CVEs published March 4, 2019
11 CVEs were published on March 4, 2019: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- NetApp SnapCenter Server
- 2
- Apple iOS
- 1
- Apple iOS · Apple macOS +3
- 1
Medium, low and unrated 11
- CVE-2018-5482NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmissiNetApp SnapCenter Server
- CVE-2017-15515NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbiNetApp SnapCenter Server
- CVE-2019-6206An issue existed with autofill resuming after it was canceled.Apple iOS
- CVE-2019-6235A memory corruption issue was addressed with improved validation.Apple iOS · Apple macOS +3
- CVE-2019-9566FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.
- CVE-2019-9567The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.
- CVE-2019-9568The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=formina
- CVE-2019-9563In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.
- CVE-2019-9565Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perfor
- CVE-2019-9551An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06.
- CVE-2019-9552Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.