CVEs published March 31, 2019
4 CVEs were published on March 31, 2019: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 4
- CVE-2014-7198OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
- CVE-2019-10678Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
- CVE-2019-10672treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
- CVE-2019-10664Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.