CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- kubernetesKubernetes arbitrary file overwrite7.1 High
- kubernetesIn Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4...8.8 High
- cryptonoteCryptoNote version version 0.8.9 and possibly later contain a local RPC server which does not...8.8 High
- cmsmadesimple cms made simpleCMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery (CSRF) vulnerability...8.8 High
- kadnode project kadnodeKadNode version version 2.2.0 contains a Buffer Overflow vulnerability in Arguments when starting...8.8 High
- textpatterntextpattern version version 4.6.2 contains a XML Injection vulnerability in Import XML feature...7.5 High
- django-anymail project django-anymaildjango-anymail Includes Sensitive Information in Log Files7.4 High
- doorkeeper project doorkeeperDoorkeeper is vulnerable to stored XSS and code execution6.1 Medium
- wolfcms wolf cmsWolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in ...4.8 Medium
- npr pym.jspym.js CSRF Vulnerability8.8 High
- wolfcms wolf cmsWOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in...5.4 Medium
- ajentiAjenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request...5.3 Medium
- ajentiAjenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command...8.8 High
- ajentiAjenti version version 2 contains a Input Validation vulnerability in ID string on Get-values...7.5 High
- ajentiAjenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that...6.5 Medium
- iredmailiRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in...7.5 High
- roundcube webmailroundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma...7.5 High
- bitmessage pybitmessageBitmessage PyBitmessage version v0.6.2 (and introduced in or after commit...8.8 High
- freeplane, debian linux +1 moreFreePlane version 1.5.9 and earlier contains a XML External Entity (XXE) vulnerability in XML...5.5 Medium
- jenkins promoted buildsJenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes4.3 Medium
- jenkins testlinkStored cross-site scripting vulnerability in Jenkins TestLink Plugin5.4 Medium
- jenkins mercurialIncorrect Authorization in Jenkins Mercurial Plugin5.3 Medium
- jenkins subversionJenkins Subversion Plugin Incorrect Authorization vulnerability5.3 Medium
- jenkins gitIncorrect Authorization in Jenkins Git Plugin5.3 Medium
- jenkins google-play-android-publisherJenkins Google Play Android Publisher Plugin allows attacker to obtain credential IDs4.3 Medium
- jenkins cppncssReflected cross-site-scripting vulnerability in report URL of Jenkins CppNCSS Plugin6.1 Medium
- jenkins job and node ownershipImproper authorization in Jenkins Job and Node Ownership Plugin6.5 Medium
- jenkins gerrit triggerIncorrect Authorization in Jenkins Gerrit Trigger Plugin5.4 Medium
- jenkins gerrit triggerIncorrect Authorization in Jenkins Gerrit Trigger Plugin4.3 Medium
- jenkins coverityJenkins Coverity Plugin has Insufficiently Protected Credentials7.8 High
- freeipa ipa, freeipa +1 moreIpa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's...6.3 Medium
- yzmcmsYzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.5.4 Medium
- teluu pjsip, debian linux +1 moreTeluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer...7.5 High
- teluu pjsip, debian linux +1 moreTeluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP...7.5 High
- tiny-json-http project tiny-json-httptiny-json-http missing SSL certificate validation8.1 High
- redhat ovirt-engineoVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name...4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that...7.2 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreMemory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the...5.5 Medium
- paramiko, debian linux, redhat ansible engine +8 more +10 moreParamiko not properly checking authentication before processing other requests9.8 Critical
- samba, canonical ubuntu linux, debian linux +2 moreOn a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly...8.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreAll versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the...4.3 Medium
- memcached, canonical ubuntu linux, debian linux +1 more +3 morememcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free...7.5 High
- rubygemsRubyGems Path Traversal vulnerability5.5 Medium
- rubygems, debian linux +1 moreRubyGems Cross-site Scripting vulnerability6.1 Medium
- rubygems, debian linux +1 moreRubyGems Improper Input Validation vulnerability5.3 Medium
- rubygems, debian linux +1 moreRubyGems Improper Verification of Cryptographic Signature vulnerability9.8 Critical
- rubygems, debian linux +1 moreRubyGems Infinite Loop vulnerability7.5 High
- rubygemsRubyGems Deserialization of Untrusted Data vulnerability7.8 High
- rubygemsRubyGems Link Following vulnerability7.5 High
- bmc remedy action request systemRemedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys...5.4 Medium
- Show moreLoading…