CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- simplesamlphp saml2, simplesamlphp, debian linux +2 moreSimpleSAMLphp saml2 incorrect signature validation8.1 High
- graphicsmagickThe ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow...8.8 High
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found...6.5 Medium
- cactusvpnCactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its...9.8 Critical
- linux kernelIn drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can...7.8 High
- invoiceplaneAn issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and...6.1 Medium
- d-link mydlink\+An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05...8.1 High
- huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 moreMate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive...5.5 Medium
- huawei eva-al10 firmware, eva-cl00 firmware, eva-dl00 firmware +7 more +9 moreSome Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA...3.3 Low
- huawei dp300 firmware, espace u1960 firmware, espace u1981 firmware +10 more +12 moreBackup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200;...5.3 Medium
- huawei dp300 firmware, espace u1960 firmware, espace u1981 firmware +10 more +12 moreSIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300;...5.3 Medium
- huawei dp300 firmware, espace u1960 firmware, espace u1981 firmware +10 more +12 moreSIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300;...5.3 Medium
- huawei s12700 firmware, s1700 firmware, s2700 firmware +6 more +8 moreHuawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00;...3.7 Low
- huawei enjoy 5s firmware, y6 pro firmware, huawei technologies co., ltd. enjoy 5s; y6 pro +2 moreHuawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the...5.5 Medium
- huawei mate 9 firmware, mate 9 pro firmware, huawei technologies co., ltd. mate 9; mate 9 pro +2 moreHuawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334...5.5 Medium
- huawei dp300 firmware, ips module firmware, ngfw module firmware +22 more +24 morePEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00;...5.5 Medium
- huawei dp300 firmware, ips module firmware, ngfw module firmware +22 more +24 morePEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module...5.5 Medium
- huawei dp300 firmware, ips module firmware, ngfw module firmware +22 more +24 morePEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module...5.5 Medium
- huawei dp300 firmware, ips module firmware, ngfw module firmware +22 more +24 morePEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module...5.5 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreXML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10;...5.5 Medium
- huawei vp9660, vp9660 firmware +1 moreHuawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to...5.5 Medium
- huawei vp9660, vp9660 firmware +1 moreHuawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module...5.5 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50...5.7 Medium
- arista eosThe Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers...6.5 Medium
- xv project xv, opensuse leap +1 morexvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields,...9.8 Critical
- cavium nitrox ssl sdk, nitrox v ssl sdk, octeon sdk +11 more +13 moreCavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote...5.9 Medium
- wowza streaming engineIn com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1,...5.3 Medium
- moxa oncell g3110-hspa-t firmware, oncell g3110-hspa firmware, oncell g3150-hspa-t firmware +1 more +3 moreA Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa...9.8 Critical
- moxa oncell g3110-hspa-t firmware, oncell g3110-hspa firmware, oncell g3150-hspa-t firmware +1 more +3 moreAn Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100...7.5 High
- moxa oncell g3110-hspa-t firmware, oncell g3110-hspa firmware, oncell g3150-hspa-t firmware +1 more +3 moreA NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4...6.5 Medium
- qnap qfinder proQNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices...7.5 High
- netiq privileged account managerCross site scripting attacks against NetIQ Privileged Account Manager4.6 Medium
- netiq identity manageriManager - Multiple Reflected Cross-Site Scripting attacks5.4 Medium
- torproject torA use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers...7.5 High
- torproject tor, debian linux +1 moreAn issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2...7.5 High
- apache odeApache ODE Path Traversal vulnerability7.5 High
qemuUbuntuqemu regressionNo score- testlinkTestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID...7.5 High
- adminervrana/adminer vulnerable to SSRF by connecting to privileged ports9.8 Critical
- clip-bucket clipbucketAn issue was discovered in ClipBucket before 4.0.0 Release 4902. SQL injection vulnerabilities...9.8 Critical
- clip-bucket clipbucketAn issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded...9.8 Critical
- clip-bucket clipbucketAn issue was discovered in ClipBucket before 4.0.0 Release 4902. Any OS commands can be injected...9.8 Critical
- votenAn issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25....6.1 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 moreMemcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network...7.5 High
- linux kernelIn fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial...5.5 Medium
- couchcms couchCouch through 2.0 allows remote attackers to discover the full path via a direct request to...5.3 Medium
- babyphonemobile wifi baby monitorPapenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio...5.3 Medium
- momentjs moment, tenable nessus +1 moreRegular Expression Denial of Service in moment7.5 High
- otrs** DISPUTED ** In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5...7.2 High
- aws-lambda-multipart-parser project aws-lambda-multipart-parserAWS Lambda parser is vulnerable to Regular Expression Denial of Service7.5 High
- Show moreLoading…