CVEs published March 8, 2019
41 CVEs were published on March 8, 2019: 5 critical, 7 high. 2 are now in CISA KEV.
- Published
- 41
- Critical
- 5
- High
- 7
- Medium
- 5
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 2
- Fix available
- 27
Most affected products
- Jenkins project Jenkins Azure VM Agents Plugin · org.jenkin…
- 3
- Talos Pixar Renderman
- 3
- Atlassian Sourcetree for Windows
- 2
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +6
- 2
- Cisco Nexus 3000 Series Switches · Cisco Nexus 3500 Plat… +3
- 2
- Cloud Foundry Container Runtime
- 2
- Apache Software Foundation Apache Solr · org.apache.solr:so…
- 1
- Atlassian Sourcetree for macOS
- 1
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus 700…
- 1
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +5
- 1
Critical 5
- CVE-2019-1003029A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecuriJenkins project Jenkins Script Security Plugin · org.jenkin…
- CVE-2019-1003030A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/woJenkins project Jenkins Pipeline: Groovy Plugin · org.jenki…
- CVE-2018-4054A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.Talos Pixar Renderman
- CVE-2019-5015A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool.Talos Pixar Renderman
- CVE-2019-3780Cloud Foundry Container Runtime Leaks IAAS CredentialsCloud Foundry Container Runtime
High 7
- CVE-2018-4055A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0.Talos Pixar Renderman
- CVE-2019-1605Cisco NX-OS Software NX-API Arbitrary Code Execution VulnerabilityCisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +6
- CVE-2019-1602Cisco NX-OS Software Privilege Escalation VulnerabilityCisco Nexus 3000 Series Switches · Cisco Nexus 3500 Plat… +3
- CVE-2019-1603Cisco NX-OS Software Privilege Escalation VulnerabilityCisco Nexus 3000 Series Switches · Cisco Nexus 3500 Plat… +3
- CVE-2019-1604Cisco NX-OS Software Privilege Escalation VulnerabilityCisco Nexus 7000 and 7700 Series Switches · Cisco Nexus… +4
- CVE-2019-1601Cisco NX-OS Software Unauthorized Filesystem Access VulnerabilityCisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +6
- CVE-2019-3779Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCDCloud Foundry Container Runtime
Medium, low and unrated 29
- CVE-2019-9637An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
- CVE-2019-9638An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
- CVE-2019-9639An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
- CVE-2019-9640An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
- CVE-2019-9641An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3.
- CVE-2017-3164Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive).Apache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2019-1003031A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScriptJenkins project Jenkins Matrix Project Plugin · org.jenkins…
- CVE-2019-1003032A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/EJenkins project Jenkins Email Extension Plugin · org.jenkin…
- CVE-2019-1003033A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSJenkins project Jenkins Groovy Plugin · org.jenkins-ci.plug…
- CVE-2019-1003034A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstraJenkins project Jenkins Job DSL Plugin · org.jenkins-ci.plu…
- CVE-2019-1003035An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagenJenkins project Jenkins Azure VM Agents Plugin · org.jenkin…
- CVE-2019-1003036A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzJenkins project Jenkins Azure VM Agents Plugin · org.jenkin…
- CVE-2019-1003037An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagenJenkins project Jenkins Azure VM Agents Plugin · org.jenkin…
- CVE-2019-1003038An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in src/main/java/org/jJenkins project Jenkins Repository Connector Plugin · org.j…
- CVE-2019-1003039An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/cJenkins project JenkinsAppDynamics Dashboard Plugin · org.j…
- CVE-2019-9636Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NF
- CVE-2019-1606Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)Cisco Nexus 9000 Series Switches in Standalone NX-OS Mod… +1
- CVE-2019-1607Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607)Cisco Nexus 7000 and 7700 Series Switches
- CVE-2019-1608Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608)Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus 700…
- CVE-2019-1609Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +5
- CVE-2018-20187A side-channel issue was discovered in Botan before 2.9.0.
- CVE-2019-9627A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker
- CVE-2018-20234There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in MercuAtlassian Sourcetree for macOS
- CVE-2018-20235There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in MAtlassian Sourcetree for Windows
- CVE-2018-20236There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling.Atlassian Sourcetree for Windows
- CVE-2019-9634Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.stdlib
- CVE-2019-9633gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting e
- CVE-2019-9632ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack
- CVE-2019-9631Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.