Skip to content
OpenAdvisories

Archive

20 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /20 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • Unscored —
    CVE-2019-9889

    In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results …

  • High 7.3
    CVE-2019-3862

    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an ex…

    The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.0
    CVE-2019-3859

    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_re…

    The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-2659

    It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an…

    [UNKNOWN] dropbear dropbear Debian
  • Unscored —
    CVE-2018-17167

    PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Nam…

  • Unscored —
    CVE-2019-7441 Public exploit

    cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter…

  • Unscored —
    CVE-2019-7440 Public exploit

    JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_…

  • Unscored —
    CVE-2019-7439 Public exploit

    cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

  • Unscored —
    CVE-2019-7438 Public exploit

    cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

  • Low 3.3
    CVE-2019-3832

    It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of…

    [UNKNOWN] libsndfile libsndfile libsndfile Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-7437

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

  • Unscored —
    CVE-2019-7436

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of a…

  • Unscored —
    CVE-2019-7435

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.

  • Unscored —
    CVE-2019-7434

    PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads dire…

  • Unscored —
    CVE-2019-7433

    PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

  • Unscored —
    CVE-2019-7432

    PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.

  • Unscored —
    CVE-2019-7431

    PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads di…

  • Unscored —
    CVE-2019-7430

    PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.

  • Unscored —
    CVE-2019-7429

    PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an upload…

  • Unscored —
    CVE-2018-20648

    PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.

  • Unscored —
    CVE-2018-20647

    PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directo…

  • Unscored —
    CVE-2018-20646

    PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image dire…

  • Unscored —
    CVE-2018-20645

    PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

  • Unscored —
    CVE-2018-20644

    PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

  • Unscored —
    CVE-2018-20643

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an …

  • Unscored —
    CVE-2018-20642

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of p…

  • Unscored —
    CVE-2018-20641

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile featur…

  • Unscored —
    CVE-2018-20640

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.

  • Unscored —
    CVE-2018-20639

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.

  • Unscored —
    CVE-2018-20638

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listin…

  • Unscored —
    CVE-2018-20637

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unr…

  • Unscored —
    CVE-2018-20636

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.

  • Unscored —
    CVE-2018-20635

    PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image direct…

  • Unscored —
    CVE-2018-20634

    PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure)…

  • Unscored —
    CVE-2018-20633

    PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

  • Unscored —
    CVE-2018-20632

    PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.

  • Unscored —
    CVE-2018-20631

    PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such …

  • Medium 6.5
    CVE-2019-0191

    Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf

    Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validat…

    Apache Apache Karaf org.apache.karaf:apache-karaf org.apache.karaf:karaf Maven
  • Unscored —
    CVE-2018-20630

    PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an upl…

  • Unscored —
    CVE-2018-20629

    PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing …