CVEs published April 3, 2019
202 CVEs were published on April 3, 2019: 0 critical, 3 high. 1 is now in CISA KEV.
- Published
- 202
- Critical
- 0
- High
- 3
- Medium
- 2
- Low
- 0
- Unrated
- 197
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- macOS
- 45
- iOS, macOS, tvOS, watchOS
- 33
- iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- 25
- iOS
- 18
- iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- 18
- iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- 7
- iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- 7
- iOS, Safari
- 5
- iOS, tvOS, watchOS
- 5
- iOS, macOS
- 4
High 3
- CVE-2018-4344A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2019-4014IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could IBM DB2
- CVE-2018-1936IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which coulIBM DB2
Medium, low and unrated 199
- CVE-2015-5384AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
- CVE-2015-5462AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features.
- CVE-2015-5463AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote
- CVE-2015-5606Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted reque
- CVE-2019-10240Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS.The Eclipse Foundation Eclipse hawkBit · org.eclipse.haw… +9
- CVE-2018-4300The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interfacCUPS
- CVE-2018-20505SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (applicati
- CVE-2018-20506SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in
- CVE-2017-13911A configuration issue was addressed with additional restrictions.OS X, macOS
- CVE-2018-4427A memory corruption issue was addressed with improved memory handling.watchOS, tvOS, macOS
- CVE-2018-4379A lock screen issue allowed access to the share function on a locked device.iOS
- CVE-2018-4380A lock screen issue allowed access to photos and contacts on a locked device.iOS
- CVE-2018-4397Analytics data was sent using HTTP rather than HTTPS.Apple Support app
- CVE-2018-4437Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4438A logic issue existed resulting in memory corruption.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4439A logic issue was addressed with improved validation.iOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4440A logic issue was addressed with improved state management.iOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4441A memory corruption issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4442A memory corruption issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4443A memory corruption issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4445"Clear History and Website Data" did not clear the history.iOS, Safari
- CVE-2018-4446This issue was addressed with improved entitlements.iOS
- CVE-2018-4447A memory corruption issue was addressed with improved state management.iOS, macOS, tvOS, watchOS
- CVE-2018-4449A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4450A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4456A memory corruption issue was addressed with improved input validation.macOS
- CVE-2018-4460A denial of service issue was addressed by removing the vulnerable code.iOS, macOS, tvOS, watchOS
- CVE-2018-4461A memory corruption issue was addressed with improved input validation.iOS, macOS, tvOS, watchOS
- CVE-2018-4462A validation issue was addressed with improved input sanitization.macOS
- CVE-2018-4463A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4464Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4465A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4470A privacy issue in the handling of Open Directory records was addressed with improved indexing.macOS
- CVE-2018-4409A resource exhaustion issue was addressed with improved input validation.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4410A memory corruption issue was addressed with improved input validation.macOS
- CVE-2018-4411A memory corruption issue was addressed with improved input validation.macOS
- CVE-2018-4412A memory corruption issue was addressed with improved input validation.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4413A memory initialization issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4414A memory corruption issue was addressed with improved input validation.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4415A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4416Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4417A validation issue was addressed with improved input sanitization.macOS
- CVE-2018-4418A validation issue was addressed with improved input sanitization.macOS
- CVE-2018-4419A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4420A memory corruption issue was addressed by removing the vulnerable code.iOS, macOS, tvOS, watchOS
- CVE-2018-4421A memory initialization issue was addressed with improved memory handling.macOS
- CVE-2018-4422A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4423A logic issue was addressed with improved validation.macOS
- CVE-2018-4424A buffer overflow was addressed with improved size validation.macOS
- CVE-2018-4425A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4426A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4429A spoofing issue existed in the handling of URLs.iOS, watchOS
- CVE-2018-4430A lock screen issue allowed access to contacts on a locked device.iOS
- CVE-2018-4431A memory initialization issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4434An out-of-bounds read was addressed with improved input validation.macOS
- CVE-2018-4435A logic issue was addressed with improved restrictions.iOS, macOS, tvOS, watchOS
- CVE-2018-4436A certificate validation issue existed in configuration profiles.iOS, tvOS, watchOS
- CVE-2018-4377A cross-site scripting issue existed in Safari.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4378A memory corruption issue was addressed with improved validation.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4382Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4383A memory corruption issue was addressed with improved state management.iOS, macOS, tvOS, watchOS
- CVE-2018-4384A memory corruption issue was addressed with improved input validation.iOS, watchOS
- CVE-2018-4385A logic issue was addressed with improved state management.iOS
- CVE-2018-4386Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4387A lock screen issue allowed access to photos via Reply With Message on a locked device.iOS
- CVE-2018-4388A lock screen issue allowed access to the share function on a locked device.iOS
- CVE-2018-4389An inconsistent user interface issue was addressed with improved state management.macOS
- CVE-2018-4392Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4393A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4394A memory corruption issue was addressed with improved input validation.iOS, macOS, tvOS, watchOS, iTunes for Windows
- CVE-2018-4395This issue was addressed with improved checks.iOS, macOS, tvOS, watchOS
- CVE-2018-4396A validation issue was addressed with improved input sanitization.macOS
- CVE-2018-4398An issue existed in the method for determining prime numbers.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4399An access issue existed with privileged API calls.iOS, macOS, tvOS, watchOS
- CVE-2018-4400A validation issue was addressed with improved logic.iOS, macOS, watchOS
- CVE-2018-4401A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4402A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4403This issue was addressed by removing additional entitlements.macOS
- CVE-2018-4406A denial of service issue was addressed with improved validation.macOS
- CVE-2018-4408A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOiOS, macOS, tvOS, watchOS
- CVE-2018-4351A memory initialization issue was addressed with improved memory handling.macOS
- CVE-2018-4352A consistency issue existed in the handling of application snapshots.iOS
- CVE-2018-4353A configuration issue was addressed with additional restrictions.macOS
- CVE-2018-4354A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4355A configuration issue was addressed with additional restrictions.iOS, macOS
- CVE-2018-4356A permissions issue existed.iOS
- CVE-2018-4357A memory corruption issue was addressed with improved input validation.Xcode
- CVE-2018-4358Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4359Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4360Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4361A memory consumption issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4362An inconsistent user interface issue was addressed with improved state management.Safari, iOS
- CVE-2018-4363An input validation issue existed in the kernel.iOS, tvOS, watchOS
- CVE-2018-4365An out-of-bounds read was addressed with improved bounds checking.iOS
- CVE-2018-4366A memory corruption issue was addressed with improved input validation.iOS
- CVE-2018-4367A memory corruption issue was addressed with improved input validation.iOS
- CVE-2018-4368A denial of service issue was addressed with improved validation.iOS, macOS, tvOS, watchOS
- CVE-2018-4369A logic issue was addressed with improved state management.iOS, macOS, tvOS, watchOS
- CVE-2018-4371An out-of-bounds read was addressed with improved input validation.iOS, macOS, tvOS, watchOS
- CVE-2018-4372Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4373Multiple memory corruption issues were addressed with improved memory handling.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4374A logic issue was addressed with improved validation.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4375Multiple memory corruption issues were addressed with improved memory handling.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4376Multiple memory corruption issues were addressed with improved memory handling.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4323Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4324A permissions issue existed in the handling of the Apple ID.macOS
- CVE-2018-4325A logic issue was addressed with improved restrictions.iOS
- CVE-2018-4326A memory corruption issue was addressed with improved memory handling.iOS, macOS
- CVE-2018-4327A memory corruption issue was addressed with improved memory handling.iOS
- CVE-2018-4328Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4329Clearing a history item may not clear visits with redirect chains.iOS, Safari
- CVE-2018-4331A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4332A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4333A validation issue was addressed with improved input sanitization.iOS, macOS
- CVE-2018-4334A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4335A validation issue was addressed with improved input sanitization.iOS
- CVE-2018-4336A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4337A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4338A validation issue was addressed with improved input sanitization.macOS
- CVE-2018-4340A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4341A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4342A configuration issue was addressed with additional restrictions.macOS
- CVE-2018-4343A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4345A cross-site scripting issue existed in Safari.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4346A validation issue existed which allowed local file access.macOS
- CVE-2018-4347A use after free issue was addressed with improved memory management.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4348A validation issue was addressed with improved logic.macOS
- CVE-2018-4350A memory corruption issue was addressed with improved input validation.macOS
- CVE-2018-4289An information disclosure issue was addressed by removing the vulnerable code.macOS
- CVE-2018-4290A denial of service issue was addressed with improved memory handling.iOS, watchOS
- CVE-2018-4293A cookie management issue was addressed with improved checks.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4295An input validation issue was addressed with improved input validation.macOS
- CVE-2018-4299Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4303An input validation issue was addressed with improved input validation.macOS, iOS, tvOS, watchOS
- CVE-2018-4304A denial of service issue was addressed with improved validation.iOS, macOS, tvOS, watchOS
- CVE-2018-4305An input validation issue was addressed with improved input validation.iOS, tvOS, watchOS
- CVE-2018-4306A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4307A logic issue was addressed with improved state management.iOS, Safari
- CVE-2018-4308An out-of-bounds read was addressed with improved bounds checking.macOS
- CVE-2018-4309A cross-site scripting issue existed in Safari.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4310An access issue was addressed with additional sandbox restrictions.iOS, macOS
- CVE-2018-4311The issue was addressed by removing origin information.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4312A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4313A consistency issue existed in the handling of application snapshots.iOS, tvOS, watchOS
- CVE-2018-4314A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4315A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4316A memory corruption issue was addressed with improved state management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4317A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4318A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4319A cross-origin issue existed with "iframe" elements.iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…
- CVE-2018-4321A validation issue existed in the entitlement verification.iOS, macOS, tvOS
- CVE-2018-4322This issue was addressed with improved entitlements.iOS
- CVE-2018-4261Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4263Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4264Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4265Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4266A race condition was addressed with additional validation.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4267Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4268A memory corruption issue was addressed with improved memory handling.macOS
- CVE-2018-4269A memory corruption issue was addressed with improved input validation.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4270A memory corruption issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4271Multiple memory corruption issues were addressed with improved input validation.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4272Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4273Multiple memory corruption issues were addressed with improved input validation.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4274A spoofing issue existed in the handling of URLs.iOS, Safari
- CVE-2018-4275A memory corruption issue was addressed with improved memory handling.iOS
- CVE-2018-4276A null pointer dereference was addressed with improved validation.macOS
- CVE-2018-4279An inconsistent user interface issue was addressed with improved state management.Safari
- CVE-2018-4280A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS
- CVE-2018-4282An out-of-bounds read issue existed that led to the disclosure of kernel memory.iOS, tvOS, watchOS
- CVE-2018-4283An out-of-bounds read issue existed that led to the disclosure of kernel memory.macOS
- CVE-2018-4284A type confusion issue was addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4285A type confusion issue was addressed with improved memory handling.macOS
- CVE-2017-7151A race condition was addressed with additional validation.iOS, macOS, tvOS, watchOS, iTunes for Windows
- CVE-2018-4126A memory corruption issue was addressed with improved memory handling.iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…
- CVE-2018-4145Multiple memory corruption issues were addressed with improved memory handling.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4153An injection issue was addressed with improved validation.macOS
- CVE-2018-4178A permissions issue existed in which execute permission was incorrectly granted.macOS
- CVE-2018-4191A memory corruption issue was addressed with improved validation.iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…
- CVE-2018-4195An inconsistent user interface issue was addressed with improved state management.Safari
- CVE-2018-4197A use after free issue was addressed with improved memory management.iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows
- CVE-2018-4203An out-of-bounds read was addressed with improved bounds checking.iOS, macOS, tvOS, watchOS
- CVE-2018-4216A logic issue existed in the handling of call URLs.iOS
- CVE-2018-4248An out-of-bounds read was addressed with improved input validation.iOS, macOS, tvOS, watchOS
- CVE-2018-4260An inconsistent user interface issue was addressed with improved state management.iOS, Safari
- CVE-2019-10723An issue was discovered in PoDoFo 0.9.6.
- CVE-2019-5423Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a rNpm http-live-simulator · http-live-simulator
- CVE-2019-5422XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitNpm buttle · buttle
- CVE-2019-5421Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable`Plataformatec Devise ruby gem · devise
- CVE-2019-10261CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functi
- CVE-2018-1913IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2018-1731IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2019-10673A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to b
- CVE-2018-4259Multiple memory corruption issues were addressed with improved memory handling.macOS
- CVE-2018-4286Multiple memory corruption issues were addressed with improved memory handling.macOS
- CVE-2018-4287Multiple memory corruption issues were addressed with improved memory handling.macOS
- CVE-2018-4288Multiple memory corruption issues were addressed with improved memory handling.macOS
- CVE-2018-4291Multiple memory corruption issues were addressed with improved memory handling.macOS
- CVE-2018-4407A memory corruption issue was addressed with improved validation.iOS, macOS, tvOS, watchOS