Archive

6 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /6 April 2019 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.8

CVE-2019-1593

Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. The attacker must authenticate with valid user crede…

Cisco Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 9000 Series Switches in Standalone NX-OS Mode Network devices

Mar 6, 2019
High 7.4

CVE-2019-1595

Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an inco…

Cisco Cisco NX-OS Software Network devices

Mar 6, 2019
High 7.8

CVE-2019-1591

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability

A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escape a restricted shell on an affected device. The vulnerability is due to insufficient sanitization…

Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode Network devices

Mar 6, 2019
High 7.4

CVE-2019-1594

Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete input validation of Extensible A…

Cisco Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 9000 Series Switches in Standalone NX-OS Mode Network devices Virtualization

Mar 6, 2019
High 7.5

CVE-2019-0200

Improper Input Validation in Apache Qpid Broker-J

A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticated attacker to crash the broker instance by sending specially crafted commands using AMQP protocol versions below 1.0 (…

Apache Software Foundation Apache Qpid Broker-J org.apache.qpid:apache-qpid-broker-j Maven

Mar 6, 2019
High 8.1

CVE-2019-0649

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019