# CVEs published 2019-03-01 11 CVEs were published on March 1, 2019: 0 critical, 0 high. Days are UTC. - [CVE-2019-9546](https://cve.now/CVE-2019-9546.md): SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service. (no CVSS) - [CVE-2019-9547](https://cve.now/CVE-2019-9547.md): In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a cir (no CVSS) - [CVE-2019-9543](https://cve.now/CVE-2019-9543.md): An issue was discovered in Poppler 0.74.0. (no CVSS) - [CVE-2019-9544](https://cve.now/CVE-2019-9544.md): An issue was discovered in Bento4 1.5.1-628. (no CVSS) - [CVE-2019-9545](https://cve.now/CVE-2019-9545.md): An issue was discovered in Poppler 0.74.0. (no CVSS) - [CVE-2018-8790](https://cve.now/CVE-2018-8790.md): Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary (no CVSS, Check Point Software Technologies ZoneAlarm) - [CVE-2018-20798](https://cve.now/CVE-2018-20798.md): The expiretable configuration in pfSense 2.4.4\_1 establishes block durations that are incompatible with the block durations implemented by s (no CVSS) - [CVE-2018-20799](https://cve.now/CVE-2018-20799.md): In pfSense 2.4.4\_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP a (no CVSS) - [CVE-2019-9484](https://cve.now/CVE-2019-9484.md): The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP (no CVSS) - [CVE-2019-9482](https://cve.now/CVE-2019-9482.md): In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. (no CVSS) - [CVE-2019-9483](https://cve.now/CVE-2019-9483.md): Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-03-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.