CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- cisco 550x series stackable managed switches, small business 500 series stackable managed switches firmware +1 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel...7.7 High
- cisco registered envelope service, email encryption +1 moreA vulnerability in the web-based management interface of the (cloud based) Cisco Registered...5.4 Medium
- cisco secure access control server solution engineA vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior...3.3 Low
- cisco secure access control system (acs), secure access control system +1 moreA vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to...9.8 Critical
- cisco prime data center network managerA vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager...6.1 Medium
- cisco prime collaboration provisioning, prime collaboration, prime collaboration assurance +2 moreA vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an...8.4 High
- cisco asyncos, web security appliance +1 moreA vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an...5.6 Medium
- linux kernelMemory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the...5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux...5.5 Medium
- ntp, canonical ubuntu linux, freebsd +1 more +3 moreBuffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote...9.8 Critical
- linux kernelIn the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the...7.8 High
- mozilla bleachBleach URI Scheme Restriction Bypass9.8 Critical
- microfocus sentinelPotential Information Disclosure in Sentinel2.8 Low
- apache artemis, redhat hornetq, red hat, inc. hornetq/artemis +1 more +3 moreUncontrolled Resource Consumption in Artemis and HornetQ7.5 High
- polycom qdx 6000 firmwareCSRF exists on Polycom QDX 6000 devices.8.8 High
- polycom qdx 6000 firmwareStored XSS exists on Polycom QDX 6000 devices.6.1 Medium
- giribaz file managerinc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity...7.5 High
- bacula bacula-webBacula-web SQL Injection Vulnerabilities9.8 Critical
- emerson controlwave micro firmwareA Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave...7.5 High
- cobub razorAn issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for ...8.8 High
- cobub razorAn issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for ...7.5 High
- soconnect sowifi hotspot firmwareOpen redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140...6.1 Medium
- jeaseCross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to...5.4 Medium
- sinatrarb rack-protectionrack-protection gem timing attack vulnerability when validating CSRF token5.9 Medium
- electronjs electronElectron protocol handler browser vulnerable to Command Injection8.8 High
- pythonPython Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer...6.7 Medium
- net-snmp, debian linux +1 moreNET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that...9.8 Critical
- red hat, inc. 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 moreAn out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search...7.5 High
- erambaEramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI.6.1 Medium
- metinfoCross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system...6.1 Medium
- cobub razorA cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via ...8.8 High
- gpac, canonical ubuntu linux, debian linux +2 moreGPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local...5.5 Medium
- linux kernelThe __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users...5.5 Medium
- antsle antmanantsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid...9.8 Critical
- kernel util-linuxIn util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by...7.8 High
- draytek vigorap 910c firmwareCross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3...6.1 Medium
- draytek vigorap 910c firmwareCross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2...8.8 High
- exponentcms exponent cmsExponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors...9.8 Critical
- google chrome osChrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.9.8 Critical
- zblogcn z-blogphp** DISPUTED ** In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated...5.3 Medium
- zblogcn z-blogphp** DISPUTED ** In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or...6.1 Medium
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreA Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS,...5.9 Medium
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreAn Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden...9.8 Critical
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreAn Information Exposure Through Query Strings in GET Request issue was discovered in Belden...6.5 Medium
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreA Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000,...8.8 High
- belden hirschmann m1-8mm-sc, hirschmann m1-8sfp, hirschmann m1-8sm-sc +131 more +133 moreAn Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100...6.5 Medium
- ntp, hpe hpux-ntp, netapp hci +6 more +8 morentpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the...5.3 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and...6.1 Medium
- citrix netscaler application delivery controller firmware, netscaler gateway firmware +1 moreDirectory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler...7.5 High
- Show moreLoading…