# CVEs published 2019-04-03

202 CVEs were published on April 3, 2019: 0 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-5384](https://cve.now/CVE-2015-5384.md): AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack. (no CVSS)
- [CVE-2015-5462](https://cve.now/CVE-2015-5462.md): AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features. (no CVSS)
- [CVE-2015-5463](https://cve.now/CVE-2015-5463.md): AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote (no CVSS)
- [CVE-2015-5606](https://cve.now/CVE-2015-5606.md): Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted reque (no CVSS)
- [CVE-2019-10240](https://cve.now/CVE-2019-10240.md): Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. (no CVSS, The Eclipse Foundation Eclipse hawkBit · org.eclipse.haw… +9)
- [CVE-2018-4300](https://cve.now/CVE-2018-4300.md): The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interfac (no CVSS, CUPS)
- [CVE-2018-20505](https://cve.now/CVE-2018-20505.md): SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2018-20506](https://cve.now/CVE-2018-20506.md): SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in (no CVSS)
- [CVE-2017-13911](https://cve.now/CVE-2017-13911.md): A configuration issue was addressed with additional restrictions. (no CVSS, OS X, macOS)
- [CVE-2018-4427](https://cve.now/CVE-2018-4427.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, watchOS, tvOS, macOS)
- [CVE-2018-4379](https://cve.now/CVE-2018-4379.md): A lock screen issue allowed access to the share function on a locked device. (no CVSS, iOS)
- [CVE-2018-4380](https://cve.now/CVE-2018-4380.md): A lock screen issue allowed access to photos and contacts on a locked device. (no CVSS, iOS)
- [CVE-2018-4397](https://cve.now/CVE-2018-4397.md): Analytics data was sent using HTTP rather than HTTPS. (no CVSS, Apple Support app)
- [CVE-2018-4437](https://cve.now/CVE-2018-4437.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4438](https://cve.now/CVE-2018-4438.md): A logic issue existed resulting in memory corruption. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4439](https://cve.now/CVE-2018-4439.md): A logic issue was addressed with improved validation. (no CVSS, iOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4440](https://cve.now/CVE-2018-4440.md): A logic issue was addressed with improved state management. (no CVSS, iOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4441](https://cve.now/CVE-2018-4441.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4442](https://cve.now/CVE-2018-4442.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4443](https://cve.now/CVE-2018-4443.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4445](https://cve.now/CVE-2018-4445.md): "Clear History and Website Data" did not clear the history. (no CVSS, iOS, Safari)
- [CVE-2018-4446](https://cve.now/CVE-2018-4446.md): This issue was addressed with improved entitlements. (no CVSS, iOS)
- [CVE-2018-4447](https://cve.now/CVE-2018-4447.md): A memory corruption issue was addressed with improved state management. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4449](https://cve.now/CVE-2018-4449.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4450](https://cve.now/CVE-2018-4450.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4456](https://cve.now/CVE-2018-4456.md): A memory corruption issue was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4460](https://cve.now/CVE-2018-4460.md): A denial of service issue was addressed by removing the vulnerable code. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4461](https://cve.now/CVE-2018-4461.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4462](https://cve.now/CVE-2018-4462.md): A validation issue was addressed with improved input sanitization. (no CVSS, macOS)
- [CVE-2018-4463](https://cve.now/CVE-2018-4463.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4464](https://cve.now/CVE-2018-4464.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4465](https://cve.now/CVE-2018-4465.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4470](https://cve.now/CVE-2018-4470.md): A privacy issue in the handling of Open Directory records was addressed with improved indexing. (no CVSS, macOS)
- [CVE-2018-4409](https://cve.now/CVE-2018-4409.md): A resource exhaustion issue was addressed with improved input validation. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4410](https://cve.now/CVE-2018-4410.md): A memory corruption issue was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4411](https://cve.now/CVE-2018-4411.md): A memory corruption issue was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4412](https://cve.now/CVE-2018-4412.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4413](https://cve.now/CVE-2018-4413.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4414](https://cve.now/CVE-2018-4414.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4415](https://cve.now/CVE-2018-4415.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4416](https://cve.now/CVE-2018-4416.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4417](https://cve.now/CVE-2018-4417.md): A validation issue was addressed with improved input sanitization. (no CVSS, macOS)
- [CVE-2018-4418](https://cve.now/CVE-2018-4418.md): A validation issue was addressed with improved input sanitization. (no CVSS, macOS)
- [CVE-2018-4419](https://cve.now/CVE-2018-4419.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4420](https://cve.now/CVE-2018-4420.md): A memory corruption issue was addressed by removing the vulnerable code. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4421](https://cve.now/CVE-2018-4421.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4422](https://cve.now/CVE-2018-4422.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4423](https://cve.now/CVE-2018-4423.md): A logic issue was addressed with improved validation. (no CVSS, macOS)
- [CVE-2018-4424](https://cve.now/CVE-2018-4424.md): A buffer overflow was addressed with improved size validation. (no CVSS, macOS)
- [CVE-2018-4425](https://cve.now/CVE-2018-4425.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4426](https://cve.now/CVE-2018-4426.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4429](https://cve.now/CVE-2018-4429.md): A spoofing issue existed in the handling of URLs. (no CVSS, iOS, watchOS)
- [CVE-2018-4430](https://cve.now/CVE-2018-4430.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, iOS)
- [CVE-2018-4431](https://cve.now/CVE-2018-4431.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4434](https://cve.now/CVE-2018-4434.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4435](https://cve.now/CVE-2018-4435.md): A logic issue was addressed with improved restrictions. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4436](https://cve.now/CVE-2018-4436.md): A certificate validation issue existed in configuration profiles. (no CVSS, iOS, tvOS, watchOS)
- [CVE-2018-4377](https://cve.now/CVE-2018-4377.md): A cross-site scripting issue existed in Safari. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4378](https://cve.now/CVE-2018-4378.md): A memory corruption issue was addressed with improved validation. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4382](https://cve.now/CVE-2018-4382.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4383](https://cve.now/CVE-2018-4383.md): A memory corruption issue was addressed with improved state management. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4384](https://cve.now/CVE-2018-4384.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, watchOS)
- [CVE-2018-4385](https://cve.now/CVE-2018-4385.md): A logic issue was addressed with improved state management. (no CVSS, iOS)
- [CVE-2018-4386](https://cve.now/CVE-2018-4386.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4387](https://cve.now/CVE-2018-4387.md): A lock screen issue allowed access to photos via Reply With Message on a locked device. (no CVSS, iOS)
- [CVE-2018-4388](https://cve.now/CVE-2018-4388.md): A lock screen issue allowed access to the share function on a locked device. (no CVSS, iOS)
- [CVE-2018-4389](https://cve.now/CVE-2018-4389.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, macOS)
- [CVE-2018-4392](https://cve.now/CVE-2018-4392.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4393](https://cve.now/CVE-2018-4393.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4394](https://cve.now/CVE-2018-4394.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows)
- [CVE-2018-4395](https://cve.now/CVE-2018-4395.md): This issue was addressed with improved checks. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4396](https://cve.now/CVE-2018-4396.md): A validation issue was addressed with improved input sanitization. (no CVSS, macOS)
- [CVE-2018-4398](https://cve.now/CVE-2018-4398.md): An issue existed in the method for determining prime numbers. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4399](https://cve.now/CVE-2018-4399.md): An access issue existed with privileged API calls. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4400](https://cve.now/CVE-2018-4400.md): A validation issue was addressed with improved logic. (no CVSS, iOS, macOS, watchOS)
- [CVE-2018-4401](https://cve.now/CVE-2018-4401.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4402](https://cve.now/CVE-2018-4402.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4403](https://cve.now/CVE-2018-4403.md): This issue was addressed by removing additional entitlements. (no CVSS, macOS)
- [CVE-2018-4406](https://cve.now/CVE-2018-4406.md): A denial of service issue was addressed with improved validation. (no CVSS, macOS)
- [CVE-2018-4408](https://cve.now/CVE-2018-4408.md): A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvO (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4351](https://cve.now/CVE-2018-4351.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4352](https://cve.now/CVE-2018-4352.md): A consistency issue existed in the handling of application snapshots. (no CVSS, iOS)
- [CVE-2018-4353](https://cve.now/CVE-2018-4353.md): A configuration issue was addressed with additional restrictions. (no CVSS, macOS)
- [CVE-2018-4354](https://cve.now/CVE-2018-4354.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4355](https://cve.now/CVE-2018-4355.md): A configuration issue was addressed with additional restrictions. (no CVSS, iOS, macOS)
- [CVE-2018-4356](https://cve.now/CVE-2018-4356.md): A permissions issue existed. (no CVSS, iOS)
- [CVE-2018-4357](https://cve.now/CVE-2018-4357.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Xcode)
- [CVE-2018-4358](https://cve.now/CVE-2018-4358.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4359](https://cve.now/CVE-2018-4359.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4360](https://cve.now/CVE-2018-4360.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4361](https://cve.now/CVE-2018-4361.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4362](https://cve.now/CVE-2018-4362.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Safari, iOS)
- [CVE-2018-4363](https://cve.now/CVE-2018-4363.md): An input validation issue existed in the kernel. (no CVSS, iOS, tvOS, watchOS)
- [CVE-2018-4365](https://cve.now/CVE-2018-4365.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, iOS)
- [CVE-2018-4366](https://cve.now/CVE-2018-4366.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS)
- [CVE-2018-4367](https://cve.now/CVE-2018-4367.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS)
- [CVE-2018-4368](https://cve.now/CVE-2018-4368.md): A denial of service issue was addressed with improved validation. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4369](https://cve.now/CVE-2018-4369.md): A logic issue was addressed with improved state management. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4371](https://cve.now/CVE-2018-4371.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4372](https://cve.now/CVE-2018-4372.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4373](https://cve.now/CVE-2018-4373.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4374](https://cve.now/CVE-2018-4374.md): A logic issue was addressed with improved validation. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4375](https://cve.now/CVE-2018-4375.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4376](https://cve.now/CVE-2018-4376.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4323](https://cve.now/CVE-2018-4323.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4324](https://cve.now/CVE-2018-4324.md): A permissions issue existed in the handling of the Apple ID. (no CVSS, macOS)
- [CVE-2018-4325](https://cve.now/CVE-2018-4325.md): A logic issue was addressed with improved restrictions. (no CVSS, iOS)
- [CVE-2018-4326](https://cve.now/CVE-2018-4326.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS)
- [CVE-2018-4327](https://cve.now/CVE-2018-4327.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS)
- [CVE-2018-4328](https://cve.now/CVE-2018-4328.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4329](https://cve.now/CVE-2018-4329.md): Clearing a history item may not clear visits with redirect chains. (no CVSS, iOS, Safari)
- [CVE-2018-4331](https://cve.now/CVE-2018-4331.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4332](https://cve.now/CVE-2018-4332.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4333](https://cve.now/CVE-2018-4333.md): A validation issue was addressed with improved input sanitization. (no CVSS, iOS, macOS)
- [CVE-2018-4334](https://cve.now/CVE-2018-4334.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4335](https://cve.now/CVE-2018-4335.md): A validation issue was addressed with improved input sanitization. (no CVSS, iOS)
- [CVE-2018-4336](https://cve.now/CVE-2018-4336.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4337](https://cve.now/CVE-2018-4337.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4338](https://cve.now/CVE-2018-4338.md): A validation issue was addressed with improved input sanitization. (no CVSS, macOS)
- [CVE-2018-4340](https://cve.now/CVE-2018-4340.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4341](https://cve.now/CVE-2018-4341.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4342](https://cve.now/CVE-2018-4342.md): A configuration issue was addressed with additional restrictions. (no CVSS, macOS)
- [CVE-2018-4343](https://cve.now/CVE-2018-4343.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4344](https://cve.now/CVE-2018-4344.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, KEV, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4345](https://cve.now/CVE-2018-4345.md): A cross-site scripting issue existed in Safari. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4346](https://cve.now/CVE-2018-4346.md): A validation issue existed which allowed local file access. (no CVSS, macOS)
- [CVE-2018-4347](https://cve.now/CVE-2018-4347.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4348](https://cve.now/CVE-2018-4348.md): A validation issue was addressed with improved logic. (no CVSS, macOS)
- [CVE-2018-4350](https://cve.now/CVE-2018-4350.md): A memory corruption issue was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4289](https://cve.now/CVE-2018-4289.md): An information disclosure issue was addressed by removing the vulnerable code. (no CVSS, macOS)
- [CVE-2018-4290](https://cve.now/CVE-2018-4290.md): A denial of service issue was addressed with improved memory handling. (no CVSS, iOS, watchOS)
- [CVE-2018-4293](https://cve.now/CVE-2018-4293.md): A cookie management issue was addressed with improved checks. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4295](https://cve.now/CVE-2018-4295.md): An input validation issue was addressed with improved input validation. (no CVSS, macOS)
- [CVE-2018-4299](https://cve.now/CVE-2018-4299.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4303](https://cve.now/CVE-2018-4303.md): An input validation issue was addressed with improved input validation. (no CVSS, macOS, iOS, tvOS, watchOS)
- [CVE-2018-4304](https://cve.now/CVE-2018-4304.md): A denial of service issue was addressed with improved validation. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4305](https://cve.now/CVE-2018-4305.md): An input validation issue was addressed with improved input validation. (no CVSS, iOS, tvOS, watchOS)
- [CVE-2018-4306](https://cve.now/CVE-2018-4306.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4307](https://cve.now/CVE-2018-4307.md): A logic issue was addressed with improved state management. (no CVSS, iOS, Safari)
- [CVE-2018-4308](https://cve.now/CVE-2018-4308.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, macOS)
- [CVE-2018-4309](https://cve.now/CVE-2018-4309.md): A cross-site scripting issue existed in Safari. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4310](https://cve.now/CVE-2018-4310.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, iOS, macOS)
- [CVE-2018-4311](https://cve.now/CVE-2018-4311.md): The issue was addressed by removing origin information. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4312](https://cve.now/CVE-2018-4312.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4313](https://cve.now/CVE-2018-4313.md): A consistency issue existed in the handling of application snapshots. (no CVSS, iOS, tvOS, watchOS)
- [CVE-2018-4314](https://cve.now/CVE-2018-4314.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4315](https://cve.now/CVE-2018-4315.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4316](https://cve.now/CVE-2018-4316.md): A memory corruption issue was addressed with improved state management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4317](https://cve.now/CVE-2018-4317.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4318](https://cve.now/CVE-2018-4318.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4319](https://cve.now/CVE-2018-4319.md): A cross-origin issue existed with "iframe" elements. (no CVSS, iOS, watchOS, Safari, iTunes for Windows, iCloud for Windo…)
- [CVE-2018-4321](https://cve.now/CVE-2018-4321.md): A validation issue existed in the entitlement verification. (no CVSS, iOS, macOS, tvOS)
- [CVE-2018-4322](https://cve.now/CVE-2018-4322.md): This issue was addressed with improved entitlements. (no CVSS, iOS)
- [CVE-2018-4261](https://cve.now/CVE-2018-4261.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4263](https://cve.now/CVE-2018-4263.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4264](https://cve.now/CVE-2018-4264.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4265](https://cve.now/CVE-2018-4265.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4266](https://cve.now/CVE-2018-4266.md): A race condition was addressed with additional validation. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4267](https://cve.now/CVE-2018-4267.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4268](https://cve.now/CVE-2018-4268.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4269](https://cve.now/CVE-2018-4269.md): A memory corruption issue was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4270](https://cve.now/CVE-2018-4270.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4271](https://cve.now/CVE-2018-4271.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4272](https://cve.now/CVE-2018-4272.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4273](https://cve.now/CVE-2018-4273.md): Multiple memory corruption issues were addressed with improved input validation. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4274](https://cve.now/CVE-2018-4274.md): A spoofing issue existed in the handling of URLs. (no CVSS, iOS, Safari)
- [CVE-2018-4275](https://cve.now/CVE-2018-4275.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS)
- [CVE-2018-4276](https://cve.now/CVE-2018-4276.md): A null pointer dereference was addressed with improved validation. (no CVSS, macOS)
- [CVE-2018-4279](https://cve.now/CVE-2018-4279.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Safari)
- [CVE-2018-4280](https://cve.now/CVE-2018-4280.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4282](https://cve.now/CVE-2018-4282.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, iOS, tvOS, watchOS)
- [CVE-2018-4283](https://cve.now/CVE-2018-4283.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, macOS)
- [CVE-2018-4284](https://cve.now/CVE-2018-4284.md): A type confusion issue was addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4285](https://cve.now/CVE-2018-4285.md): A type confusion issue was addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2017-7151](https://cve.now/CVE-2017-7151.md): A race condition was addressed with additional validation. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows)
- [CVE-2018-4126](https://cve.now/CVE-2018-4126.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, iOS, macOS, tvOS, watchOS, iTunes for Windows, iCloud for…)
- [CVE-2018-4145](https://cve.now/CVE-2018-4145.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4153](https://cve.now/CVE-2018-4153.md): An injection issue was addressed with improved validation. (no CVSS, macOS)
- [CVE-2018-4178](https://cve.now/CVE-2018-4178.md): A permissions issue existed in which execute permission was incorrectly granted. (no CVSS, macOS)
- [CVE-2018-4191](https://cve.now/CVE-2018-4191.md): A memory corruption issue was addressed with improved validation. (no CVSS, iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for…)
- [CVE-2018-4195](https://cve.now/CVE-2018-4195.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Safari)
- [CVE-2018-4197](https://cve.now/CVE-2018-4197.md): A use after free issue was addressed with improved memory management. (no CVSS, iOS, tvOS, Safari, iTunes for Windows, iCloud for Windows)
- [CVE-2018-4203](https://cve.now/CVE-2018-4203.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4216](https://cve.now/CVE-2018-4216.md): A logic issue existed in the handling of call URLs. (no CVSS, iOS)
- [CVE-2018-4248](https://cve.now/CVE-2018-4248.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, iOS, macOS, tvOS, watchOS)
- [CVE-2018-4260](https://cve.now/CVE-2018-4260.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, iOS, Safari)
- [CVE-2019-10723](https://cve.now/CVE-2019-10723.md): An issue was discovered in PoDoFo 0.9.6. (no CVSS)
- [CVE-2019-5423](https://cve.now/CVE-2019-5423.md): Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a r (no CVSS, Npm http-live-simulator · http-live-simulator)
- [CVE-2019-5422](https://cve.now/CVE-2019-5422.md): XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbit (no CVSS, Npm buttle · buttle)
- [CVE-2019-5421](https://cve.now/CVE-2019-5421.md): Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The \`Devise::Models::Lockable\` (no CVSS, Plataformatec Devise ruby gem · devise)
- [CVE-2019-10261](https://cve.now/CVE-2019-10261.md): CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functi (no CVSS)
- [CVE-2019-4014](https://cve.now/CVE-2019-4014.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could (CVSS 8.4, IBM DB2)
- [CVE-2018-1936](https://cve.now/CVE-2018-1936.md): IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which coul (CVSS 8.4, IBM DB2)
- [CVE-2018-1913](https://cve.now/CVE-2018-1913.md): IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational DOORS Next Generation)
- [CVE-2018-1731](https://cve.now/CVE-2018-1731.md): IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. (CVSS 4.8, IBM Rational DOORS Next Generation)
- [CVE-2019-10673](https://cve.now/CVE-2019-10673.md): A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to b (no CVSS)
- [CVE-2018-4259](https://cve.now/CVE-2018-4259.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4286](https://cve.now/CVE-2018-4286.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4287](https://cve.now/CVE-2018-4287.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4288](https://cve.now/CVE-2018-4288.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4291](https://cve.now/CVE-2018-4291.md): Multiple memory corruption issues were addressed with improved memory handling. (no CVSS, macOS)
- [CVE-2018-4407](https://cve.now/CVE-2018-4407.md): A memory corruption issue was addressed with improved validation. (no CVSS, iOS, macOS, tvOS, watchOS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-04-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.