# CVEs published 2019-03-09

16 CVEs were published on March 9, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-9580](https://cve.now/CVE-2019-9580.md): In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" or (no CVSS)
- [CVE-2019-8264](https://cve.now/CVE-2019-8264.md): UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code exec (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8265](https://cve.now/CVE-2019-8265.md): UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8266](https://cve.now/CVE-2019-8266.md): UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer funct (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8267](https://cve.now/CVE-2019-8267.md): UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8268](https://cve.now/CVE-2019-8268.md): UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadStr (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8269](https://cve.now/CVE-2019-8269.md): UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8270](https://cve.now/CVE-2019-8270.md): UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (D (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8271](https://cve.now/CVE-2019-8271.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially resul (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8272](https://cve.now/CVE-2019-8272.md): UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8273](https://cve.now/CVE-2019-8273.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potential (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8274](https://cve.now/CVE-2019-8274.md): UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8275](https://cve.now/CVE-2019-8275.md): UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being ac (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8276](https://cve.now/CVE-2019-8276.md): UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result i (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8277](https://cve.now/CVE-2019-8277.md): UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be (no CVSS, Kaspersky Lab UltraVNC)
- [CVE-2019-8280](https://cve.now/CVE-2019-8280.md): UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. (no CVSS, Kaspersky Lab UltraVNC)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.