CVEs published March 29, 2019
22 CVEs were published on March 29, 2019: 0 critical, 3 high.
- Published
- 22
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Atlassian Crowd
- 5
- Atlassian Application Links
- 1
- Norton Core
- 1
High 3
Medium, low and unrated 19
- CVE-2018-18766An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905.
- CVE-2018-19201A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'userna
- CVE-2018-15840TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by
- CVE-2018-20378The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticat
- CVE-2019-9922An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.
- CVE-2019-9919An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!.
- CVE-2017-18111The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 beforeAtlassian Application Links
- CVE-2017-18110The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remoteAtlassian Crowd
- CVE-2017-18109The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers toAtlassian Crowd
- CVE-2017-18108The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights tAtlassian Crowd
- CVE-2017-18106The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for anotheAtlassian Crowd
- CVE-2017-18105The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who Atlassian Crowd
- CVE-2019-9604PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.
- CVE-2019-9605PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture uplo
- CVE-2019-9695Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential oNorton Core
- CVE-2019-6481Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to
- CVE-2019-10477The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
- CVE-2019-10276Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file wi
- CVE-2019-10269BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequ