# CVEs published 2019-03-14

84 CVEs were published on March 14, 2019: 0 critical, 2 high. Days are UTC.

- [CVE-2018-1908](https://cve.now/CVE-2018-1908.md): IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Robotic Process Automation with Automation Anywhere)
- [CVE-2018-1910](https://cve.now/CVE-2018-1910.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1914](https://cve.now/CVE-2018-1914.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1916](https://cve.now/CVE-2018-1916.md): IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1929](https://cve.now/CVE-2018-1929.md): IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URL (CVSS 4.3, IBM Rational Engineering Lifecycle Manager)
- [CVE-2018-1952](https://cve.now/CVE-2018-1952.md): IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1982](https://cve.now/CVE-2018-1982.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1983](https://cve.now/CVE-2018-1983.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1984](https://cve.now/CVE-2018-1984.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2019-4034](https://cve.now/CVE-2019-4034.md): IBM Content Navigator 3.0CD is could allow an attacker to execute arbitrary code on a user's workstation. (CVSS 6.3, IBM Content Navigator)
- [CVE-2018-1658](https://cve.now/CVE-2018-1658.md): IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by im (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1688](https://cve.now/CVE-2018-1688.md): IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Collaborative Lifecycle Management)
- [CVE-2018-1759](https://cve.now/CVE-2018-1759.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1761](https://cve.now/CVE-2018-1761.md): IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Team Concert)
- [CVE-2018-1763](https://cve.now/CVE-2018-1763.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1764](https://cve.now/CVE-2018-1764.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1823](https://cve.now/CVE-2018-1823.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1824](https://cve.now/CVE-2018-1824.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1825](https://cve.now/CVE-2018-1825.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2018-1829](https://cve.now/CVE-2018-1829.md): IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager)
- [CVE-2019-3833](https://cve.now/CVE-2019-3833.md): Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process\_connection() when parsing specially crafted HTTP r (CVSS 7.5, \[UNKNOWN\] openwsman)
- [CVE-2019-9825](https://cve.now/CVE-2019-9825.md): FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set (no CVSS)
- [CVE-2018-12185](https://cve.now/CVE-2018-12185.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenti (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12187](https://cve.now/CVE-2018-12187.md): Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12188](https://cve.now/CVE-2018-12188.md): Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0 (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12189](https://cve.now/CVE-2018-12189.md): Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12190](https://cve.now/CVE-2018-12190.md): Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.6 (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12191](https://cve.now/CVE-2018-12191.md): Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services b (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12192](https://cve.now/CVE-2018-12192.md): Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services befo (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12196](https://cve.now/CVE-2018-12196.md): Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12198](https://cve.now/CVE-2018-12198.md): Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS\_E5\_04.00.04.393.0 may allow privileged (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12199](https://cve.now/CVE-2018-12199.md): Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12200](https://cve.now/CVE-2018-12200.md): Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12201](https://cve.now/CVE-2018-12201.md): Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Int (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12202](https://cve.now/CVE-2018-12202.md): Privilege escalation vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12203](https://cve.now/CVE-2018-12203.md): Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12204](https://cve.now/CVE-2018-12204.md): Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Comp (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12205](https://cve.now/CVE-2018-12205.md): Improper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation Intel(R) Core(tm) Processor, 7th Generatio (no CVSS, Intel Platform Sample / Silicon Reference firmware)
- [CVE-2018-12208](https://cve.now/CVE-2018-12208.md): Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3. (no CVSS, Intel(R) CSME, Server Platform Services, Trusted Execution…)
- [CVE-2018-12209](https://cve.now/CVE-2018-12209.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12210](https://cve.now/CVE-2018-12210.md): Multiple pointer dereferences in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12211](https://cve.now/CVE-2018-12211.md): Insufficient input validation in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12212](https://cve.now/CVE-2018-12212.md): Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 ( (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12213](https://cve.now/CVE-2018-12213.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12214](https://cve.now/CVE-2018-12214.md): Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12215](https://cve.now/CVE-2018-12215.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12216](https://cve.now/CVE-2018-12216.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12217](https://cve.now/CVE-2018-12217.md): Insufficient access control in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12218](https://cve.now/CVE-2018-12218.md): Unhandled exception in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.50 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12219](https://cve.now/CVE-2018-12219.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12220](https://cve.now/CVE-2018-12220.md): Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12221](https://cve.now/CVE-2018-12221.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12222](https://cve.now/CVE-2018-12222.md): Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059) (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12223](https://cve.now/CVE-2018-12223.md): Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-12224](https://cve.now/CVE-2018-12224.md): Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18089](https://cve.now/CVE-2018-18089.md): Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18090](https://cve.now/CVE-2018-18090.md): Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (ak (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2018-18091](https://cve.now/CVE-2018-18091.md): Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows\* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (no CVSS, Intel(R) Graphics Driver for Windows)
- [CVE-2019-0121](https://cve.now/CVE-2019-0121.md): Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalati (no CVSS, Intel(R) Matrix Storage Manager)
- [CVE-2019-0122](https://cve.now/CVE-2019-0122.md): Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated (no CVSS, Intel(R) Software Guard Extensions SDK)
- [CVE-2019-0129](https://cve.now/CVE-2019-0129.md): Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of p (no CVSS, Intel(R) USB 3.0 Creator Utility)
- [CVE-2019-0135](https://cve.now/CVE-2019-0135.md): Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authe (no CVSS, Intel(R) Accelerated Storage Manager in RSTe Advisory)
- [CVE-2018-20801](https://cve.now/CVE-2018-20801.md): In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a den (no CVSS, highcharts)
- [CVE-2019-9787](https://cve.now/CVE-2019-9787.md): WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default conf (no CVSS)
- [CVE-2019-9785](https://cve.now/CVE-2019-9785.md): gitnote 3.1.0 allows remote attackers to execute arbitrary code via a crafted Markdown file, as demonstrated by a javascript:window.parent.t (no CVSS)
- [CVE-2019-9765](https://cve.now/CVE-2019-9765.md): In Blog\_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templ (no CVSS)
- [CVE-2019-9766](https://cve.now/CVE-2019-9766.md): Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary co (no CVSS)
- [CVE-2019-9767](https://cve.now/CVE-2019-9767.md): Stack-based buffer overflow in Free MP3 CD Ripper 2.6, when converting a file, allows user-assisted remote attackers to execute arbitrary co (no CVSS)
- [CVE-2019-9768](https://cve.now/CVE-2019-9768.md): Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it e (no CVSS)
- [CVE-2019-9769](https://cve.now/CVE-2019-9769.md): PilusCart 1.4.1 is vulnerable to index.php?module=users&action=newUser CSRF, leading to the addition of a new user as administrator. (no CVSS)
- [CVE-2019-9770](https://cve.now/CVE-2019-9770.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9771](https://cve.now/CVE-2019-9771.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9772](https://cve.now/CVE-2019-9772.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9773](https://cve.now/CVE-2019-9773.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9774](https://cve.now/CVE-2019-9774.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9775](https://cve.now/CVE-2019-9775.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9776](https://cve.now/CVE-2019-9776.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9777](https://cve.now/CVE-2019-9777.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9778](https://cve.now/CVE-2019-9778.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9779](https://cve.now/CVE-2019-9779.md): An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. (no CVSS)
- [CVE-2019-9760](https://cve.now/CVE-2019-9760.md): FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-controlled machine that (no CVSS)
- [CVE-2019-9761](https://cve.now/CVE-2019-9761.md): An XXE issue was discovered in PHPSHE 1.7, which can be used to read any file in the system or scan the internal network without authenticat (no CVSS)
- [CVE-2019-9762](https://cve.now/CVE-2019-9762.md): A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. (no CVSS)
- [CVE-2019-3816](https://cve.now/CVE-2019-3816.md): Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemo (CVSS 7.5, \[UNKNOWN\] openwsman)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.