4 March 2019

11 results · Feed

• Unscored —
  CVE-2018-5482

  NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can…

  NETAPP SnapCenter Server
  Mar 4, 2019
• Unscored —
  CVE-2017-15515

  NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privilege…

  NETAPP SnapCenter Server
  Mar 4, 2019
• Unscored —
  CVE-2019-6206

  An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. …

  Apple iOS iOS
  Mar 4, 2019
• Unscored —
  CVE-2019-6235

  A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14…

  Apple macOS watchOS tvOS Windows macOS iOS
  Mar 4, 2019
• Unscored —
  CVE-2019-9567

  The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of …

  Mar 4, 2019
• Unscored —
  CVE-2019-9568

  The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/a…

  Mar 4, 2019
• Unscored —
  CVE-2019-9566

  FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.

  Mar 4, 2019
• Unscored —
  CVE-2019-9565

  Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal …

  Mar 4, 2019
• Unscored —
  CVE-2019-9563

  In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.

  Mar 4, 2019
• Unscored —
  CVE-2019-9551

  An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.

  Mar 4, 2019
• Unscored —
  CVE-2019-9552

  Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or…

  Mar 4, 2019