Skip to content
OpenAdvisories

Archive

March 2019

Vulnerabilities first published in this month (UTC), newest first.

← February 2019 2019 / March April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-1759 Public exploit

    Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

    A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface.…

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 5.4
    CVE-2019-3847 Public exploit

    Moodle XSS Vulnerability

    A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to t…

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2019-3810 Public exploit EPSS 14%

    Moodle XSS Vulnerability

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is …

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.1
    CVE-2019-9978 Exploited Public exploit EPSS 73%

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_opti…

    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2019-9648 Public exploit EPSS 14%

    CoreFTP Directory Traversal

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned informatio…

    CoreFtp NuGet
  • Medium 6.5
    CVE-2019-3778 Public exploit EPSS 17%

    Open Redirect in spring-security-oauth2

    Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user…

    Spring Spring Security OAuth org.springframework.security.oauth:spring-security-oauth2 org.springframework.security.oauth:spring-security-oauth Maven