CVEs published February 27, 2019
18 CVEs were published on February 27, 2019: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- NVIDIA GPU Graphics Driver
- 7
- Apache Software Foundation Apache Airflow · apache-airflow
- 1
- com.alipay.sofa:hessian
- 1
- IBM BigFix Platform
- 1
- IBM torwize · IBM Spectrum Virtualize for Public Cloud +3
- 1
- NetApp Clustered Data ONTAP
- 1
- OpenSSL
- 1
Medium, low and unrated 18
- CVE-2019-15590-byte record padding oracleOpenSSL
- CVE-2019-5665NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which the stereo service software, when opening a fNVIDIA GPU Graphics Driver
- CVE-2019-5666NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) create context command DDI DxgkDdiCreateCNVIDIA GPU Graphics Driver
- CVE-2019-5667NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSetRootPageTable in whNVIDIA GPU Graphics Driver
- CVE-2019-5668NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiSubmitCommandVirtual iNVIDIA GPU Graphics Driver
- CVE-2019-5669NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sNVIDIA GPU Graphics Driver
- CVE-2019-5670NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sNVIDIA GPU Graphics Driver
- CVE-2019-5671NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the soNVIDIA GPU Graphics Driver
- CVE-2018-1775IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products versions 7.5 through 8.2 could allow an authenIBM torwize · IBM Spectrum Virtualize for Public Cloud +3
- CVE-2019-4061IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the updates and fixlets depIBM BigFix Platform
- CVE-2018-20244In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrarApache Software Foundation Apache Airflow · apache-airflow
- CVE-2018-20797An issue was discovered in PoDoFo 0.9.6.
- CVE-2019-5491Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a vulnerability which discloses sensitive informatioNetApp Clustered Data ONTAP
- CVE-2019-8410Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords paramet
- CVE-2019-9211There is a reachable assertion abort in the function write_long_string_missing_values() in data/sys-file-writer.c in libdata.a in GNU PSPP 1
- CVE-2019-9212SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklistincom.alipay.sofa:hessian
- CVE-2019-9210In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an at
- CVE-2019-7006Avaya one-X Communicator Weak Encryption