Skip to content
OpenAdvisories

Archive

15 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /15 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-9844

    Cross-Site Scripting in simple-markdown

    simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.

    simple-markdown npm
  • Medium 6.1
    CVE-2019-9837

    Doorkeeper-openid_connect contains Open Redirect

    Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt…

    ruby-doorkeeper-openid-connect doorkeeper-openid_connect Debian RubyGems
  • Medium 6.7
    CVE-2019-6149

    An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0…

  • Medium 5.3
    CVE-2019-5616

    CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass

    CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.

  • Medium 6.5
    CVE-2018-20106

    SMB printer settings don't escape characters in passwords properly

    In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to en…

    SUSE yast2-printer