CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- glpi-project glpiAn issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query...6.1 Medium
- glpi-project glpiA remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition...7.5 High
- enalean tuleapA SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering...9.8 Critical
- hola vpnAn issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the...8.8 High
- kingsoftstore wps office freeKingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of...7.8 High
- pandasecurity panda global protectionPanda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service...7.8 High
- pandasecurity panda global protectionUnquoted Windows search path vulnerability in the panda_url_filtering service in Panda Global...7.8 High
- bitdefender total securityBitDefender Total Security 2018 allows local users to gain privileges or cause a denial of...7.8 High
- 10-strike network monitorUnquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike...7.8 High
- aurea jive-nThe Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for...6.5 Medium
- ibm care management, curam social program management +1 moreCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2...5.4 Medium
- ibm infosphere information serverXML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3...5.4 Medium
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive...5.5 Medium
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact...8.2 High
- asyncssh project asyncsshAsyncSSH SSH Server Authentication Bypass9.8 Critical
- emc data protection advisorDell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection...7.8 High
- apache tomcat jk connector, apache software foundation tomcat connectors +1 moreThe IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that...7.5 High
- foreman hammer cli, redhat satellite, satellite capsule +2 morehammer_cli_foreman Improper Certificate Validation vulnerability8.1 High
- clusterlabs pcsClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due...6.1 Medium
- curlcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...9.8 Critical
- keycloak, redhat single sign on +1 morekeycloak-core vulnerable to timing attacks against JWS token verification5.9 Medium
- red hat wildfly, redhat jboss wildfly application server +1 moreRed Hat Wildfly DoS7.5 High
- keycloak, redhat single sign on +1 moreModerate severity vulnerability that affects org.keycloak:keycloak-core6.5 Medium
- google androidNVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could...5.5 Medium
- google androidNVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could...5.5 Medium
- google androidNVIDIA libnvomx contains a possible out of bounds write due to a missing bounds check which could...7.8 High
- google androidNVIDIA libnvrm contains a possible out of bounds read due to a missing bounds check which could...5.5 Medium
- google androidNVIDIA libnvomx contains a possible out of bounds write due to a improper input validation which...7.8 High
- apache software foundation wicket jquery ui, wicket-jquery-ui project wicket-jquery-ui +1 moreCross-site Scripting in wicket-jquery-ui6.1 Medium
- qcmsQCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.5.4 Medium
- qcmsQCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.5.4 Medium
- titanhq webtitan gatewayTitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature.7.5 High
- jabberd2The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the...5.5 Medium
- jabberd2The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router,...7.8 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter.4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata...4.8 Medium
- linux kernelIn the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a...4.7 Medium
- flexense syncbreezeAn issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a...7.5 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...5.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the ...8.8 High
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to...6.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common...6.5 Medium
- gnu sharutils, canonical ubuntu linux, debian linux +2 moreSharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in...7.8 High
- suse portusThe Djelibeybi configuration examples for use of NGINX in SUSE Portus 2.3, when applied to...8.8 High
- westernbridgegroup razorA SQL Injection vulnerability exists in Western Bridge Cobub Razor 0.8.0 via the channel_name or...9.8 Critical
- cobub razorPhysical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name...7.5 High
- afflib project afflibThe af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows...6.5 Medium
- abine blurThe Password Manager Extension in Abine Blur 7.8.242* before 7.8.2428 allows attackers to bypass...9.8 Critical
- foxconn ap-fc4064-t firmwareA privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T...7.2 High
- foxconn ap-fc4064-t firmwareOne can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15...6.8 Medium
- Show moreLoading…