Skip to content
OpenAdvisories

Archive

7 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /7 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2018-17418 Public exploit

    Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrate…

  • Unscored —
    CVE-2019-6710 Public exploit

    Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.

  • Critical 9.8
    CVE-2019-0192 Public exploit Scanner template EPSS 78%

    Critical severity vulnerability that affects org.apache.solr:solr-core

    In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remot…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  • Medium 6.5
    CVE-2019-3778 Public exploit EPSS 17%

    Open Redirect in spring-security-oauth2

    Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

    Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 org.springframework.security.oauth:spring-security-oauth Maven
  • Unscored —
    CVE-2019-9625 Public exploit

    JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

  • Unscored —
    CVE-2019-9624 Public exploit EPSS 24%

    Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Do…

  • Unscored —
    CVE-2019-9622 Public exploit

    eBrigade through 4.5 allows Arbitrary File Download via ../ directory traversal in the showfile.php file parameter, as …

  • Unscored —
    CVE-2019-9623 Public exploit

    Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_uploa…