Skip to content
OpenAdvisories

Archive

March 2019

Vulnerabilities first published in this month (UTC), newest first.

← February 2019 2019 / March April 2019 →
  1. 111
  2. 22
  3. 32
  4. 411
  5. 578
  6. 6115
  7. 765
  8. 841
  9. 916
  10. 101
  11. 1138
  12. 1234
  13. 1331
  14. 1484
  15. 1539
  16. 1610
  17. 1795
  18. 1825
  19. 1949
  20. 2044
  21. 2153
  22. 2218
  23. 237
  24. 2426
  25. 2563
  26. 2660
  27. 2775
  28. 2860
  29. 2922
  30. 3017
  31. 314
All Critical High Medium Low Exploited only Public exploit

1,196 results · Feed

  • Unscored —
    CVE-2019-9897

    Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.

    putty putty putty Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9896 Public exploit

    In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file…

  • Unscored —
    CVE-2019-9895

    In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client fo…

    putty putty putty Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9894

    A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

    putty putty putty Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9893

    libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (…

    libseccomp libseccomp libseccomp Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-9889

    In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results …

  • High 7.3
    CVE-2019-3862

    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an ex…

    The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.0
    CVE-2019-3859

    An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_re…

    The libssh2 Project libssh2 libssh2 libssh2 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-2659

    It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an…

    [UNKNOWN] dropbear dropbear Debian
  • Unscored —
    CVE-2018-17167

    PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Nam…

  • Unscored —
    CVE-2019-7441 Public exploit

    cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter…

  • Unscored —
    CVE-2019-7440 Public exploit

    JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_…

  • Unscored —
    CVE-2019-7439 Public exploit

    cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.

  • Unscored —
    CVE-2019-7438 Public exploit

    cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.

  • Low 3.3
    CVE-2019-3832

    It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of…

    [UNKNOWN] libsndfile libsndfile libsndfile Debian Ubuntu Alpine
  • Unscored —
    CVE-2019-7437

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

  • Unscored —
    CVE-2019-7436

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of a…

  • Unscored —
    CVE-2019-7435

    PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.

  • Unscored —
    CVE-2019-7434

    PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads dire…

  • Unscored —
    CVE-2019-7433

    PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.

  • Unscored —
    CVE-2019-7432

    PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.

  • Unscored —
    CVE-2019-7431

    PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads di…

  • Unscored —
    CVE-2019-7430

    PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.

  • Unscored —
    CVE-2019-7429

    PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an upload…

  • Unscored —
    CVE-2018-20648

    PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.

  • Unscored —
    CVE-2018-20647

    PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directo…

  • Unscored —
    CVE-2018-20646

    PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image dire…

  • Unscored —
    CVE-2018-20645

    PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.

  • Unscored —
    CVE-2018-20644

    PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.

  • Unscored —
    CVE-2018-20643

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an …

  • Unscored —
    CVE-2018-20642

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of p…

  • Unscored —
    CVE-2018-20641

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile featur…

  • Unscored —
    CVE-2018-20640

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.

  • Unscored —
    CVE-2018-20639

    PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.

  • Unscored —
    CVE-2018-20638

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listin…

  • Unscored —
    CVE-2018-20637

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unr…

  • Unscored —
    CVE-2018-20636

    PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.

  • Unscored —
    CVE-2018-20635

    PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image direct…

  • Unscored —
    CVE-2018-20634

    PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure)…

  • Unscored —
    CVE-2018-20633

    PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.