Skip to content
OpenAdvisories

Archive

19 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /19 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 7.5
    CVE-2019-5885

    Matrix Synapse Predictable Secret Key

    Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.

    matrix-synapse matrix-synapse Ubuntu PyPI
  • High 8.1
    CVE-2019-5729

    splunk-sdk does not properly verify untrusted TLS server certificates

    Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

    splunk-sdk PyPI
  • Unscored —
    CVE-2019-5723

    An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather …

  • Unscored —
    CVE-2019-5722 Public exploit

    An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter hand…

  • Unscored —
    CVE-2019-9870

    plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.

  • Unscored —
    CVE-2019-9868

    An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed…

  • Unscored —
    CVE-2019-9867

    An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is d…

  • Medium 5.4
    CVE-2018-1836

    IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This v…

    IBM MQ
  • High 8.4
    CVE-2019-4094

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared librar…

    IBM DB2 for Linux, UNIX and Windows Linux Windows