CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- simplesamlphpSimpleSAMLphp Improper Verification of Cryptographic Signature7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs...6.5 Medium
- linux kernelThe netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob...4.7 Medium
- enalean tuleapAn issue was discovered in Enalean Tuleap 9.17. Lack of CSRF attack mitigation while changing an...8.8 High
- drupal, drupal core, drupal.org drupal core +2 moreDrupal Settings Tray access bypass6.5 Medium
- drupal, drupal core, drupal.org drupal core +2 moreDrupal access bypass vulnerability8.1 High
- drupal, drupal core, drupal.org drupal core +2 moreDrupal Comment reply form allows access to restricted content8.1 High
- debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 moreMIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...3.8 Low
- debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 moreMIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...4.7 Medium
- hooskCSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.8.8 High
- imagely nextgen galleryIn the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.7.5 High
- jerryscriptAn issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the...9.8 Critical
- wowza streaming engineAn issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in...6.1 Medium
- wowza streaming engineAn issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service ...7.5 High
- wowza streaming engineAn issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file...9.8 Critical
- imagemagickIn ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function...9.8 Critical
- nextcloud, opensuse leap +1 morenextcloud package security issues with /srv/www/htdocs7.8 High
- opensuse zypper, fedoraproject fedora +1 moreproxy credentials written to log files by zypper4.0 Medium
- opensuse open build serviceopen-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions4.4 Medium
- netiq identity manager, identity manager plug-ins +1 moreiManager - XML External Entity vulnerabilities5.4 Medium
- opensuse open build serviceOBS worker VM escape via relative symbolic links5.0 Medium
- netiq access managerReflected xss on Access Manager iManager UI5.4 Medium
- netiq access managerXSS Vulnerability with ESP URL4.6 Medium
- yzmcms\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the...7.2 High
- ftpshell clientAn issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F...9.8 Critical
- citrix netscaler gateway, netscaler sd-wan, netscaler application delivery controller +2 moreCommand injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build...7.5 High
- sap se crm, sap customer relationship management (crm), customer relationship management +2 moreSAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation...6.6 Medium
- sap netweaver system landscape directory, sap se netweaver system landscape directory, lm-core +1 moreSAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform...9.8 Critical
- sap business application software integrated solution, sap se basis (abap file interface) +1 moreABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7...8.8 High
- sap netweaver portal, sap se netweaver portal webdynpro runtime +1 moreSAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user...6.1 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5...5.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP ...5.9 Medium
- f5 big-ip asm, big-ip application security manager +1 moreOn F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreUnder certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles...7.5 High
- tendacn ac9 firmwareStack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers...9.8 Critical
- apache xerces-c\+\+, apache software foundation xerces c++ +1 moreIn Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result...9.8 Critical
- python** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 Medium
- cimgAn issue was discovered in CImg v.220. A double free in load_bmp in CImg.h occurs when loading a...7.8 High
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- cimgAn issue was discovered in CImg v.220. DoS occurs when loading a crafted bmp image that triggers...7.8 High
- php, canonical ubuntu linux, debian linux +2 moreIn PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there...9.8 Critical
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...8.8 High
- comforte swapcomforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (as used in SSLOBJ on HPE NonStop SSL...5.3 Medium
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpd5.9 Medium
- isc dhcpA specially constructed response from a malicious server can cause a buffer overflow in dhclient7.5 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreIn the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL...8.8 High
- linux kernelThe madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local...5.5 Medium