# CVEs published 2019-03-04

11 CVEs were published on March 4, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2018-5482](https://cve.now/CVE-2018-5482.md): NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmissi (no CVSS, NetApp SnapCenter Server)
- [CVE-2017-15515](https://cve.now/CVE-2017-15515.md): NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbi (no CVSS, NetApp SnapCenter Server)
- [CVE-2019-6206](https://cve.now/CVE-2019-6206.md): An issue existed with autofill resuming after it was canceled. (no CVSS, Apple iOS)
- [CVE-2019-6235](https://cve.now/CVE-2019-6235.md): A memory corruption issue was addressed with improved validation. (no CVSS, Apple iOS · Apple macOS +3)
- [CVE-2019-9566](https://cve.now/CVE-2019-9566.md): FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request. (no CVSS)
- [CVE-2019-9567](https://cve.now/CVE-2019-9567.md): The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll. (no CVSS)
- [CVE-2019-9568](https://cve.now/CVE-2019-9568.md): The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=formina (no CVSS)
- [CVE-2019-9563](https://cve.now/CVE-2019-9563.md): In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads. (no CVSS)
- [CVE-2019-9565](https://cve.now/CVE-2019-9565.md): Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perfor (no CVSS)
- [CVE-2019-9551](https://cve.now/CVE-2019-9551.md): An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. (no CVSS)
- [CVE-2019-9552](https://cve.now/CVE-2019-9552.md): Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.