CVEs published March 19, 2019
49 CVEs were published on March 19, 2019: 0 critical, 12 high.
- Published
- 49
- Critical
- 0
- High
- 12
- Medium
- 4
- Low
- 5
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Jolly Technologies Lobby Track Desktop
- 7
- eVisitorPass
- 5
- Foxit Reader
- 5
- Foxit PhantomPDF
- 4
- HID Global EasyLobby Solo
- 4
- Envoy Passport for iPhone · Envoy Passport for Android
- 2
- IBM DB2 for Linux, UNIX and Windows
- 1
- IBM MQ
- 1
- Los Trigos The Receptionist for iPad
- 1
- matrix-synapse
- 1
High 12
- CVE-2018-17497eVisitorPass contains default administrative credentials.eVisitorPass
- CVE-2018-17496eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode.eVisitorPass
- CVE-2018-17495eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help DialoeVisitorPass
- CVE-2018-17494eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Start MenueVisitorPass
- CVE-2018-17493eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Fullscreen button.eVisitorPass
- CVE-2018-17492EasyLobby Solo contains default administrative credentials.HID Global EasyLobby Solo
- CVE-2018-17491EasyLobby Solo could allow a local attacker to gain elevated privileges on the system.HID Global EasyLobby Solo
- CVE-2018-17490EasyLobby Solo is vulnerable to a denial of service.HID Global EasyLobby Solo
- CVE-2018-17488Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog.Jolly Technologies Lobby Track Desktop
- CVE-2018-17487Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog.Jolly Technologies Lobby Track Desktop
- CVE-2018-17485Lobby Track Desktop contains default administrative credentials.Jolly Technologies Lobby Track Desktop
- CVE-2019-4094IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrustedIBM DB2 for Linux, UNIX and Windows
Medium, low and unrated 37
- CVE-2018-15498YSoft SafeQ Server 6 allows a replay attack.
- CVE-2018-18473A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or
- CVE-2019-6441An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices.
- CVE-2019-6282ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html su
- CVE-2019-6279ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-b
- CVE-2019-6728This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader.Foxit Reader
- CVE-2019-6729This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader.Foxit Reader
- CVE-2019-6730This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader.Foxit Reader
- CVE-2019-6731This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF.Foxit PhantomPDF
- CVE-2019-6732This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF.Foxit PhantomPDF
- CVE-2019-6733This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF.Foxit PhantomPDF
- CVE-2019-6734This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF.Foxit PhantomPDF
- CVE-2019-6735This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader.Foxit Reader
- CVE-2019-6727This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader.Foxit Reader
- CVE-2019-6275Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbi
- CVE-2019-6274Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspec
- CVE-2018-17502The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file.Los Trigos The Receptionist for iPad
- CVE-2018-17500Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storingEnvoy Passport for iPhone · Envoy Passport for Android
- CVE-2018-17499Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storingEnvoy Passport for iPhone · Envoy Passport for Android
- CVE-2018-17489EasyLobby Solo could allow a local attacker to obtain sensitive information, caused by the storing of the social security number in plaintexHID Global EasyLobby Solo
- CVE-2018-17486Lobby Track Desktop could allow a local attacker to bypass security restrictions, caused by an error in the find visitor function while in kJolly Technologies Lobby Track Desktop
- CVE-2018-17484Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Sample Database.mdb database while iJolly Technologies Lobby Track Desktop
- CVE-2018-17483Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode.Jolly Technologies Lobby Track Desktop
- CVE-2018-17482Lobby Track Desktop could allow a local attacker to obtain sensitive information, caused by an error in Reports while in kiosk mode.Jolly Technologies Lobby Track Desktop
- CVE-2019-6273download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.
- CVE-2019-6272Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitra
- CVE-2019-6116In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code executio
- CVE-2019-9878There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pd
- CVE-2019-9877There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for
- CVE-2019-5885Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secrematrix-synapse
- CVE-2019-5729Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.splunk-sdk
- CVE-2019-5723An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6.
- CVE-2019-5722An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6.
- CVE-2019-9870plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.
- CVE-2019-9868An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.
- CVE-2019-9867An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2.
- CVE-2018-1836IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting.IBM MQ