# CVEs published 2019-03-14

84 CVEs were published on March 14, 2019: 0 critical, 2 high. Days are UTC.

- [CVE-2018-1908](https://cve.now/CVE-2018-1908.md): IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Robotic Process Automation with Automation Anywhere)
- [CVE-2018-1910](https://cve.now/CVE-2018-1910.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1914](https://cve.now/CVE-2018-1914.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1916](https://cve.now/CVE-2018-1916.md): IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1929](https://cve.now/CVE-2018-1929.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the… (CVSS 4.3, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1952](https://cve.now/CVE-2018-1952.md): IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1982](https://cve.now/CVE-2018-1982.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1983](https://cve.now/CVE-2018-1983.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1984](https://cve.now/CVE-2018-1984.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2019-4034](https://cve.now/CVE-2019-4034.md): IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. (CVSS 6.3, IBM Content Navigator)
- [CVE-2018-1658](https://cve.now/CVE-2018-1658.md): IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by… (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1688](https://cve.now/CVE-2018-1688.md): IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1759](https://cve.now/CVE-2018-1759.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1761](https://cve.now/CVE-2018-1761.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1763](https://cve.now/CVE-2018-1763.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1764](https://cve.now/CVE-2018-1764.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1823](https://cve.now/CVE-2018-1823.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1824](https://cve.now/CVE-2018-1824.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1825](https://cve.now/CVE-2018-1825.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1829](https://cve.now/CVE-2018-1829.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2019-3833](https://cve.now/CVE-2019-3833.md): Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process\_connection() when parsing specially crafted HTTP… (CVSS 7.5, \[UNKNOWN\] openwsman)
- [CVE-2019-9825](https://cve.now/CVE-2019-9825.md): FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the… (no CVSS)
- [CVE-2018-12185](https://cve.now/CVE-2018-12185.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12187](https://cve.now/CVE-2018-12187.md): Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12188](https://cve.now/CVE-2018-12188.md): Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12189](https://cve.now/CVE-2018-12189.md): Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12190](https://cve.now/CVE-2018-12190.md): Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12191](https://cve.now/CVE-2018-12191.md): Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12192](https://cve.now/CVE-2018-12192.md): Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12196](https://cve.now/CVE-2018-12196.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12198](https://cve.now/CVE-2018-12198.md): Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS\_E5\_04.00.04.393.0 may allow… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12199](https://cve.now/CVE-2018-12199.md): Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12200](https://cve.now/CVE-2018-12200.md): Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12201](https://cve.now/CVE-2018-12201.md): Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation… (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12202](https://cve.now/CVE-2018-12202.md): Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th… (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12203](https://cve.now/CVE-2018-12203.md): Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation… (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12204](https://cve.now/CVE-2018-12204.md): Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R)… (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12205](https://cve.now/CVE-2018-12205.md): Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th… (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12208](https://cve.now/CVE-2018-12208.md): Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before… (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12209](https://cve.now/CVE-2018-12209.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059)… (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12210](https://cve.now/CVE-2018-12210.md): Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12211](https://cve.now/CVE-2018-12211.md): Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12212](https://cve.now/CVE-2018-12212.md): Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 ( (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12213](https://cve.now/CVE-2018-12213.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12214](https://cve.now/CVE-2018-12214.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12215](https://cve.now/CVE-2018-12215.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12216](https://cve.now/CVE-2018-12216.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12217](https://cve.now/CVE-2018-12217.md): Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12218](https://cve.now/CVE-2018-12218.md): Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.50 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12219](https://cve.now/CVE-2018-12219.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12220](https://cve.now/CVE-2018-12220.md): Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12221](https://cve.now/CVE-2018-12221.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12222](https://cve.now/CVE-2018-12222.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12223](https://cve.now/CVE-2018-12223.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12224](https://cve.now/CVE-2018-12224.md): Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18089](https://cve.now/CVE-2018-18089.md): Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18090](https://cve.now/CVE-2018-18090.md): Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (ak (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18091](https://cve.now/CVE-2018-18091.md): Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2019-0121](https://cve.now/CVE-2019-0121.md): Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Matrix Storage Manager)
- [CVE-2019-0122](https://cve.now/CVE-2019-0122.md): Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an… (no CVSS, Intel(R) Software Guard Extensions SDK)
- [CVE-2019-0129](https://cve.now/CVE-2019-0129.md): Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of… (no CVSS, Intel(R) USB 3.0 Creator Utility)
- [CVE-2019-0135](https://cve.now/CVE-2019-0135.md): Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an… (no CVSS, Intel(R) Accelerated Storage Manager in RSTe Advisory)
- [CVE-2018-20801](https://cve.now/CVE-2018-20801.md): In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a… (no CVSS, highcharts)
- [CVE-2019-9787](https://cve.now/CVE-2019-9787.md): WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default… (no CVSS)
- [CVE-2019-9785](https://cve.now/CVE-2019-9785.md): gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a… (no CVSS)
- [CVE-2019-9765](https://cve.now/CVE-2019-9765.md): In Blog\_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to… (no CVSS)
- [CVE-2019-9766](https://cve.now/CVE-2019-9766.md): Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary… (no CVSS)
- [CVE-2019-9767](https://cve.now/CVE-2019-9767.md): Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary… (no CVSS)
- [CVE-2019-9768](https://cve.now/CVE-2019-9768.md): Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it… (no CVSS)
- [CVE-2019-9769](https://cve.now/CVE-2019-9769.md): PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator. (no CVSS)
- [CVE-2019-9770](https://cve.now/CVE-2019-9770.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9771](https://cve.now/CVE-2019-9771.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9772](https://cve.now/CVE-2019-9772.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9773](https://cve.now/CVE-2019-9773.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9774](https://cve.now/CVE-2019-9774.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9775](https://cve.now/CVE-2019-9775.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9776](https://cve.now/CVE-2019-9776.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9777](https://cve.now/CVE-2019-9777.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9778](https://cve.now/CVE-2019-9778.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9779](https://cve.now/CVE-2019-9779.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9760](https://cve.now/CVE-2019-9760.md): FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine… (no CVSS)
- [CVE-2019-9761](https://cve.now/CVE-2019-9761.md): An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without… (no CVSS)
- [CVE-2019-9762](https://cve.now/CVE-2019-9762.md): A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. (no CVSS)
- [CVE-2019-3816](https://cve.now/CVE-2019-3816.md): Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand… (CVSS 7.5, \[UNKNOWN\] openwsman)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2019-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.