CVEs published February 23, 2019
31 CVEs were published on February 23, 2019: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 31
- CVE-2019-9047GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.
- CVE-2019-9062PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.
- CVE-2019-9063PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.
- CVE-2019-9064PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.
- CVE-2019-9065PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount.
- CVE-2019-9066PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.
- CVE-2019-9048An issue was discovered in Pluck 4.7.9-dev1.
- CVE-2019-9049An issue was discovered in Pluck 4.7.9-dev1.
- CVE-2019-9050An issue was discovered in Pluck 4.7.9-dev1.
- CVE-2019-9051An issue was discovered in Pluck 4.7.9-dev1.
- CVE-2019-9052An issue was discovered in Pluck 4.7.9-dev1.
- CVE-2019-9040S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-201
- CVE-2019-9041An issue was discovered in ZZZCMS zzzphp V1.6.1.
- CVE-2019-9042An issue was discovered in Sitemagic CMS v4.4.
- CVE-2014-10078Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface
- CVE-2014-10079In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of th
- CVE-2018-20785Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices.
- CVE-2019-9026An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9027An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9028An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9029An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9030An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9031An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9032An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9033An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9034An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9035An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9036An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9037An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2019-9038An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13.
- CVE-2018-18692A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML