CVEs published March 23, 2019
7 CVEs were published on March 23, 2019: 1 critical, 0 high.
- Published
- 7
- Critical
- 1
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Hospira Symbiq Infusion System
- 1
- twig/twig
- 1
Critical 1
Medium, low and unrated 6
- CVE-2019-9956In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to
- CVE-2015-3965Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevaHospira Symbiq Infusion System
- CVE-2016-10743hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.
- CVE-2019-9947An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.
- CVE-2019-9945SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution.
- CVE-2019-9942A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to calltwig/twig