Skip to content
OpenAdvisories

Archive

30 March 2019

Vulnerabilities first published on this day (UTC), newest first.

← February 2019 2019 / March /30 April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2019-10663 EPSS 28%

    Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the …

  • Unscored —
    CVE-2019-10662 EPSS 44%

    Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metac…

  • Unscored —
    CVE-2019-10661

    On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password.

  • Unscored —
    CVE-2019-10660

    Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell m…

  • Unscored —
    CVE-2019-10659

    Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2019-10658

    Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metach…

  • Unscored —
    CVE-2019-10657

    Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover pa…

  • Unscored —
    CVE-2019-10656

    Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metach…

  • Unscored —
    CVE-2019-10655 Public exploit EPSS 15%

    Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0…

  • Unscored —
    CVE-2019-10654

    The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote a…

    lrzip lrzip Debian Ubuntu
  • Unscored —
    CVE-2019-10652 Public exploit

    An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .…

  • Unscored —
    CVE-2019-10650

    In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, wh…

    imagemagick imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-10649

    In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an a…

    imagemagick imagemagick imagemagick6 Debian Alpine
  • Critical 9.8
    CVE-2019-10648

    Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction

    Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

    robocode robocode net.sf.robocode:robocode.host Debian Ubuntu Maven
  • Unscored —
    CVE-2019-10647 Scanner template

    ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/co…

  • Unscored —
    CVE-2019-10646

    Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allo…

  • Unscored —
    CVE-2019-10644

    An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.