Archive

7 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /7 April 2019 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.1

CVE-2018-16808

Dolibarr Stored Cross-site Scripting in expensereport/card.php

An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.

dolibarr dolibarr/dolibarr Ubuntu Packagist

Mar 7, 2019
Medium 6.7

CVE-2019-1600

Cisco FXOS and NX-OS Software Unauthorized Directory Access Vulnerability

A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to im…

Cisco Nexus 3000 Series Switches Nexus 3500 Platform Switches Nexus 7000 and 7700 Series Switches Network devices

Mar 7, 2019
Medium 6.5

CVE-2019-3778 Public exploit EPSS 17%

Open Redirect in spring-security-oauth2

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 org.springframework.security.oauth:spring-security-oauth Maven

Mar 7, 2019