Skip to content
OpenAdvisories

Archive

28 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /28 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2019-0222 Public exploit EPSS 12%

    Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client

    In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

    Apache Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  • High 7.5
    CVE-2019-0225 Public exploit

    Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war

    A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

    Apache Apache JSPWiki org.apache.jspwiki:jspwiki-war Maven
  • Unscored —
    CVE-2019-9202 Public exploit EPSS 24%

    Nagios IM (component of Nagios XI) before 2.2.7 allows authenticated users to execute arbitrary code via API key issues.

  • Unscored —
    CVE-2019-5737 Public exploit EPSS 16%

    In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker ca…

    Node.js Node.js nodejs nodejs Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-18365 Public exploit EPSS 21%

    The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated …

  • Medium 5.3
    CVE-2019-1759 Public exploit

    Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

    A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface.…

    Cisco Cisco IOS XE Software iOS Network devices