Skip to content
OpenAdvisories

Archive

26 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /26 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Unscored —
    CVE-2019-9055 Public exploit EPSS 12%

    An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php a…

  • Critical 10.0
    CVE-2014-5401

    Hospira MedNet Code Injection

    Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet…

    Hospira MedNet
  • Unscored —
    CVE-2019-9053 Public exploit EPSS 69%

    An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achiev…

  • Unscored —
    CVE-2018-19856

    GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates AP…

  • Unscored —
    CVE-2014-5431

    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 conta…

    Baxter SIGMA Spectrum Infusion System
  • Unscored —
    CVE-2014-5432

    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is re…

    Baxter SIGMA Spectrum Infusion System
  • Unscored —
    CVE-2014-5433

    An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored…

    Baxter SIGMA Spectrum Infusion System
  • Unscored —
    CVE-2019-7646 Public exploit

    CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Packag…

  • Unscored —
    CVE-2014-5434

    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a…

    Baxter SIGMA Spectrum Infusion System
  • Unscored —
    CVE-2019-10063

    Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions si…

    flatpak flatpak flatpak Debian Ubuntu Alpine
  • High 7.4
    CVE-2019-9764

    HashiCorp Consul vulnerable to Origin Validation Error

    HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.

    k3d k3d-proxy k3d-tools consul Ubuntu Wolfi Go
  • Unscored —
    CVE-2019-8981

    tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because …

  • Unscored —
    CVE-2019-7715

    An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell h…

  • Unscored —
    CVE-2019-7714

    An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Aut…

  • Unscored —
    CVE-2019-7713

    An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-…

  • Unscored —
    CVE-2019-7712

    An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY R…

  • Unscored —
    CVE-2019-7711 Public exploit

    An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented…

  • Critical 9.8
    CVE-2019-10061

    OS Command Injection in node-opencv

    utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.

    opencv node-opencv Debian npm
  • Medium 4.3
    CVE-2019-3848

    Moodle Logged in users could view all calendar events

    A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar event…

    [UNKNOWN] moodle moodle/moodle Web / CMS Packagist
  • High 7.5
    CVE-2019-3804

    It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial …

    [UNKNOWN] cockpit cockpit cockpit Debian Ubuntu