Skip to content
OpenAdvisories

Archive

March 2019

Vulnerabilities first published in this month (UTC), newest first.

← February 2019 2019 / March April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-5420 Public exploit EPSS 89%

    Use of Insufficiently Random Values in Railties Allows Remote Code Execution

    A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalat…

    rails https://github.com/rails/rails rails railties Debian RubyGems
  • Critical 9.8
    CVE-2019-10068 Exploited Public exploit Scanner template EPSS 95%

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x version…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-3396 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…

    Atlassian Confluence Server Web / CMS
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

    Elastic Kibana
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2019-7238 Exploited Public exploit Scanner template EPSS 77%

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

    KEV Dec 10, 2021
  • Critical 10.0
    CVE-2018-19276 Public exploit Scanner template EPSS 99%

    OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated us…

  • Critical 9.8
    CVE-2019-5413 Public exploit

    Code Injection in morgan

    An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.

    morgan npm
  • Critical 9.9
    CVE-2019-1003029 Exploited Public exploit EPSS 74%

    Sandbox bypass in Script Security Plugin

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

    Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
    KEV Apr 25, 2022
  • Critical 9.9
    CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

    Sandbox bypass in Jenkins Pipeline: Groovy Plugin

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

    Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-0192 Public exploit Scanner template EPSS 78%

    Critical severity vulnerability that affects org.apache.solr:solr-core

    In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remot…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  • Critical 9.8
    CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

    Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation
    KEV Nov 3, 2021