# CVEs published 2019-03-23

7 CVEs were published on March 23, 2019: 1 critical, 0 high. Days are UTC.

- [CVE-2019-9956](https://cve.now/CVE-2019-9956.md): In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to (no CVSS)
- [CVE-2015-3965](https://cve.now/CVE-2015-3965.md): Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "eleva (no CVSS, Hospira Symbiq Infusion System)
- [CVE-2016-10743](https://cve.now/CVE-2016-10743.md): hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os\_random() function call. (no CVSS)
- [CVE-2019-9948](https://cve.now/CVE-2019-9948.md): urllib in Python 2.x through 2.7.16 supports the local\_file: scheme, which makes it easier for remote attackers to bypass protection mechani (CVSS 9.1)
- [CVE-2019-9947](https://cve.now/CVE-2019-9947.md): An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. (CVSS 5.4)
- [CVE-2019-9945](https://cve.now/CVE-2019-9945.md): SoftNAS Cloud 4.2.0 and 4.2.1 allows remote command execution. (no CVSS)
- [CVE-2019-9942](https://cve.now/CVE-2019-9942.md): A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call (no CVSS, twig/twig)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.