CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- datalust seqDatalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreURLs using "javascript:" have the protocol removed when pasted into the addressbar to protect...6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf Media Capture and Streams API permission is requested from documents with "data:" or "blob:"...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability in the notifications Push API where notifications can be sent through service...8.2 High
- mozilla firefox, canonical ubuntu linux +1 moreImage for moz-icons can be accessed through the "moz-icon:" protocol through script in web...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA shared worker created from a "data:" URL in one tab can be shared by another tab with a...7.5 High
- mozilla firefoxWebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs...7.5 High
- mozilla firefoxWebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf the "app.support.baseURL" preference is changed by a malicious local program to contain HTML...6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Find API for WebExtensions can search some privileged pages, such as "about:debugging", if...6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating elements, events, and selection ranges...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 High
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ctfer-io monitoringIBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and...6.1 Medium
- hcl software notesIBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by...7.8 High
- hcl software notesIBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a...7.8 High
- hcl software workload scheduler, ibm tivoli workload scheduler +1 moreIBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4)...7.4 High
- libvirt, debian linux +1 morelibvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an...7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...9.1 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl FTP path confusion leads to NIL byte out of bounds write9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain...4.3 Medium
- freedesktop.org spice-gtkA flaw was found in the way spice-client processed certain messages sent from the server. An...9.8 Critical
- ajentiAjenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source...7.5 High
- inversoft prime-jwtinversoft prime-jwt version prior to version 1.3.0 or prior to commit...9.8 Critical
- scilico i\, librarianI Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE)...10.0 Critical
- ionicframework ios keychainIonic Team Cordova plugin iOS Keychain version before commit...9.8 Critical
- pivotal software concoursePivotal Concourse after 2018-03-05 might allow remote attackers to have an unspecified impact, if...7.5 High
- zohocorp manageengine eventlog analyzerCross-site scripting (XSS) in Zoho ManageEngine EventLog Analyzer before 11.12 Build 11120 allows...6.1 Medium
- mitel st14.2A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could...8.8 High
- mitel st14.2A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the...5.3 Medium
- blackberry uem management console, unified endpoint manager +1 moreIn BlackBerry UEM Management Console version 12.7.1 and earlier, a reflected cross-site scripting...6.1 Medium
- gemalto gemalto's sentinel ldk rte, sentinel ldk rte +1 moreDenial of service in Gemalto's Sentinel LDK RTE version before 7.657.5 High
- gemalto gemalto's sentinel ldk rte, sentinel ldk rte +1 moreStack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to...7.5 High
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreDenial of service by uploading malformed firmware in Hanwha Techwin Smartcams7.5 High
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreDenial of service by blocking of new camera registration on the cloud server in Hanwha Techwin...7.5 High
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreArbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams7.5 High
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreRemote password change in Hanwha Techwin Smartcams9.8 Critical
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreAuthentication bypass in Hanwha Techwin Smartcams9.8 Critical
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreRemote code execution in Hanwha Techwin Smartcams9.8 Critical
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreBuffer overflow in Hanwha Techwin Smartcams9.8 Critical
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreAn undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams5.3 Medium
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreUnencrypted way of remote control and communications in Hanwha Techwin Smartcams9.8 Critical
- hanwha techwin smartcams, hanwha-security snh-v6410pn firmware, snh-v6410pnw firmware +2 moreUnsecured way of firmware update in Hanwha Techwin Smartcams9.8 Critical
- Show moreLoading…