CVEs published March 11, 2019
38 CVEs were published on March 11, 2019: 0 critical, 12 high.
- Published
- 38
- Critical
- 0
- High
- 12
- Medium
- 10
- Low
- 1
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- IBM DB2 for Linux, UNIX and Windows
- 6
- Cisco Nexus 9000 Series Switches in Standalone NX-OS Mode
- 2
- IBM MQ
- 2
- Cisco Application Policy Infrastructure Controller
- 1
- Cisco Digital Network Architecture Center
- 1
- Cisco Enterprise Chat and Email
- 1
- Cisco Firepower 4100 Series Next-Generation Firewalls ·… +8
- 1
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +4
- 1
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +5
- 1
- Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +6
- 1
High 12
- CVE-2018-1922IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability thaIBM DB2 for Linux, UNIX and Windows
- CVE-2018-1923IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability thaIBM DB2 for Linux, UNIX and Windows
- CVE-2018-1974IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels.IBM MQ
- CVE-2018-1978IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could IBM DB2 for Linux, UNIX and Windows
- CVE-2018-1980IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could IBM DB2 for Linux, UNIX and Windows
- CVE-2018-1998IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges.IBM MQ
- CVE-2019-1614Cisco NX-OS Software NX-API Command Injection VulnerabilityCisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +4
- CVE-2019-1616Cisco NX-OS Software Cisco Fabric Services Denial of Service VulnerabilityCisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +6
- CVE-2019-1617Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service VulnerabilityCisco Nexus 9000 Series Switches in Standalone NX-OS Mode
- CVE-2019-1618Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution VulnerabilityCisco Nexus 9000 Series Switches in Standalone NX-OS Mode
- CVE-2019-4015IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could IBM DB2 for Linux, UNIX and Windows
- CVE-2019-4016IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could IBM DB2 for Linux, UNIX and Windows
Medium, low and unrated 26
- CVE-2018-1890IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevatIBM WebSphere Application Server Patterns · IBM WebSpher… +1
- CVE-2018-1902IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used toIBM WebSphere Application Server
- CVE-2018-2009IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API.IBM API Connect
- CVE-2019-1610Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)Cisco Nexus 3500 Platform Switches · Cisco Nexus 3000 Serie…
- CVE-2019-1611Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)Cisco Firepower 4100 Series Next-Generation Firewalls ·… +8
- CVE-2019-1612Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)Cisco Nexus 3000 Series Switches · Cisco Nexus 3500 Plat… +3
- CVE-2019-1613Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)Cisco MDS 9000 Series Multilayer Switches · Cisco Nexus… +5
- CVE-2019-1615Cisco NX-OS Software Image Signature Verification VulnerabilityCisco Nexus 3000 Series Switches · Cisco Nexus 9000 Seri… +2
- CVE-2019-1690Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address VulnerabilityCisco Application Policy Infrastructure Controller
- CVE-2019-1702Cisco Enterprise Chat and Email Cross-Site Scripting VulnerabilitiesCisco Enterprise Chat and Email
- CVE-2019-1707Cisco DNA Center Access Contract Stored Cross-Site Scripting VulnerabilityCisco Digital Network Architecture Center
- CVE-2019-9692class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension
- CVE-2019-9693In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _upd
- CVE-2019-9686pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized
- CVE-2019-9687PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
- CVE-2019-9688sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
- CVE-2019-9659The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger t
- CVE-2019-9675An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3.
- CVE-2019-9656An issue was discovered in LibOFX 0.9.14.
- CVE-2019-9658Checkstyle before 8.18 loads external DTDs by default.com.puppycrawl.tools:checkstyle
- CVE-2019-9660Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.
- CVE-2019-9661Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,
- CVE-2019-9662An issue was discovered in JTBC(PHP) 3.0.1.8.
- CVE-2019-9650An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event.
- CVE-2019-9651An issue was discovered in SDCMS V1.7.
- CVE-2019-9652There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request.