CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreNetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow...9.8 Critical
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreNetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow...7.5 High
- d-link multiple routers, dlink dir-860l firmware, dir-865l firmware +2 more +4 moreOS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR...9.8 Critical
- dlink dir-860l firmware, dir-865l firmware, dir-868l firmware +2 moreXSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and...6.1 Medium
- dlink dir-860l firmware, dir-865l firmware, dir-868l firmware +2 moreXSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04...6.1 Medium
- dlink dir-860l firmware, dir-865l firmware, dir-868l firmware +2 moreXSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L...6.1 Medium
- samsung display solutionsSamsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof...5.9 Medium
- micro focus netiq privileged account manager (pam) 3.1 and 3.2, netiq privileged account manager +1 morePAM exposure enabling unauthenticated access to remote host9.8 Critical
- netapp snapcenter, snapcenter server +1 moreVersions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and...7.2 High
- elastic elasticsearch** DISPUTED ** Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via...9.8 Critical
- afian filerunAfian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged...7.2 High
- afian filerunAfian FileRun (before 2018.02.13) suffers from a remote SQL injection vulnerability, when logged...7.2 High
- yxtcmfAn issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by...8.8 High
- yxtcmfAn issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the...9.8 Critical
- gdraheim zziplib, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function...6.5 Medium
- piwigoThe management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page...5.4 Medium
- piwigoThe management panel in Piwigo 2.9.3 has stored XSS via the virtual_name parameter in a /admin...5.4 Medium
- piwigoThe management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /ws.php?format...5.4 Medium
- mingw-w64Mingw-w64 version 5.0.3 and earlier, 5.0.4, 6.0.0 and 7.0.0 contains an Improper Null Termination...9.8 Critical
- projectsendCross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit...6.1 Medium
- projectsendCross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit...6.1 Medium
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the...7.0 High
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the...8.4 High
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA Security Engine contains a vulnerability in the Deterministic Random Bit Generator (DRBG)...5.5 Medium
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write...5.5 Medium
- google android, nvidia shield tv, shield tv firmware +2 moreNVIDIA Tegra kernel driver contains a vulnerability in NVMAP where an attacker has the ability to...7.8 High
- google androidNVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead...7.5 High
- hot scripts clone project scripts clonePHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to...4.8 Medium
- auth0 auth0.jsAuth0-js bypasses CSRF checks8.8 High
- ovirt, redhat ovirt-engine +1 moreA vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable...5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 moreDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is...5.5 Medium
- exempi project exempi, canonical ubuntu linux +1 moreAn issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp...5.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the...6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered...6.5 Medium
- ntp, canonical ubuntu linux, hpe hpux-ntp +13 more +15 moreThe protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of...7.5 High
- ntp, canonical ubuntu linux, netapp cloud backup +7 more +9 morentpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp,...7.5 High
- ntp, canonical ubuntu linux, netapp element software +2 moreThe ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a...7.5 High
- debian linux, linux kernel, redhat enterprise linux desktop +3 more +5 moreIn the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an...5.5 Medium
- gpac project gpac, canonical ubuntu linux +1 moreGPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia...7.8 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreclamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated,...5.5 Medium
- kubik-rubik simple image gallery extendedThe htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery...6.1 Medium
- privatevpnPrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com...9.8 Critical
- privatevpnPrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com...9.8 Critical
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- opencv** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in...7.5 High
- Show moreLoading…