# CVEs published 2019-03-06

114 CVEs were published on March 6, 2019: 1 critical, 4 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2019-1588](https://cve.now/CVE-2019-1588.md): Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability (CVSS 4.4, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1591](https://cve.now/CVE-2019-1591.md): Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability (CVSS 7.8, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2019-1593](https://cve.now/CVE-2019-1593.md): Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability (CVSS 7.8, Cisco Nexus 3000 Series Switches · Cisco Nexus 3500 Plat… +4)
- [CVE-2019-1594](https://cve.now/CVE-2019-1594.md): Cisco NX-OS Software 802.1X Extensible Authentication Protocol over LAN Denial of Service Vulnerability (CVSS 7.4, Cisco Nexus 1000V Switch for VMware vSphere · Cisco Nexu… +5)
- [CVE-2019-1595](https://cve.now/CVE-2019-1595.md): Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS Software)
- [CVE-2019-9606](https://cve.now/CVE-2019-9606.md): PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature. (no CVSS)
- [CVE-2019-9607](https://cve.now/CVE-2019-9607.md): PHP Scripts Mall Medical Store Script 3.0.3 allows Path Traversal by navigating to the parent directory of a jpg or png file. (no CVSS)
- [CVE-2019-9608](https://cve.now/CVE-2019-9608.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9609](https://cve.now/CVE-2019-9609.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9610](https://cve.now/CVE-2019-9610.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9611](https://cve.now/CVE-2019-9611.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9612](https://cve.now/CVE-2019-9612.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9613](https://cve.now/CVE-2019-9613.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9614](https://cve.now/CVE-2019-9614.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9615](https://cve.now/CVE-2019-9615.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9616](https://cve.now/CVE-2019-9616.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-9617](https://cve.now/CVE-2019-9617.md): An issue was discovered in OFCMS before 1.1.3. (no CVSS)
- [CVE-2019-1543](https://cve.now/CVE-2019-1543.md): ChaCha20-Poly1305 with long nonces (no CVSS, OpenSSL)
- [CVE-2019-1585](https://cve.now/CVE-2019-1585.md): Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability (CVSS 6.7, Cisco NX-OS Software for Nexus 9000 Series Fabric Switches…)
- [CVE-2018-1911](https://cve.now/CVE-2018-1911.md): IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2018-1912](https://cve.now/CVE-2018-1912.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2019-4030](https://cve.now/CVE-2019-4030.md): IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM WebSphere Application Server)
- [CVE-2019-9603](https://cve.now/CVE-2019-9603.md): MiniCMS 1.10 allows mc-admin/post.php?state=publish&delete= CSRF to delete articles, a different vulnerability than CVE-2018-18891. (no CVSS)
- [CVE-2019-0200](https://cve.now/CVE-2019-0200.md): A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 6.0.0-7.0.6 (inclusive) and 7.1.0 which allows an unauthenticat (no CVSS, Apache Software Foundation Apache Qpid Broker-J · org.apach…)
- [CVE-2019-9599](https://cve.now/CVE-2019-9599.md): The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash) via many simultane (no CVSS)
- [CVE-2019-9600](https://cve.now/CVE-2019-9600.md): The Olive Tree FTP Server (aka com.theolivetree.ftpserver) application through 1.32 for Android allows remote attackers to cause a denial of (no CVSS)
- [CVE-2019-9601](https://cve.now/CVE-2019-9601.md): The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=Pho (no CVSS)
- [CVE-2019-0187](https://cve.now/CVE-2019-0187.md): Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). (no CVSS, Apache Software Foundation Apache JMeter · org.apache.jmete…)
- [CVE-2019-9590](https://cve.now/CVE-2019-9590.md): An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. (no CVSS)
- [CVE-2019-9591](https://cve.now/CVE-2019-9591.md): A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2019-9592](https://cve.now/CVE-2019-9592.md): A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2019-9593](https://cve.now/CVE-2019-9593.md): A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2019-9594](https://cve.now/CVE-2019-9594.md): BlueCMS 1.6 allows SQL Injection via the user\_id parameter in an uploads/admin/user.php?act=edit request. (no CVSS)
- [CVE-2019-9595](https://cve.now/CVE-2019-9595.md): AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. (no CVSS)
- [CVE-2019-3824](https://cve.now/CVE-2019-3824.md): A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4. (no CVSS)
- [CVE-2019-9587](https://cve.now/CVE-2019-9587.md): There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. (no CVSS)
- [CVE-2019-9588](https://cve.now/CVE-2019-9588.md): There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. (no CVSS)
- [CVE-2019-9589](https://cve.now/CVE-2019-9589.md): There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. (no CVSS)
- [CVE-2019-0540](https://cve.now/CVE-2019-0540.md): A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf (no CVSS, Microsoft Office · Microsoft Excel Viewer +1)
- [CVE-2019-0590](https://cve.now/CVE-2019-0590.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0591](https://cve.now/CVE-2019-0591.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0593](https://cve.now/CVE-2019-0593.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0594](https://cve.now/CVE-2019-0594.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Server · Microsoft SharePoint Found… +1)
- [CVE-2019-0595](https://cve.now/CVE-2019-0595.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0596](https://cve.now/CVE-2019-0596.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0597](https://cve.now/CVE-2019-0597.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0598](https://cve.now/CVE-2019-0598.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0599](https://cve.now/CVE-2019-0599.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0600](https://cve.now/CVE-2019-0600.md): An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'H (no CVSS, Microsoft Windows)
- [CVE-2019-0601](https://cve.now/CVE-2019-0601.md): An information disclosure vulnerability exists when the Human Interface Devices (HID) component improperly handles objects in memory, aka 'H (no CVSS, Microsoft Windows)
- [CVE-2019-0602](https://cve.now/CVE-2019-0602.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0604](https://cve.now/CVE-2019-0604.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (CVSS 9.8, KEV, Microsoft SharePoint Server · Microsoft SharePoint Found… +1)
- [CVE-2019-0605](https://cve.now/CVE-2019-0605.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0606](https://cve.now/CVE-2019-0606.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Cor (no CVSS)
- [CVE-2019-0607](https://cve.now/CVE-2019-0607.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0610](https://cve.now/CVE-2019-0610.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0613](https://cve.now/CVE-2019-0613.md): A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup (no CVSS, Microsoft .NET Framework · Microsoft Visual Studio)
- [CVE-2019-0615](https://cve.now/CVE-2019-0615.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0616](https://cve.now/CVE-2019-0616.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0618](https://cve.now/CVE-2019-0618.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows)
- [CVE-2019-0619](https://cve.now/CVE-2019-0619.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0621](https://cve.now/CVE-2019-0621.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2019-0623](https://cve.now/CVE-2019-0623.md): An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k (no CVSS, Microsoft Windows)
- [CVE-2019-0625](https://cve.now/CVE-2019-0625.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2019-0626](https://cve.now/CVE-2019-0626.md): A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP serve (no CVSS, Microsoft Windows)
- [CVE-2019-0627](https://cve.now/CVE-2019-0627.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur (no CVSS, Microsoft Windows · Microsoft PowerShell Core)
- [CVE-2019-0628](https://cve.now/CVE-2019-0628.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2019-0630](https://cve.now/CVE-2019-0630.md): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, (no CVSS, Microsoft Windows)
- [CVE-2019-0631](https://cve.now/CVE-2019-0631.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur (no CVSS, Microsoft Windows · Microsoft PowerShell Core)
- [CVE-2019-0632](https://cve.now/CVE-2019-0632.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur (no CVSS, Microsoft Windows · Microsoft PowerShell Core)
- [CVE-2019-0633](https://cve.now/CVE-2019-0633.md): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, (no CVSS, Microsoft Windows Server · Microsoft Windows)
- [CVE-2019-0634](https://cve.now/CVE-2019-0634.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio (no CVSS, Microsoft Edge)
- [CVE-2019-0635](https://cve.now/CVE-2019-0635.md): An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth (no CVSS, Microsoft Windows)
- [CVE-2019-0636](https://cve.now/CVE-2019-0636.md): An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'. (no CVSS, Microsoft Windows)
- [CVE-2019-0637](https://cve.now/CVE-2019-0637.md): A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network conn (no CVSS, Microsoft Windows)
- [CVE-2019-0640](https://cve.now/CVE-2019-0640.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0641](https://cve.now/CVE-2019-0641.md): A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerabi (no CVSS, Microsoft Edge)
- [CVE-2019-0642](https://cve.now/CVE-2019-0642.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0643](https://cve.now/CVE-2019-0643.md): An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information (no CVSS, Microsoft Edge)
- [CVE-2019-0644](https://cve.now/CVE-2019-0644.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0645](https://cve.now/CVE-2019-0645.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio (no CVSS, Microsoft Edge)
- [CVE-2019-0648](https://cve.now/CVE-2019-0648.md): An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker (no CVSS, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2019-0649](https://cve.now/CVE-2019-0649.md): A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'. (no CVSS, Microsoft Edge · Microsoft ChakraCore +1)
- [CVE-2019-0650](https://cve.now/CVE-2019-0650.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio (no CVSS, Microsoft Edge)
- [CVE-2019-0651](https://cve.now/CVE-2019-0651.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0652](https://cve.now/CVE-2019-0652.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0654](https://cve.now/CVE-2019-0654.md): A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser Spoofing Vulnerability (no CVSS, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2019-0655](https://cve.now/CVE-2019-0655.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scriptin (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0656](https://cve.now/CVE-2019-0656.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2019-0657](https://cve.now/CVE-2019-0657.md): A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio (no CVSS, Microsoft .NET Framework · Microsoft .NET Core +4)
- [CVE-2019-0658](https://cve.now/CVE-2019-0658.md): An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka ' (no CVSS, Microsoft Edge · Microsoft ChakraCore)
- [CVE-2019-0659](https://cve.now/CVE-2019-0659.md): An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Ele (no CVSS, Microsoft Windows)
- [CVE-2019-0660](https://cve.now/CVE-2019-0660.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0661](https://cve.now/CVE-2019-0661.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2019-0662](https://cve.now/CVE-2019-0662.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows)
- [CVE-2019-0663](https://cve.now/CVE-2019-0663.md): An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerabilit (no CVSS, Microsoft Windows)
- [CVE-2019-0664](https://cve.now/CVE-2019-0664.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2019-0668](https://cve.now/CVE-2019-0668.md): An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request t (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2019-0669](https://cve.now/CVE-2019-0669.md): An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In (no CVSS, Microsoft Excel · Microsoft Office)
- [CVE-2019-0670](https://cve.now/CVE-2019-0670.md): A spoofing vulnerability exists in Microsoft SharePoint when the application does not properly parse HTTP content, aka 'Microsoft SharePoint (no CVSS, Microsoft SharePoint Foundation · Microsoft SharePoint Ente…)
- [CVE-2019-0671](https://cve.now/CVE-2019-0671.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2019-0672](https://cve.now/CVE-2019-0672.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2019-0673](https://cve.now/CVE-2019-0673.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2019-0674](https://cve.now/CVE-2019-0674.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2019-0675](https://cve.now/CVE-2019-0675.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2019-0676](https://cve.now/CVE-2019-0676.md): An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully expl (CVSS 6.5, KEV, Microsoft Internet Explorer)
- [CVE-2019-0686](https://cve.now/CVE-2019-0686.md): An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi (no CVSS, Microsoft Exchange Server)
- [CVE-2019-0724](https://cve.now/CVE-2019-0724.md): An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerabi (no CVSS, Microsoft Exchange Server)
- [CVE-2019-0728](https://cve.now/CVE-2019-0728.md): A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visua (no CVSS, Microsoft Visual Studio Code)
- [CVE-2019-0729](https://cve.now/CVE-2019-0729.md): An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker t (no CVSS, Microsoft Java SDK for Azure IoT)
- [CVE-2019-0741](https://cve.now/CVE-2019-0741.md): An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information (no CVSS, Microsoft Java SDK for Azure IoT)
- [CVE-2019-0742](https://cve.now/CVE-2019-0742.md): A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foun (no CVSS, Microsoft Team Foundation Server)
- [CVE-2019-0743](https://cve.now/CVE-2019-0743.md): A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foun (no CVSS, Microsoft Team Foundation Server)
- [CVE-2019-9581](https://cve.now/CVE-2019-9581.md): phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favico (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.