CVEs published March 24, 2019
26 CVEs were published on March 24, 2019: 0 critical, 0 high. 1 is now in CISA KEV.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- league/commonmark
- 1
Medium, low and unrated 26
- CVE-2019-10027PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.
- CVE-2019-10026An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10025An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10024An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10023An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10022An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10021An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10020An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10019An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10018An issue was discovered in Xpdf 4.01.01.
- CVE-2019-10017CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Pick
- CVE-2019-10015baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, becaus
- CVE-2019-10014In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id pa
- CVE-2019-10010Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links ileague/commonmark
- CVE-2019-9978The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter
- CVE-2019-9977The renderer process in the entertainment system on Tesla Model 3 vehicles mishandles JIT compilation, which allows attackers to trigger fir
- CVE-2019-9970Open Whisper Signal (aka Signal-Desktop) through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerab
- CVE-2019-9969XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other i
- CVE-2019-9968XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other i
- CVE-2019-9967XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other i
- CVE-2019-9966XnView Classic 2.48 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other i
- CVE-2019-9965XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impa
- CVE-2019-9964XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impa
- CVE-2019-9963XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impa
- CVE-2019-9962XnView MP 0.93.1 on Windows allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impa
- CVE-2019-9960The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.