CONFIRM
elastic -- elasticsearch	A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _aliases, _shrink, or _split endpoints are used . If the elasticsearch.yml file has xpack.security.dls_fls.enabled set to false, certain permission checks are skipped when users perform one of the actions mentioned above, to make existing data available under a new index/alias name. This could result in an attacker gaining additional permissions against a restricted index.	2019-03-25	6.8	CVE-2019-7611 MISC MISC
faststone -- image_viewer	FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000000e1237 via a crafted image file.	2019-03-26	4.3	CVE-2018-15813 MISC
faststone -- image_viewer	FastStone Image Viewer 6.5 has a User Mode Write AV starting at image00400000+0x00000000001cb509 via a crafted image file.	2019-03-26	4.3	CVE-2018-15814 MISC
faststone -- image_viewer	FastStone Image Viewer 6.5 has an Exception Handler Chain Corrupted issue starting at image00400000+0x00000000003ef68a via a crafted image file.	2019-03-26	4.3	CVE-2018-15815 MISC
faststone -- image_viewer	FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file.	2019-03-26	4.3	CVE-2018-15816 MISC
faststone -- image_viewer	FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d63 via a crafted image file.	2019-03-26	4.3	CVE-2018-15817 MISC
fedoraproject -- fedora	A vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL allows requests with backslashes to pass through by assuming that it is a relative URL, while the browsers silently convert backslash characters into forward slashes treating them as an absolute URL. This mismatch allows an attacker to bypass the redirect URL validation logic in apr_uri_parse function.	2019-03-27	4.3	CVE-2019-3877 CONFIRM CONFIRM CONFIRM UBUNTU
fedoraproject -- fedora	A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse proxy and mod_auth_mellon is configured to only let through authenticated users (with the require valid-user directive), adding special HTTP headers that are normally used to start the special SAML ECP (non-browser based) can be used to bypass authentication.	2019-03-26	6.8	CVE-2019-3878 CONFIRM CONFIRM UBUNTU
fortinet -- fortiportal	A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality.	2019-03-25	4.3	CVE-2017-7340 CONFIRM
gforge -- advanced_server	GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.	2019-03-24	4.3	CVE-2019-10016 MISC
ghs -- integrity_rtos	An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the (user controlled) shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses.	2019-03-25	5.0	CVE-2019-7711 MISC MISC
ghs -- integrity_rtos	An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf() without a proper check. An attacker may thus forge a path containing format string modifiers to get a custom format string evaluated. This results in an information leak of memory addresses.	2019-03-25	5.0	CVE-2019-7712 MISC MISC
ghs -- integrity_rtos	An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf(). Setting this variable using the sysvar command results in a user-controlled format string during login, resulting in an information leak of memory addresses.	2019-03-25	5.0	CVE-2019-7715 MISC MISC
gitlab -- gitlab	GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.	2019-03-26	5.0	CVE-2018-19856 MISC MISC
gitlab -- gitlab	GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.	2019-03-28	5.0	CVE-2018-20144 MISC MISC MISC
gitlab -- gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.	2019-03-25	5.0	CVE-2019-6240 MISC MISC
gnu -- gnutls	A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.	2019-03-27	5.0	CVE-2019-3829 CONFIRM CONFIRM FEDORA FEDORA MISC
gnu -- tar	pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.	2019-03-22	5.0	CVE-2019-9923 MISC MISC MISC
harmistechnology -- je_messenger	An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.	2019-03-29	6.4	CVE-2019-9918 MISC MISC
hashicorp -- consul	HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.	2019-03-26	5.8	CVE-2019-9764 MISC
hp -- arcsight_logger	Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.	2019-03-25	4.3	CVE-2019-3480 MISC
hp -- arcsight_logger	Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.	2019-03-25	6.8	CVE-2019-3482 MISC
hp -- arcsight_logger	Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.	2019-03-25	6.8	CVE-2019-3483 MISC
hp -- isaac_mizrahi_smartwatch	A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access to customer data as a result of this issue.	2019-03-27	5.0	CVE-2017-2748 CONFIRM
hp -- remote_graphics_software	A potential vulnerability has been identified in HP Remote Graphics Software?s certificate authentication process version 7.5.0 and earlier.	2019-03-27	6.4	CVE-2018-5926 CONFIRM
hp -- support_assistant	HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code.	2019-03-27	4.1	CVE-2018-5927 CONFIRM
ibm -- api_connect	IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.	2019-03-22	5.0	CVE-2019-4052 CONFIRM BID XF
ibm -- content_navigator	IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the fake ICN website. IBM X-Force ID: 156001.	2019-03-22	6.4	CVE-2019-4035 CONFIRM BID XF
ibm -- websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM X-Force ID: 156242.	2019-03-25	5.0	CVE-2019-4046 BID XF CONFIRM
imagemagick -- imagemagick	In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.	2019-03-23	6.8	CVE-2019-9956 BID MISC
jenzabar -- internet_campus_solution	Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the Moxie Manager plugin before 2.1.4 in the ICS\ICS.NET\ICSFileServer/moxiemanager directory.	2019-03-25	6.0	CVE-2019-10012 MISC MISC
laravel -- framework	Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.	2019-03-28	6.5	CVE-2018-6330 MISC MISC
librenms -- librenms	LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.	2019-03-28	6.5	CVE-2018-20678 MISC MISC
libreoffice -- libreoffice	It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.	2019-03-25	6.8	CVE-2018-16858 CONFIRM MISC
libssh2 -- libssh2	An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.	2019-03-25	6.8	CVE-2019-3856 SUSE REDHAT CONFIRM MLIST CONFIRM MISC
libssh2 -- libssh2	An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.	2019-03-25	6.8	CVE-2019-3857 SUSE REDHAT CONFIRM MLIST CONFIRM MISC
libssh2 -- libssh2	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.	2019-03-25	6.4	CVE-2019-3860 SUSE CONFIRM MLIST CONFIRM MISC
libssh2 -- libssh2	An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.	2019-03-25	6.4	CVE-2019-3861 SUSE CONFIRM MLIST CONFIRM MISC
libssh2 -- libssh2	A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.	2019-03-25	6.8	CVE-2019-3863 SUSE REDHAT CONFIRM MLIST CONFIRM MISC
misp -- misp	In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.	2019-03-28	4.3	CVE-2019-10254 MISC MISC
moodle -- moodle	A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.	2019-03-25	4.0	CVE-2019-3808 CONFIRM CONFIRM CONFIRM
moodle -- moodle	A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.	2019-03-25	5.0	CVE-2019-3810 CONFIRM CONFIRM CONFIRM
moodle -- moodle	A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.	2019-03-27	6.5	CVE-2019-3847 CONFIRM MISC
moodle -- moodle	A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.	2019-03-26	5.8	CVE-2019-3850 CONFIRM MISC
moodle -- moodle	A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.	2019-03-26	4.0	CVE-2019-3851 CONFIRM MISC
moodle -- moodle	A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities	2019-03-26	4.0	CVE-2019-3852 CONFIRM MISC
myadrenalin -- adrenalin	A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the LeaveEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter.	2019-03-25	4.3	CVE-2018-12652 MISC
myadrenalin -- adrenalin	A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the RPT/SSRSDynamicEditReports.aspx ReportId parameter.	2019-03-25	4.3	CVE-2018-12653 MISC
nagios -- nagios_xi	Command injection in Nagios XI before 5.5.11 allows an authenticated users to execute arbitrary remote commands via a new autodiscovery job.	2019-03-28	6.5	CVE-2019-9164 CONFIRM CONFIRM
omron -- poweract_pro_master_agent	PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified vectors.	2019-03-27	4.0	CVE-2018-16207 MISC MISC MISC
opentext -- opentext_portal	Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI.	2019-03-22	4.3	CVE-2018-20165 MISC
ovirt -- ovirt	In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.	2019-03-25	4.0	CVE-2017-7510 CONFIRM
ovirt -- ovirt	It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.	2019-03-25	5.5	CVE-2019-3879 BID CONFIRM
portainer -- portainer	A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.	2019-03-27	5.0	CVE-2018-19466 MISC MISC MISC
python -- python	An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.2. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string or PATH_INFO) followed by an HTTP header or a Redis command. This is similar to CVE-2019-9740.	2019-03-23	4.3	CVE-2019-9947 MISC
python -- python	urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.	2019-03-23	6.4	CVE-2019-9948 BID MISC MISC
redhat -- ansible_tower	When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges.	2019-03-28	4.0	CVE-2019-3869 CONFIRM MISC
s-cms -- s-cms	S-CMS PHP v1.0 has a CSRF vulnerability to add a new admin user via the 4.edu.php/admin/ajax.php?type=admin&action=add&lang=0 URI, a related issue to CVE-2019-9040.	2019-03-27	6.8	CVE-2019-10237 MISC
select2 -- select2	In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data.	2019-03-27	4.3	CVE-2016-10744 MISC MISC MISC
sitemagic -- sitemagic	Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.	2019-03-27	4.3	CVE-2019-10238 MISC
sqlite -- sqlite	In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.	2019-03-22	5.0	CVE-2019-9936 BID MISC MISC MISC
sqlite -- sqlite	In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.	2019-03-22	5.0	CVE-2019-9937 BID MISC MISC MISC
symfony -- twig	A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the __toString() method on an object even if not allowed by the security policy in place.	2019-03-23	4.3	CVE-2019-9942 MISC BUGTRAQ MISC DEBIAN
tianocore -- edk_ii	Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network.	2019-03-27	6.4	CVE-2018-12178 SUSE CONFIRM
tianocore -- edk_ii	Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.	2019-03-27	4.6	CVE-2018-12183 CONFIRM
tianocore -- edk_ii	Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.	2019-03-27	4.6	CVE-2018-3613 CONFIRM
totaljs -- total.js_cms	Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).	2019-03-28	4.3	CVE-2019-10260 MISC MISC
shareit -- shareit	The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requested, the application responds with a 200 status code and empty page, and adds the requesting client device into the list of recognized devices.	2019-03-22	5.8	CVE-2019-9939 MISC
verifone -- verix_multi-app_conductor	The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.	2019-03-25	6.8	CVE-2019-10060 MISC
w1.fi -- hostapd	hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.	2019-03-23	5.0	CVE-2016-10743 MLIST MISC
weban -- an	Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.	2019-03-27	5.0	CVE-2019-5927 MISC MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x38536c.	2019-03-23	6.8	CVE-2019-9966 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlPrefixUnicodeString.	2019-03-23	6.8	CVE-2019-9967 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlQueueWorkItem.	2019-03-23	6.8	CVE-2019-9968 MISC
xnview -- xnview_classic	XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to xnview+0x385399.	2019-03-23	6.8	CVE-2019-9969 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to VCRUNTIME140!memcpy.	2019-03-23	6.8	CVE-2019-9962 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlFreeHeap.	2019-03-23	6.8	CVE-2019-9963 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlpNtMakeTemporaryKey.	2019-03-23	6.8	CVE-2019-9964 MISC
xnview -- xnview_mp	XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to ntdll!RtlReAllocateHeap.	2019-03-23	6.8	CVE-2019-9965 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.	2019-03-24	4.3	CVE-2019-10018 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes.	2019-03-24	4.3	CVE-2019-10019 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters.	2019-03-24	4.3	CVE-2019-10020 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.	2019-03-24	4.3	CVE-2019-10021 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc.	2019-03-24	4.3	CVE-2019-10022 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.	2019-03-24	4.3	CVE-2019-10023 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.	2019-03-24	4.3	CVE-2019-10024 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits.	2019-03-24	4.3	CVE-2019-10025 MISC
xpdfreader -- xpdf	An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case.	2019-03-24	4.3	CVE-2019-10026 MISC
znc -- znc	ZNC before 1.7.3-rc1 allows an existing remote user to cause a Denial of Service (crash) via invalid encoding.	2019-03-27	4.0	CVE-2019-9917 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abus -- secvest_wireless_alarm_system_fuaa50000_firmware	An issue was discovered on ABUS Secvest wireless alarm system FUAA50000 3.01.01 in conjunction with Secvest remote control FUBE50014 or FUBE50015. Because "encrypted signal transmission" is missing, an attacker is able to eavesdrop sensitive data as cleartext (for instance, the current rolling code state).	2019-03-27	3.3	CVE-2019-9862 MISC
centos-webpanel -- centos_web_panel	CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the add_package module parameter.	2019-03-26	3.5	CVE-2019-7646 MISC MISC EXPLOIT-DB
cmsmadesimple -- cms_made_simple	CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager.	2019-03-26	3.5	CVE-2019-10105 MISC
cmsmadesimple -- cms_made_simple	CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.	2019-03-26	3.5	CVE-2019-10106 MISC
cmsmadesimple -- cms_made_simple	CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.	2019-03-26	3.5	CVE-2019-10107 MISC
drupal -- drupal	In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability.	2019-03-26	3.5	CVE-2019-6341 CONFIRM
gnome -- gvfs	An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.	2019-03-25	3.3	CVE-2019-3827 CONFIRM CONFIRM
online_lottery_php_readymade_script_project -- online_lottery_php_readymade_script	PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.	2019-03-29	3.5	CVE-2019-9605 MISC
paloaltonetworks -- expedition	The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.	2019-03-26	3.5	CVE-2019-1569 BID MISC MISC
paloaltonetworks -- expedition	The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.	2019-03-26	3.5	CVE-2019-1570 BID CONFIRM MISC
paloaltonetworks -- expedition	The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.	2019-03-26	3.5	CVE-2019-1571 BID CONFIRM MISC
phpcms -- phpcms	PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.	2019-03-24	3.5	CVE-2019-10027 MISC MISC
redhat -- libvirt	A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.	2019-03-27	3.5	CVE-2019-3840 CONFIRM CONFIRM CONFIRM
tianocore -- edk_ii	Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.	2019-03-27	2.1	CVE-2019-0161 CONFIRM

Back to top

 

Severity Not Yet Assigned

Primary Vendor -- Product	Description	Published	CVSS Score	Source & Patch Info
abine_blur -- abine_blur	Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach, related to a "Multifactor Auth Bypass, Full Disk Encryption Bypass" issue affecting the Affected Chrome Plugin component.	2019-03-29	not yet calculated	CVE-2019-6481 MISC FULLDISC MISC MISC
abus -- secvest_remote_control	Due to unencrypted signal communication and predictability of rolling codes, an attacker can "desynchronize" an ABUS Secvest wireless remote control (FUBE50014 or FUBE50015) relative to its controlled Secvest wireless alarm system FUAA50000 3.01.01, so that sent commands by the remote control are not accepted anymore.	2019-03-27	not yet calculated	CVE-2019-9860 MISC
adtran -- netconf_pmaa_access_management	An issue was discovered in ADTRAN PMAA 1.6.2-1, 1.6.3, and 1.6.4. NETCONF Access Management (NACM) allows unprivileged users to create privileged users and execute arbitrary commands via the use of the diagnostic-profile over RESTCONF.	2019-03-27	not yet calculated	CVE-2018-19648 CONFIRM
apache -- activemq	In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.	2019-03-28	not yet calculated	CVE-2019-0222 CONFIRM MLIST BID MLIST MLIST MLIST MLIST MLIST MLIST MLIST
apache -- hbase_rest_server	In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server.	2019-03-28	not yet calculated	CVE-2019-0212 MLIST BID CONFIRM
apache -- jspwiki	A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.	2019-03-28	not yet calculated	CVE-2019-0225 MLIST BID CONFIRM MLIST MLIST MLIST MLIST
apache -- jspwiki	In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.	2019-03-28	not yet calculated	CVE-2019-0224 BID CONFIRM MLIST MLIST
apache -- kibana	Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.	2019-03-25	not yet calculated	CVE-2019-7608 MISC MISC
apache -- kibana	Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.	2019-03-25	not yet calculated	CVE-2019-7609 MISC MISC
apache -- kibana	Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.	2019-03-25	not yet calculated	CVE-2019-7610 MISC MISC
atlassian -- crowd	The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.	2019-03-29	not yet calculated	CVE-2017-18108 MISC
atlassian -- crowd	The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gain access to some of the built-in and potentially third party rest resources via a session fixation vulnerability.	2019-03-29	not yet calculated	CVE-2017-18105 MISC
atlassian -- crowd	The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability.	2019-03-29	not yet calculated	CVE-2017-18110 MISC
atlassian -- crowd	The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.	2019-03-29	not yet calculated	CVE-2017-18109 MISC
atlassian -- crowd	The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain access to another user's session provided they can make their identifier hash collide with another user's session identifier hash.	2019-03-29	not yet calculated	CVE-2017-18106 MISC
atlassian_application_links	The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked applications to probe internal network resources by requesting internal locations, read the contents of files and also cause an out of memory exception affecting availability via an XML External Entity vulnerability.	2019-03-29	not yet calculated	CVE-2017-18111 MISC
axtls -- axtls	tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.	2019-03-25	not yet calculated	CVE-2019-8981 MISC MISC MISC
bash -- bash	rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.	2019-03-22	not yet calculated	CVE-2019-9924 MISC MISC MLIST
baxter -- sigma_spectrum_infusion_system	Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.	2019-03-26	not yet calculated	CVE-2014-5434 MISC
baxter -- sigma_spectrum_infusion_system	An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16, which may allow an attacker to gain access the host network. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.	2019-03-26	not yet calculated	CVE-2014-5433 MISC
baxter -- sigma_spectrum_infusion_system	Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access account credentials and shared keys. Baxter asserts that this vulnerability only allows access to features and functionality on the WBM and that the SIGMA Spectrum infusion pump cannot be controlled from the WBM. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.	2019-03-26	not yet calculated	CVE-2014-5432 MISC
baxter -- sigma_spectrum_infusion_system	Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password may allow an attacker with physical access to the device to access management functions to make unauthorized configuration changes to biomedical settings such as turn on and off wireless connections and the phase-complete audible alarm that indicates the end of an infusion phase. Baxter has released a new version of the SIGMA Spectrum Infusion System, version 8, which incorporates hardware and software changes.	2019-03-26	not yet calculated	CVE-2014-5431 MISC
burrows-wheeler_aligner -- burrows-wheeler_aligner	BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.	2019-03-29	not yet calculated	CVE-2019-10269 MISC
cisco -- aggregation_services_router_900_route_switch_processor_3	A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router (ASR) 900 Route Switch Processor 3 (RSP3) could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability exists because the software insufficiently validates ingress traffic on the ASIC used on the RSP3 platform. An attacker could exploit this vulnerability by sending a malformed OSPF version 2 (OSPFv2) message to an affected device. A successful exploit could allow the attacker to cause a reload of the iosd process, triggering a reload of the affected device and resulting in a DoS condition.	2019-03-27	not yet calculated	CVE-2019-1749 BID CISCO
cisco -- catalyst_4500_series_switches	A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An attacker could exploit this vulnerability by sending a specially crafted CDP packet. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.	2019-03-27	not yet calculated	CVE-2019-1750 BID CISCO
cisco -- catalyst_6500_series_switches	A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthenticated, adjacent attacker to access the network prior to authentication. The vulnerability is due to how the 802.1x packets are handled in the process path. An attacker could exploit this vulnerability by attempting to connect to the network on an 802.1x configured port. A successful exploit could allow the attacker to intermittently obtain access to the network.	2019-03-27	not yet calculated	CVE-2019-1758 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.	2019-03-27	not yet calculated	CVE-2019-1757 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Cluster Management Protocol (CMP) processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation when processing CMP management packets. An attacker could exploit this vulnerability by sending malicious CMP management packets to an affected device. A successful exploit could cause the switch to crash, resulting in a DoS condition. The switch will reload automatically.	2019-03-27	not yet calculated	CVE-2019-1746 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.	2019-03-27	not yet calculated	CVE-2019-1739 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to a parsing issue on DNS packets. An attacker could exploit these vulnerabilities by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.	2019-03-27	not yet calculated	CVE-2019-1738 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected commands. An exploit could allow the attacker to gain root privileges on the affected device.	2019-03-27	not yet calculated	CVE-2019-1745 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the ISDN functions of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of specific values in the Q.931 information elements. An attacker could exploit this vulnerability by calling the affected device with specific Q.931 information elements being present. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.	2019-03-27	not yet calculated	CVE-2019-1752 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the implementation of the Short Message Service (SMS) handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of SMS protocol data units (PDUs) that are encoded with a special character set. An attacker could exploit this vulnerability by sending a malicious SMS message to an affected device. A successful exploit could allow the attacker to cause the wireless WAN (WWAN) cellular interface module on an affected device to crash, resulting in a DoS condition that would require manual intervention to restore normal operating conditions.	2019-03-27	not yet calculated	CVE-2019-1747 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Cisco Network Plug-and-Play (PnP) agent of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability exists because the affected software insufficiently validates certificates. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt and modify confidential information on user connections to the affected software.	2019-03-27	not yet calculated	CVE-2019-1748 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the processing of IP Service Level Agreement (SLA) packets by Cisco IOS Software and Cisco IOS XE software could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual denial of service (DoS) condition on the affected device. The vulnerability is due to improper socket resources handling in the IP SLA responder application code. An attacker could exploit this vulnerability by sending crafted IP SLA packets to an affected device. An exploit could allow the attacker to cause an interface to become wedged, resulting in an eventual denial of service (DoS) condition on the affected device.	2019-03-27	not yet calculated	CVE-2019-1737 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Secure Storage feature of Cisco IOS and IOS XE Software could allow an authenticated, local attacker to access sensitive system information on an affected device. The vulnerability is due to improper memory operations performed at encryption time, when affected software handles configuration updates. An attacker could exploit this vulnerability by retrieving the contents of specific memory locations of an affected device. A successful exploit could result in the disclosure of keying materials that are part of the device configuration, which can be used to recover critical system information.	2019-03-27	not yet calculated	CVE-2019-1762 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker could exploit this vulnerability by receiving HSRPv2 traffic from an adjacent HSRP member. A successful exploit could allow the attacker to receive potentially sensitive information from the adjacent device.	2019-03-27	not yet calculated	CVE-2019-1761 BID CISCO
cisco -- ios_and_ios_xe_software	A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability are due to a parsing issue on DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through routers that are running an affected version and have NBAR enabled. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.	2019-03-27	not yet calculated	CVE-2019-1740 BID CISCO
cisco -- ios_software	A vulnerability in the Network Address Translation 64 (NAT64) functions of Cisco IOS Software could allow an unauthenticated, remote attacker to cause either an interface queue wedge or a device reload. The vulnerability is due to the incorrect handling of certain IPv4 packet streams that are sent through the device. An attacker could exploit this vulnerability by sending specific IPv4 packet streams through the device. An exploit could allow the attacker to either cause an interface queue wedge or a device reload, resulting in a denial of service (DoS) condition.	2019-03-27	not yet calculated	CVE-2019-1751 BID CISCO
cisco -- ios_xe_software	A vulnerability in the Cisco Encrypted Traffic Analytics (ETA) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a logic error that exists when handling a malformed incoming packet, leading to access to an internal data structure after it has been freed. An attacker could exploit this vulnerability by sending crafted, malformed IP packets to an affected device. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition.	2019-03-27	not yet calculated	CVE-2019-1741 BID CISCO
cisco -- ios_xe_software	A vulnerability in the authorization subsystem of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to improper validation of user privileges of web UI users. An attacker could exploit this vulnerability by submitting a malicious payload to a specific endpoint in the web UI. A successful exploit could allow the lower-privileged attacker to execute arbitrary commands with higher privileges on the affected device.	2019-03-27	not yet calculated	CVE-2019-1754 BID CISCO
cisco -- ios_xe_software	A vulnerability in Performance Routing Version 3 (PfRv3) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by sending specially crafted smart probe packets at the affected device. A successful exploit could allow the attacker to reload the device, resulting in a denial of service (DoS) attack on an affected system.	2019-03-27	not yet calculated	CVE-2019-1760 BID CISCO
cisco -- ios_xe_software	A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic error that was introduced in the Cisco IOS XE Software 16.1.1 Release, which prevents the ACL from working when applied against the management interface. An attacker could exploit this issue by attempting to access the device via the management interface.	2019-03-27	not yet calculated	CVE-2019-1759 CISCO
cisco -- ios_xe_software	A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious request to an affected device. A successful exploit could allow the attacker to gain access to sensitive configuration information.	2019-03-27	not yet calculated	CVE-2019-1742 BID CISCO
cisco -- ios_xe_software	A vulnerability in the Web Services Management Agent (WSMA) function of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary Cisco IOS commands as a privilege level 15 user. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker could exploit this vulnerability by submitting crafted HTTP requests to the targeted application. A successful exploit could allow the attacker to execute arbitrary commands on the affected device.	2019-03-27	not yet calculated	CVE-2019-1755 BID CISCO
cisco -- ios_xe_software	A vulnerability in Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attacker who has valid administrator access to an affected device could exploit this vulnerability by supplying a username with a malicious payload in the web UI and subsequently making a request to a specific endpoint in the web UI. A successful exploit could allow the attacker to run arbitrary commands as the root user, allowing complete compromise of the system.	2019-03-27	not yet calculated	CVE-2019-1756 BID CISCO
cisco -- ios_xe_software	A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the device. An exploit could allow the attacker to gain elevated privileges on the affected device.	2019-03-27	not yet calculated	CVE-2019-1743 BID CISCO
cisco -- ios_xe_software	A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated but unprivileged (level 1), remote attacker to run privileged Cisco IOS commands by using the web UI. The vulnerability is due to a failure to validate and sanitize input in Web Services Management Agent (WSMA) functions. An attacker could exploit this vulnerability by submitting a malicious payload to the affected device's web UI. A successful exploit could allow the lower-privileged attacker to execute arbitrary commands with higher privileges on the affected device.	2019-03-27	not yet calculated	CVE-2019-1753 BID CISCO
civetweb -- civetweb	A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service.	2019-03-27	not yet calculated	CVE-2019-3821 CONFIRM MISC
cockpit-project -- cockpit	It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated attacker could send a specially crafted request with an invalid base64-encoded cookie which could cause the web service to crash.	2019-03-26	not yet calculated	CVE-2019-3804 CONFIRM CONFIRM CONFIRM
commonmark -- commonmark	Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583.	2019-03-24	not yet calculated	CVE-2019-10010 MISC MISC
d-link -- routers	D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).	2019-03-25	not yet calculated	CVE-2019-7642 MISC
dell -- networking_os10	Dell Networking OS10 has been updated to address a vulnerability which may be potentially exploited to compromise the system.	2019-03-28	not yet calculated	CVE-2019-3710 MISC
digium -- asterisk	An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.	2019-03-28	not yet calculated	CVE-2019-7251 CONFIRM CONFIRM
elastic -- logstach	A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.	2019-03-25	not yet calculated	CVE-2019-7612 MISC MISC
elastic -- winlogbeat	Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.	2019-03-25	not yet calculated	CVE-2019-7613 MISC MISC
electric_coin_company -- zcash	Zcash, before the Sapling network upgrade (2018-10-28), had a counterfeiting vulnerability. A key-generation process, during evaluation of polynomials related to a to-be-proven statement, produced certain bypass elements. Availability of these elements allowed a cheating prover to bypass a consistency check, and consequently transform the proof of one statement into an ostensibly valid proof of a different statement, thereby breaking the soundness of the proof system. This misled the original Sprout zk-SNARK verifier into accepting the correctness of a transaction.	2019-03-26	not yet calculated	CVE-2019-7167 MISC MISC
enttec -- datagate_mk2_and_storm_24_and_pixelator	ENTTEC Datagate MK2, Storm 24, Pixelator all firmware versions prior to (70044,70050,70060)_update_05032019-482 allows an unauthenticated user to initiate a remote reboot, which may be used to cause a denial of service condition.	2019-03-28	not yet calculated	CVE-2019-6542 MISC
extensible_firmware_interface -- development_kit	Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.	2019-03-27	not yet calculated	CVE-2018-12182 CONFIRM
extensible_firmware_interface -- development_kit	Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.	2019-03-27	not yet calculated	CVE-2018-12181 CONFIRM
extensible_firmware_interface -- development_kit	Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.	2019-03-27	not yet calculated	CVE-2018-12180 SUSE CONFIRM
extensible_firmware_interface -- development_kit	Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.	2019-03-27	not yet calculated	CVE-2018-12179 CONFIRM
f5 -- multiple_big-ip_products	In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request.	2019-03-28	not yet calculated	CVE-2019-6602 BID MISC
f5 -- multiple_big-ip_products	On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL profile may cause a denial of service.	2019-03-28	not yet calculated	CVE-2019-6605 BID MISC
f5 -- multiple_big-ip_products	On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory.	2019-03-28	not yet calculated	CVE-2019-6606 BID MISC
f5 -- multiple_big-ip_products	On BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, there is a stored cross-site scripting vulnerability in an ASM violation viewed in the Configuration utility. In the worst case, an attacker can store a CSRF which results in code execution as the admin user.	2019-03-28	not yet calculated	CVE-2019-6607 BID MISC
f5 -- multiple_products	On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when processing authorized SNMP requests.	2019-03-28	not yet calculated	CVE-2019-6608 MISC
f5 -- multiple_products	In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.	2019-03-28	not yet calculated	CVE-2019-6603 BID MISC
f5 -- multiple_products	On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using non-default Layer 2 forwarding configurations may experience a lockup of the High-Speed Bridge.	2019-03-28	not yet calculated	CVE-2019-6604 MISC
flatcore -- flatcore-cms	An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature.	2019-03-30	not yet calculated	CVE-2019-10652 MISC
forcepoint -- email_security	A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.	2019-03-28	not yet calculated	CVE-2018-16529 MISC CONFIRM
gnuboard5 -- gnuboard5	Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.	2019-03-25	not yet calculated	CVE-2018-15583 CONFIRM CONFIRM
gnuboard5 -- gnuboard5	Cross-Site Scripting (XSS) vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.	2019-03-27	not yet calculated	CVE-2018-15585 MISC MISC MISC
grandstream -- gwn7000_and_gwn7610_devices	Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request.	2019-03-30	not yet calculated	CVE-2019-10657 MISC
grandstream -- gwn7000_devices	Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.	2019-03-30	not yet calculated	CVE-2019-10656 MISC
grandstream -- gwn7610_devices	Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/controller.icc.update_nds_webroot_from_tmp update_nds_webroot_from_tmp API call.	2019-03-30	not yet calculated	CVE-2019-10658 MISC
grandstream -- gxv3370_and_wp80_devices	Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /manager?action=getlogcat priority field.	2019-03-30	not yet calculated	CVE-2019-10659 MISC
grandstream -- gxv3611ir_hd_devices	Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field.	2019-03-30	not yet calculated	CVE-2019-10660 MISC
grandstream -- gxv3611ir_hd_devices	On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password.	2019-03-30	not yet calculated	CVE-2019-10661 MISC
grandstream -- multiple_devices	Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.	2019-03-30	not yet calculated	CVE-2019-10655 MISC MISC
grandstream -- ucm6204_devices	Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI.	2019-03-30	not yet calculated	CVE-2019-10662 MISC
grandstream -- ucm6204_devices	Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI.	2019-03-30	not yet calculated	CVE-2019-10663 MISC
honeywell -- experion_pks	Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.	2019-03-25	not yet calculated	CVE-2014-9187 MISC
honeywell -- experion_pks	Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.	2019-03-25	not yet calculated	CVE-2014-9189 MISC
hospira -- lifecare_pca_infusion_system	Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access.	2019-03-25	not yet calculated	CVE-2015-1012 MISC
hospira -- plum_and_symbiq_infusion_systems	Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.	2019-03-25	not yet calculated	CVE-2015-3952 MISC
hospira -- plum_and_symbiq_infusion_systems	Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.	2019-03-25	not yet calculated	CVE-2015-3953 MISC
hospira -- plum_and_symbiq_infusion_systems	Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.	2019-03-25	not yet calculated	CVE-2015-3954 MISC
hospira -- plum_and_symbiq_infusion_systems	Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.	2019-03-25	not yet calculated	CVE-2015-3956 MISC
hp_development_company -- multiple_printers	In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.	2019-03-27	not yet calculated	CVE-2018-5923 CONFIRM
hp_development_company -- tommy_hilfiger_th24/7_android_app	A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue.	2019-03-27	not yet calculated	CVE-2017-2752 CONFIRM
hybbs -- hybbs	An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.	2019-03-29	not yet calculated	CVE-2019-10644 MISC
imagemagick -- imagemagick	In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.	2019-03-30	not yet calculated	CVE-2019-10650 BID MISC
imagemagick -- imagemagick	In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file.	2019-03-30	not yet calculated	CVE-2019-10649 BID MISC
jboss -- management_console	A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.	2019-03-27	not yet calculated	CVE-2018-10934 CONFIRM
jenkins -- jenkins	A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.	2019-03-28	not yet calculated	CVE-2019-1003048 MLIST BID MISC
jenkins -- jenkins	A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.	2019-03-28	not yet calculated	CVE-2019-1003047 MLIST BID MISC
jenkins -- jenkins	A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server.	2019-03-28	not yet calculated	CVE-2019-1003046 MLIST BID MISC
jenkins -- jenkins	A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin's configuration.	2019-03-28	not yet calculated	CVE-2019-1003045 MLIST BID MISC
jenkins -- jenkins	A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.	2019-03-28	not yet calculated	CVE-2019-1003044 MLIST BID MISC
jenkins -- jenkins	A missing permission check in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.	2019-03-28	not yet calculated	CVE-2019-1003043 MLIST BID MISC
jenkins -- jenkins	A cross site scripting vulnerability in Jenkins Lockable Resources Plugin 2.4 and earlier allows attackers able to control resource names to inject arbitrary JavaScript in web pages rendered by the plugin.	2019-03-28	not yet calculated	CVE-2019-1003042 MLIST BID MISC
jenkins -- jenkins	A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Plugin 2.64 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.	2019-03-28	not yet calculated	CVE-2019-1003041 MLIST BID MISC
jenkins -- jenkins	A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts.	2019-03-28	not yet calculated	CVE-2019-1003040 MLIST BID MISC
jenzabar -- internet_campus_solution	ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.	2019-03-25	not yet calculated	CVE-2019-10011 MISC
joomla! -- joomla!	An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user.	2019-03-29	not yet calculated	CVE-2019-9921 MISC MISC
joomla! -- joomla!	An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.	2019-03-29	not yet calculated	CVE-2019-9922 MISC MISC
joomla! -- joomla!	An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.	2019-03-29	not yet calculated	CVE-2019-9920 MISC MISC
joomla! -- joomla!	An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.	2019-03-29	not yet calculated	CVE-2019-9919 MISC MISC
kentico -- kentico	An issue was discovered in Kentico before 12.0.15. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted.	2019-03-26	not yet calculated	CVE-2019-10068 MISC
kinagacms -- kinagacms	Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.	2019-03-27	not yet calculated	CVE-2019-5926 MISC MISC MISC
kubevirt -- virt-cdi-importer	Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible undetected tampering of trusted container image content.	2019-03-25	not yet calculated	CVE-2019-3841 CONFIRM MISC
lcds -- laquis_scada	Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may allow an attacker to execute remote code in the context of the current process.	2019-03-27	not yet calculated	CVE-2019-6536 MISC
lcds -- laquis_scada	LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration.	2019-03-27	not yet calculated	CVE-2018-18994 MISC
linux -- linux_kernel	The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.	2019-03-25	not yet calculated	CVE-2019-3874 CONFIRM
lrzip -- lrzip	The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive, a different vulnerability than CVE-2017-8845.	2019-03-30	not yet calculated	CVE-2019-10654 MISC
marel -- food_processing_systems	Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an update for Pluto-based applications. This update will restrict remote access by implementing SSH authentication.	2019-03-27	not yet calculated	CVE-2017-9626 MISC
mcafee -- network_security_manager	Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.	2019-03-26	not yet calculated	CVE-2019-3597 BID CONFIRM
mcafee -- network_security_manager	Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.	2019-03-26	not yet calculated	CVE-2019-3606 BID CONFIRM
medtronic -- multiple_devices	The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product?s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.	2019-03-25	not yet calculated	CVE-2019-6538 BID CONFIRM
medtronic -- multiple_devices	The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement encryption. An attacker with adjacent short-range access to a target product can listen to communications, including the transmission of sensitive data.	2019-03-26	not yet calculated	CVE-2019-6540 BID MISC
micro_focus -- solutions_business_manager	Reflected cross site script issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.	2019-03-27	not yet calculated	CVE-2018-19644 CONFIRM
micro_focus -- solutions_business_manager	Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.	2019-03-27	not yet calculated	CVE-2018-19641 CONFIRM
micro_focus -- solutions_business_manager	Information leakage issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.	2019-03-27	not yet calculated	CVE-2018-19643 CONFIRM
micro_focus -- solutions_business_manager	Denial of service issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.	2019-03-27	not yet calculated	CVE-2018-19642 CONFIRM
moodle -- moodle	A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.	2019-03-26	not yet calculated	CVE-2019-3849 CONFIRM MISC
moodle -- moodle	A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events. (Note: It was read-only access, users could not edit the events.)	2019-03-26	not yet calculated	CVE-2019-3848 CONFIRM MISC
mybb -- mybb	A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.	2019-03-29	not yet calculated	CVE-2018-19201 MISC
node-opencv -- node-opencv	utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.	2019-03-25	not yet calculated	CVE-2019-10061 MISC MISC MISC
node.js -- node.js	Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service (DoS) attack vector. Node.js 6.17.0 introduces server.keepAliveTimeout and the 5-second default.	2019-03-28	not yet calculated	CVE-2019-5739 SUSE MISC
node.js -- node.js	An attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly thereby keeping the connection and associated resources alive for a long period of time. Attack potential is mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active release lines including 6, 8, 10 and 11.	2019-03-28	not yet calculated	CVE-2019-5737 SUSE MISC
nvidia -- geforce_experience	NVIDIA GeForce Experience before 3.18 contains a vulnerability when ShadowPlay or GameStream is enabled. When an attacker has access to the system and creates a hard link, the software does not check for hard link attacks. This behavior may lead to code execution, denial of service, or escalation of privileges.	2019-03-28	not yet calculated	CVE-2019-5674 BID CONFIRM
opensynergy -- blue_sdk	The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, in conjunction with crafted SDP communication over maliciously configured L2CAP channels. The attacker must have connectivity over the Bluetooth physical layer, and must be able to send raw L2CAP frames. This is related to L2Cap_HandleConfigReq in core/stack/l2cap/l2cap_sm.c and SdpServHandleServiceSearchAttribReq in core/stack/sdp/sdpserv.c.	2019-03-29	not yet calculated	CVE-2018-20378 MISC CONFIRM
opto_22 -- multiple_products	A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions prior to R9.4g, PAC Display Professional versions prior to R9.4g, OptoOPCServer version R9.4c and prior that were installed by PAC Project installer, versions prior to R9.4008, and OptoDataLink version R9.4d and prior that were installed by PAC Project installer, versions prior to R9.4008. Opto 22 suggests upgrading to the new product version as soon as possible.	2019-03-25	not yet calculated	CVE-2015-1007 MISC
phoenix_contact -- multiple_products	An issue was discovered on PHOENIX CONTACT RAD-80211-XD and RAD-80211-XD/HP-BUS devices. Command injection can occur in the WebHMI component.	2019-03-26	not yet calculated	CVE-2019-9743 BID MISC
phoenix_contact -- multiple_products	An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session identifier.	2019-03-26	not yet calculated	CVE-2019-9744 MISC
phpfk -- phpfk	phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.	2019-03-27	not yet calculated	CVE-2017-18364 MISC
phpscriptsmall.com -- online_lottery_php_readymade_script	PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.	2019-03-29	not yet calculated	CVE-2019-9604 MISC
project_jupyter -- jupyter_notebook_and_jupyterhub	An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.	2019-03-28	not yet calculated	CVE-2019-10255 MISC MISC MISC MISC MISC
prometheus -- prometheus	A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.	2019-03-26	not yet calculated	CVE-2019-3826 CONFIRM CONFIRM CONFIRM
provisio -- sitekiosk	An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905.	2019-03-29	not yet calculated	CVE-2018-18766 CONFIRM
red_hat -- ansible_tower	It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.	2019-03-25	not yet calculated	CVE-2019-3838 REDHAT MISC CONFIRM FEDORA FEDORA
red_hat -- ansible_tower	It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.	2019-03-25	not yet calculated	CVE-2019-3835 REDHAT MISC CONFIRM FEDORA FEDORA
red_hat -- openstack_platform_director	In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private keys can appear in these log files allowing for information exposure.	2019-03-26	not yet calculated	CVE-2018-16856 CONFIRM
robocode -- robocode	Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.	2019-03-30	not yet calculated	CVE-2019-10648 MISC MISC
rockwell_automation -- ethernet/ip_web_server_modules	Rockwell Automation EtherNet/IP Web Server Modules 1756-EWEB (includes 1756-EWEBK) Version 5.001 and earlier, and CompactLogix 1768-EWEB Version 2.005 and earlier. A remote attacker could send a crafted UDP packet to the SNMP service causing a denial-of-service condition to occur until the affected product is restarted.	2019-03-27	not yet calculated	CVE-2018-19016 MISC
rockwell_automation -- factorytalk_services_platform_and_rslinx_enterprise_products	Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?Total Record Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size? that will cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599	2019-03-26	not yet calculated	CVE-2013-2807 MISC
rockwell_automation -- factorytalk_services_platform_and_rslinx_enterprise_products	Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it calculates an incorrect value for the ?End of Current Record? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to a specifically oversized value, the service will calculate an undersized value for the ?Total Record Size.? Then the service will calculate an incorrect value for the ?End of Current Record? field causing access violations that lead to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to these vulnerabilities can be found at the following Rockwell Automation security advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599	2019-03-26	not yet calculated	CVE-2013-2806 MISC
rockwell_automation -- factorytalk_services_platform_and_rslinx_enterprise_products	Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logic error if it receives a datagram with an incorrect value in the ?Record Data Size? field. By sending a datagram to the service over Port 4444/UDP with the ?Record Data Size? field modified to an oversized value, an attacker could cause an out-of-bounds read access violation that leads to a service crash. The service can be recovered with a manual reboot. The patches and details pertaining to this vulnerability can be found at the following Rockwell Automation Security Advisory link (login is required): https://rockwellautomation.custhelp.com/app/answers/detail/a_id/537599	2019-03-26	not yet calculated	CVE-2013-2805 MISC
rockwell_automation -- plc-5_and_slc_5/0x_controllers	The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product?s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services.	2019-03-26	not yet calculated	CVE-2010-5305 MISC
rpm-software-management -- libcomps	A use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code.	2019-03-27	not yet calculated	CVE-2019-3817 CONFIRM CONFIRM CONFIRM
rubyonrails -- rails	A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.	2019-03-27	not yet calculated	CVE-2019-5420 CONFIRM CONFIRM
rubyonrails -- rails	There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.	2019-03-27	not yet calculated	CVE-2019-5419 MLIST CONFIRM MLIST CONFIRM
rubyonrails -- rails	There is a File Content Disclosure vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.	2019-03-27	not yet calculated	CVE-2019-5418 MISC MLIST CONFIRM MLIST CONFIRM EXPLOIT-DB
schneider_electric -- opc_factory_server	A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file, the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.	2019-03-25	not yet calculated	CVE-2015-1014 MISC
shareit -- shareit	The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated) to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The attacker must be authenticated as a "recognized device."	2019-03-22	not yet calculated	CVE-2019-9938 MISC
siemens -- scalance	A vulnerability has been identified in Scalance X-200 (All versions), Scalance X-300 (All versions), Scalance XP/XC/XF-200 (All versions <V4.1). The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker might use this behaviour to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behaviour. The security vulnerability could be exploited by an attacker with network access to the traffic-receiving network. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the confidentiality and availablity of the traffic-generating network. At the time of advisory publication no public exploitation of this security vulnerability was known.	2019-03-26	not yet calculated	CVE-2019-6569 BID MISC
signal -- private_messenger_and_desktop	Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.	2019-03-23	not yet calculated	CVE-2019-9970 BID MISC
snipe-it -- snipe-it	Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.	2019-03-27	not yet calculated	CVE-2019-10118 MISC
symantec_norton -- core	Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.	2019-03-29	not yet calculated	CVE-2019-9695 BID CONFIRM
system_security_services_daemon -- system_security_services_daemon	A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.	2019-03-25	not yet calculated	CVE-2018-16838 CONFIRM
teclib_group -- glpi	Teclib GLPI before 9.4.1.1 is affected by a timing attack associated with a cookie.	2019-03-27	not yet calculated	CVE-2019-10233 MISC MISC
teclib_group -- glpi	Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication. This occurs in Auth::checkPassword() (inc/auth.class.php).	2019-03-27	not yet calculated	CVE-2019-10231 MISC MISC
teclib_group -- glpi	The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.	2019-03-29	not yet calculated	CVE-2019-10477 MISC MISC MISC MISC MISC
telegram -- telegram	Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.	2019-03-25	not yet calculated	CVE-2019-10044 BID MISC
telemetry -- ceilometer	A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.	2019-03-26	not yet calculated	CVE-2019-3830 CONFIRM
teltonika -- rtu9xx_devices	An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX (e.g., RUT950) R_31.04.89 before R_00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login attempts with an automated tool. This ability could lead to cracking a targeted user's password.	2019-03-28	not yet calculated	CVE-2018-19879 MISC MISC
tenable -- nagios_xi	SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.	2019-03-28	not yet calculated	CVE-2019-9204 CONFIRM
tenable -- nagios_xi	Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.	2019-03-28	not yet calculated	CVE-2019-9203 CONFIRM
tenable -- nagios_xi	Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.	2019-03-28	not yet calculated	CVE-2019-9202 CONFIRM
tenable -- nagios_xi	Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and import_xiconfig.php.	2019-03-28	not yet calculated	CVE-2019-9166 CONFIRM CONFIRM
tenable -- nagios_xi	Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.	2019-03-28	not yet calculated	CVE-2019-9167 CONFIRM CONFIRM
tenable -- nagios_xi	SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.	2019-03-28	not yet calculated	CVE-2019-9165 CONFIRM CONFIRM
tesla -- model_3_vehicles	The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger firmware code execution, and display a crafted message to vehicle occupants.	2019-03-24	not yet calculated	CVE-2019-9977 BID MISC MISC
tibco_software -- tibco_data_science_for_aws_and_tibco_spotfire_data_science	The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a vulnerability that theoretically enables a user to spoof their account to look like a different user in the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.	2019-03-26	not yet calculated	CVE-2019-8989 BID MISC MISC
tibco_software -- tibco_data_science_for_aws_and_tibco_spotfire_data_science	The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data modifications and deletions that should be denied. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.	2019-03-26	not yet calculated	CVE-2019-8988 BID MISC MISC
tibco_software -- tibco_data_science_for_aws_and_tibco_spotfire_data_science	The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site scripting vulnerability that theoretically allows an authenticated user to gain access to all the capabilities of the web interface available to more privileged users. Affected releases are TIBCO Software Inc.'s TIBCO Data Science for AWS: versions up to and including 6.4.0, and TIBCO Spotfire Data Science: versions up to and including 6.4.0.	2019-03-26	not yet calculated	CVE-2019-8987 BID MISC MISC
tp-link -- tl-wr840n_devices	TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command.	2019-03-29	not yet calculated	CVE-2018-15840 MISC
ucweb -- uc_browser	UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks.	2019-03-28	not yet calculated	CVE-2019-10250 MISC
ucweb -- uc_browser	The UCWeb UC Browser application through 2019-03-26 for Android uses HTTP to download certain modules associated with PDF and Microsoft Office files (related to libpicsel), which allows MITM attacks.	2019-03-28	not yet calculated	CVE-2019-10251 MISC MISC
wecon_technology -- pi_studio	WECON Technology PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior lacks proper validation of user-supplied data, which may result in a read past the end of an allocated object.	2019-03-27	not yet calculated	CVE-2018-14814 MISC
western_bridge_cobub_razor -- western_bridge_cobub_razor	Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type.	2019-03-29	not yet calculated	CVE-2019-10276 MISC MISC
wikindx -- wikindx	A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.	2019-03-26	not yet calculated	CVE-2019-9961 MISC CONFIRM
wolf -- cms	Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded.	2019-03-29	not yet calculated	CVE-2019-10646 MISC
wordpress -- wordpress	A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF file on disk which will never be deleted by the plug-in.	2019-03-27	not yet calculated	CVE-2019-1000031 MISC BUGTRAQ
wordpress -- wordpress	An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can be downloaded. The file will be deleted after download if the web server has permission to do so. For PHP versions before 5.3, any file can be read by null terminating the string left of the file extension.	2019-03-27	not yet calculated	CVE-2019-1010257 MISC BUGTRAQ MISC
wordpress -- wordpress	The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.	2019-03-24	not yet calculated	CVE-2019-9978 MISC MISC MISC MISC MISC MISC MISC
zoho -- manageengine_servicedesk_plus	ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.	2019-03-25	not yet calculated	CVE-2017-9376 BID MISC
zoho -- manageengine_servicedesk_plus	ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.	2019-03-25	not yet calculated	CVE-2017-9362 MISC
zzzcms -- zzzphp	ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[] parameter because of a lack of inc/zzz_file.php restrictions. For example, source%5B%5D=http%3A%2F%2F192.168.0.1%2Ftest.php can be used if the 192.168.0.1 web server sends the contents of a .php file (i.e., it does not interpret a .php file).	2019-03-30	not yet calculated	CVE-2019-10647 MISC

Back to top

---

This product is provided subject to this Notification and this Privacy & Use policy.

Supply Chain Integrity Month

April 1, 2019, 9:21 am

≫ Next: MS-ISAC Releases Security Primer on LockerGoga Ransomware

≪ Previous: SB19-091: Vulnerability Summary for the Week of March 25, 2019

$

0

0

Original release date: April 01, 2019

April is Supply Chain Integrity Month. The Cybersecurity and Infrastructure Security Agency (CISA), the Office of the Director of National Intelligence (ODNI), and the Department of Defense (DOD) are partnering to promote the importance of supply chain security and risk management. Breaches in the supply chain provide an opportunity for malicious software or hardware to be installed on equipment. Lack of awareness or validation of the legitimacy of hardware and software presents a serious risk to users’ information and the overall integrity of a network environment.

CISA recommends users and administrators review ODNI’s guidance on Supply Chain Risk Management for more information.

---

This product is provided subject to this Notification and this Privacy & Use policy.

MS-ISAC Releases Security Primer on LockerGoga Ransomware

April 1, 2019, 10:45 am

≫ Next: Apache Releases Security Update for Apache HTTP Server

≪ Previous: Supply Chain Integrity Month

$

0

0

Original release date: April 01, 2019

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released a Security Primer on LockerGoga Ransomware—a type of malicious software, or malware, designed to deny access to a computer system or data until a ransom is paid.

Ransomware can be devastating to an individual or an organization. The Cybersecurity and Infrastructure Security Agency (CISA) discourages individuals and organizations from paying the ransom, as this does not guarantee access will be restored.

CISA encourages users and administrators to review MS-ISAC’s White Paper: Security Primer – LockerGoga and associated indicators of compromise (IOCs), CISA’s Ransomware page, and the U.S. Government’s Interagency Joint Guidance for further information and to implement the following best practices:

• Create system back-ups.
• Be wary of opening emails and attachments from unknown or unverified senders.
• Ensure that systems are updated with the latest patches.

---

This product is provided subject to this Notification and this Privacy & Use policy.