# CVEs published 2019-03-31

4 CVEs were published on March 31, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2014-7198](https://cve.now/CVE-2014-7198.md): OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection. (no CVSS)
- [CVE-2019-10678](https://cve.now/CVE-2019-10678.md): Domoticz before 4.10579 neglects to categorize \\n and \\r as insecure argument options. (no CVSS)
- [CVE-2019-10672](https://cve.now/CVE-2019-10672.md): treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. (no CVSS)
- [CVE-2019-10664](https://cve.now/CVE-2019-10664.md): Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.