CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- yzmcmsIn YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.6.1 Medium
xvMageiaUpdated xv packages fix a security vulnerabilityNo score- exponentcms exponent cmsIn Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.7.2 High
- 3cxOn 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file...6.5 Medium
- zonemaster web guilib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS.6.1 Medium
- ssri project ssriRegular Expression Denial of Service in ssri5.9 Medium
- advantig dualdeskProxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP...7.5 High
- segger embos\/ip ftp serverSEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service ...7.5 High
linuxDebianlinux - regression updateNo score- gemalto safenet authentication service for citrix web interface agentSafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service windows logon agentSafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service windows logon agentSafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for nps agentSafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for ad fs agentSafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation...7.8 High
- gemalto safenet authentication service for outlook web app agentSafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service remote web workplace agentSafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service tokenvalidator proxy agentSafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified...7.8 High
- gemalto safenet authentication service iis agentSafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories...7.8 High
- gemalto safenet authentication service end user software tools for windowsSafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for...7.8 High
- ithemes securityThe iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping...7.5 High
- edirectoryLogin restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface5.4 Medium
- netiq identity manager applications, identity manager +1 moreNovell Identity Manager User Application get request url contains the session token.4.3 Medium
- netiq identity managerNetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions2.0 Low
- netiq identity manager oracle ebs driver, identity manager +1 moreAvoid password disclosure via EBS event logging in the iManager Oracle driver3.3 Low
- edirectoryexisting connection is being used even though eDirectory LDAP server is upgraded to EBA4.2 Medium
- netiq access managerXSS Vulnerability in iManager5.4 Medium
- edirectoryeDirectory LDAP peer certificate validation issue6.5 Medium
- netiq privileged account managerDOM cross site scripting attack against NetIQ Privileged Account Manager4.6 Medium
- netiq identity managerNetIQ Identity Manager JDBC driver could leak passwords in exception traces3.3 Low
- edirectoryFix for NetIQ shell code upload8.8 High
- netiq access managerNetIQ Access Manager OAuth Consent screen XSS attack4.6 Medium
- netiq imanagerprivate SSL key embedded in JAR file in iManager4.3 Medium
- netiq access managerUnvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs5.4 Medium
- netiq access managerReflected xss in Admin Console REST interface4.6 Medium
- opensuse open buildservice, suse open build service +1 moreopen build service source server symlink exploitation via source patch6.3 Medium
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout...7.5 High
- ibm engineering lifecycle optimization - publishing, rational publishing engine +1 moreIBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a...4.4 Medium
- ibm spectrum scale, general parallel file system +1 moreIBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to...4.0 Medium
- uclouvain openjpegAn issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0. The output prefix was not...9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to...7.8 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd...5.5 Medium
- selinux project policycoreutils, selinux, redhat enterprise linux +2 moreContext relabeling of filesystems is vulnerable to symbolic link attack, allowing a local,...4.4 Medium
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- cimgAn issue was discovered in CImg v.220. A heap-based buffer over-read in load_bmp in CImg.h occurs...7.8 High
- hp operations orchestration, micro focus operations orchestration software +1 moreMFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)5.9 Medium
- htc customer-link bridge, volkswagen customer-link, customer-link app +2 moreThis vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages...8.8 High
- amazon music player, music +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- Show moreLoading…