CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- red hat, inc. eap-5, redhat jboss enterprise application platform +1 moreRed Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX...5.3 Medium
- red hat, inc. openshift enterprise, redhat openshift +1 moreRed Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container...7.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 more** DISPUTED ** Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu...4.7 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd()...5.5 Medium
- zohocorp manageengine applications managerA remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13...9.8 Critical
- calibre-ebook calibregui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data,...7.8 High
- rapidscada rapid scadaA vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak...7.8 High
- libming, debian linux +1 moreThere is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0...6.5 Medium
- libming, debian linux +1 moreIn libming 0.4.8, a memory exhaustion vulnerability was found in the function...6.5 Medium
- libming, debian linux +1 moreThere is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0...6.5 Medium
- libming, debian linux +1 moreAn invalid memory address dereference was discovered in strlenext in util/decompile.c in libming...6.5 Medium
- libming, debian linux +1 moreThere is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0...6.5 Medium
- libming, debian linux +1 moreAn invalid memory address dereference was discovered in the function getName in libming 0.4.8 for...6.5 Medium
- libming, debian linux +1 moreThere is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4...8.8 High
- libming, debian linux +1 moreAn invalid memory address dereference was discovered in getString in util/decompile.c in libming...6.5 Medium
- libming, debian linux +1 moreThere is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8,...7.5 High
- libming, debian linux +1 moreThere is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4...6.5 Medium
- libming, debian linux +1 moreThere is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0...6.5 Medium
- libming, debian linux +1 moreA NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The...6.5 Medium
- siemens digsi 4, en100 ethernet module dnp3 variant, en100 ethernet module iec 104 variant +11 more +13 moreA vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3...7.5 High
- siemens digsi 4, en100 ethernet module dnp3 variant, en100 ethernet module iec 104 variant +20 more +22 moreA vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3...5.3 Medium
- siemens en100 ethernet module dnp3 variant, en100 ethernet module iec 104 variant, en100 ethernet module iec 61850 variant +7 more +9 moreA vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4...7.5 High
- ibm security access manager, tivoli federated identity manager +1 moreAn XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security...5.9 Medium
- ctfer-io monitoringIBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is...4.3 Medium
- ctfer-io monitoring, ibm application performance management, cloud apm data collector +2 moreIBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1...5.3 Medium
- ibm pulse for qradar, qradar pulse +1 moreIBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The...5.3 Medium
- emc rsa archerEMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks...6.1 Medium
- emc rsa archerEMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on...4.3 Medium
- dell emc solutions enabler virtual appliance, emc unisphere for vmax virtual appliance, emc vasa virtual appliance +1 more +3 moreA hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC...9.8 Critical
- dell emc solutions enabler virtual appliance, emc unisphere for vmax virtual appliance, emc vasa virtual appliance +1 more +3 moreAn arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell...8.8 High
- emc rsa identity governance and lifecycle, rsa via lifecycle and governance, emc rsa identity management and governance +2 moreAn issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all...7.8 High
- qnap media streaming add-onQNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not...8.8 High
- qnap media streaming add-onQNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows...9.8 Critical
- qnap media streaming add-onQNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not...6.5 Medium
- qnap media streaming add-onCross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version...6.1 Medium
- f5 big-iq centralized managementA local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has...6.7 Medium
- cisco starosA vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series...6.7 Medium
- cisco security managerA vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager...6.1 Medium
- cisco identity services engineA vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow...6.7 Medium
- cisco videoscape anyres liveA vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow...5.4 Medium
- cisco ucs director, unified computing system director +1 moreA vulnerability in the web-based management interface of Cisco Unified Computing System (UCS)...6.1 Medium
- cisco secure access control server solution engineA vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior...3.3 Low
- cisco asr 5000 firmware, asr 5500 firmware, asr 5700 firmware +2 moreA vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series...6.7 Medium
- cisco identity services engineA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...5.4 Medium
- cisco identity services engineA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.3 Medium
- cisco identity services engineA vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an...5.3 Medium
- cisco identity services engineA vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE)...8.8 High
- cisco identity services engineA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.1 Medium
- cisco identity services engineA vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an...4.4 Medium
- cisco data center network managerA vulnerability in the web-based management interface of Cisco Data Center Network Manager could...8.8 High
- Show moreLoading…