CVEs published March 22, 2019
18 CVEs were published on March 22, 2019: 0 critical, 7 high.
- Published
- 18
- Critical
- 0
- High
- 7
- Medium
- 1
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Cisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Confere…
- 3
- Cisco IP Phone 8800 Series Software
- 1
- Cisco Unified IP Conference Phone · Cisco Wireless IP Ph… +1
- 1
- CoreFtp
- 1
- IBM API Connect
- 1
- IBM Content Navigator
- 1
High 7
- CVE-2019-1716Cisco IP Phone 7800 Series and 8800 Series Remote Code Execution VulnerabilityCisco Unified IP Conference Phone · Cisco Wireless IP Ph… +1
- CVE-2019-1763Cisco IP Phone 8800 Series Authorization Bypass VulnerabilityCisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Confere…
- CVE-2019-1764Cisco IP Phone 8800 Series Cross-Site Request Forgery VulnerabilityCisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Confere…
- CVE-2019-1765Cisco IP Phone 8800 Series Path Traversal VulnerabilityCisco Wireless IP Phone 8821 and 8821-EX · Cisco IP Confere…
- CVE-2019-1766Cisco IP Phone 8800 Series File Upload Denial of Service VulnerabilityCisco IP Phone 8800 Series Software
- CVE-2019-4052IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users.IBM API Connect
- CVE-2019-9923pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extend
Medium, low and unrated 11
- CVE-2018-20165Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgn
- CVE-2019-9649An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.
- CVE-2019-4035IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site.IBM Content Navigator
- CVE-2019-9648An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.CoreFtp
- CVE-2019-9939The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots crea
- CVE-2019-9938The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots crea
- CVE-2019-9937In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference i
- CVE-2019-9936In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlit
- CVE-2019-9927Caret before 2019-02-22 allows Remote Code Execution.
- CVE-2019-9925S-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter.
- CVE-2019-9924rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with t