CVEs published March 14, 2019
84 CVEs were published on March 14, 2019: 0 critical, 2 high. Browse them by severity, product and exploitation status.
- Published
- 84
- Critical
- 0
- High
- 2
- Medium
- 20
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Intel(R) Graphics Driver for Windows
- 19
- Intel(R) CSME, Server Platform Services, Trusted Execution…
- 12
- IBM Rational Quality Manager
- 7
- Intel Platform Sample / Silicon Reference firmware
- 5
- IBM Rational Collaborative Lifecycle Management
- 4
- IBM Rational Team Concert
- 4
- IBM Rational Engineering Lifecycle Manager
- 3
- [UNKNOWN] openwsman
- 2
- highcharts
- 1
- IBM Content Navigator
- 1
High 2
- CVE-2019-3833Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP…[UNKNOWN] openwsman
- CVE-2019-3816Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand…[UNKNOWN] openwsman
Medium, low and unrated 82
- CVE-2018-1908IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting.IBM Robotic Process Automation with Automation Anywhere
- CVE-2018-1910IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2018-1914IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2018-1916IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1929IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the…IBM Rational Engineering Lifecycle Manager
- CVE-2018-1952IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1982IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1983IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1984IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2019-4034IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation.IBM Content Navigator
- CVE-2018-1658IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by…IBM Rational Collaborative Lifecycle Management
- CVE-2018-1688IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1759IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1761IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1763IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1764IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1823IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1824IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1825IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1829IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2019-9825FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the…
- CVE-2018-12185Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12187Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12188Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12189Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE…Intel(R) CSME, Server Platform Services, Trusted Execution…
Show all 82 entriesShow fewer entries
- CVE-2018-12190Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12191Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12192Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12196Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12198Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12199Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12200Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12201Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation…Intel Platform Sample / Silicon Reference firmware
- CVE-2018-12202Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th…Intel Platform Sample / Silicon Reference firmware
- CVE-2018-12203Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation…Intel Platform Sample / Silicon Reference firmware
- CVE-2018-12204Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R)…Intel Platform Sample / Silicon Reference firmware
- CVE-2018-12205Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th…Intel Platform Sample / Silicon Reference firmware
- CVE-2018-12208Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before…Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12209Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059)…Intel(R) Graphics Driver for Windows
- CVE-2018-12210Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12211Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12212Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (Intel(R) Graphics Driver for Windows
- CVE-2018-12213Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12214Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12215Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12216Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12217Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12218Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.50Intel(R) Graphics Driver for Windows
- CVE-2018-12219Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12220Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10Intel(R) Graphics Driver for Windows
- CVE-2018-12221Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12222Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12223Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10Intel(R) Graphics Driver for Windows
- CVE-2018-12224Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15Intel(R) Graphics Driver for Windows
- CVE-2018-18089Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.xIntel(R) Graphics Driver for Windows
- CVE-2018-18090Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (akIntel(R) Graphics Driver for Windows
- CVE-2018-18091Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 Intel(R) Graphics Driver for Windows
- CVE-2019-0121Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable…Intel(R) Matrix Storage Manager
- CVE-2019-0122Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an…Intel(R) Software Guard Extensions SDK
- CVE-2019-0129Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of…Intel(R) USB 3.0 Creator Utility
- CVE-2019-0135Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an…Intel(R) Accelerated Storage Manager in RSTe Advisory
- CVE-2018-20801In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a…highcharts
- CVE-2019-9787WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default…
- CVE-2019-9785gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a…
- CVE-2019-9765In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to…
- CVE-2019-9766Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary…
- CVE-2019-9767Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary…
- CVE-2019-9768Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it…
- CVE-2019-9769PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.
- CVE-2019-9770An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9771An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9772An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9773An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9774An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9775An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9776An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9777An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9778An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9779An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9760FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine…
- CVE-2019-9761An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without…
- CVE-2019-9762A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id.