CVEs published March 14, 2019
84 CVEs were published on March 14, 2019: 0 critical, 2 high.
- Published
- 84
- Critical
- 0
- High
- 2
- Medium
- 20
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Intel(R) Graphics Driver for Windows
- 19
- Intel(R) CSME, Server Platform Services, Trusted Execution…
- 12
- IBM Rational Quality Manager
- 7
- Intel Platform Sample / Silicon Reference firmware
- 5
- IBM Rational Collaborative Lifecycle Management
- 4
- IBM Rational Team Concert
- 4
- IBM Rational Engineering Lifecycle Manager
- 3
- [UNKNOWN] openwsman
- 2
- highcharts
- 1
- IBM Content Navigator
- 1
High 2
- CVE-2019-3833Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP r[UNKNOWN] openwsman
- CVE-2019-3816Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo[UNKNOWN] openwsman
Medium, low and unrated 82
- CVE-2018-1908IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting.IBM Robotic Process Automation with Automation Anywhere
- CVE-2018-1910IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2018-1914IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2018-1916IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1929IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URLIBM Rational Engineering Lifecycle Manager
- CVE-2018-1952IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1982IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1983IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1984IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2019-4034IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation.IBM Content Navigator
- CVE-2018-1658IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by imIBM Rational Collaborative Lifecycle Management
- CVE-2018-1688IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2018-1759IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1761IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Team Concert
- CVE-2018-1763IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1764IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1823IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1824IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1825IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2018-1829IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2019-9825FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set
- CVE-2018-12185Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthentiIntel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12187Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12188Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12189Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE beforeIntel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12190Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.6Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12191Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services bIntel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12192Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services befoIntel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12196Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12198Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12199Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12200Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentiallyIntel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12201Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation IntIntel Platform Sample / Silicon Reference firmware
- CVE-2018-12202Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th GenerationIntel Platform Sample / Silicon Reference firmware
- CVE-2018-12203Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation IntelIntel Platform Sample / Silicon Reference firmware
- CVE-2018-12204Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) CompIntel Platform Sample / Silicon Reference firmware
- CVE-2018-12205Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th GeneratioIntel Platform Sample / Silicon Reference firmware
- CVE-2018-12208Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.Intel(R) CSME, Server Platform Services, Trusted Execution…
- CVE-2018-12209Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10Intel(R) Graphics Driver for Windows
- CVE-2018-12210Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12211Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12212Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (Intel(R) Graphics Driver for Windows
- CVE-2018-12213Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12214Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12215Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12216Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12217Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), Intel(R) Graphics Driver for Windows
- CVE-2018-12218Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.50Intel(R) Graphics Driver for Windows
- CVE-2018-12219Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12220Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10Intel(R) Graphics Driver for Windows
- CVE-2018-12221Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12222Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059)Intel(R) Graphics Driver for Windows
- CVE-2018-12223Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10Intel(R) Graphics Driver for Windows
- CVE-2018-12224Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15Intel(R) Graphics Driver for Windows
- CVE-2018-18089Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.xIntel(R) Graphics Driver for Windows
- CVE-2018-18090Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (akIntel(R) Graphics Driver for Windows
- CVE-2018-18091Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 Intel(R) Graphics Driver for Windows
- CVE-2019-0121Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalatiIntel(R) Matrix Storage Manager
- CVE-2019-0122Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated Intel(R) Software Guard Extensions SDK
- CVE-2019-0129Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of pIntel(R) USB 3.0 Creator Utility
- CVE-2019-0135Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an autheIntel(R) Accelerated Storage Manager in RSTe Advisory
- CVE-2018-20801In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denhighcharts
- CVE-2019-9787WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default conf
- CVE-2019-9785gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.t
- CVE-2019-9765In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templ
- CVE-2019-9766Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary co
- CVE-2019-9767Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary co
- CVE-2019-9768Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it e
- CVE-2019-9769PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator.
- CVE-2019-9770An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9771An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9772An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9773An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9774An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9775An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9776An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9777An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9778An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9779An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645.
- CVE-2019-9760FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that
- CVE-2019-9761An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authenticat
- CVE-2019-9762A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id.