Skip to content
OpenAdvisories

Archive

March 2019

Vulnerabilities first published in this month (UTC), newest first.

← February 2019 2019 / March April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2019-5418 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in Action View

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

    rails https://github.com/rails/rails rails rails Debian Ubuntu RubyGems
    KEV Jul 7, 2025
  • Critical 9.8
    CVE-2019-10068 Exploited Public exploit Scanner template EPSS 95%

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x version…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2019-3396 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from ver…

    Atlassian Confluence Server Web / CMS
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

    Elastic Kibana
    KEV Jan 10, 2022
  • Medium 6.1
    CVE-2019-9978 Exploited Public exploit Scanner template EPSS 73%

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_opti…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2019-7238 Exploited Public exploit Scanner template EPSS 77%

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

    KEV Dec 10, 2021
  • Critical 9.9
    CVE-2019-1003029 Exploited Public exploit EPSS 74%

    Sandbox bypass in Script Security Plugin

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

    Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
    KEV Apr 25, 2022
  • Critical 9.9
    CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

    Sandbox bypass in Jenkins Pipeline: Groovy Plugin

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

    Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
    KEV Mar 25, 2022
  • Critical 9.9
    CVE-2018-18809 Exploited Scanner template EPSS 79%

    TIBCO JasperReports Library Directory Traversal Vulnerability

    The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, …

    TIBCO Software TIBCO JasperReports Server TIBCO JasperReports Server for ActiveMatrix BPM TIBCO JasperReports Server - Community Edition
    KEV Dec 29, 2022
  • Medium 6.5
    CVE-2019-0676 Exploited

    An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker …

    Microsoft Internet Explorer 11 Internet Explorer 10
    KEV May 23, 2022
  • Critical 9.8
    CVE-2019-0604 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup…

    Microsoft Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation
    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-6223 Exploited

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. …

    Apple macOS iOS macOS iOS
    KEV Nov 3, 2021