CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- microsoft windows 10, windows server, windows server 2016 +1 more +3 moreWindows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreWindows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT...7.5 High
- microsoft windows 10, windows server, windows server 2016 +1 more +3 moreThe Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server,...7.0 High
- microsoft windows, windows 10, windows 7 +6 more +8 moreThe Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1...7.0 High
- microsoft windows 10, windows server, windows server 2016 +1 more +3 moreThe Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server,...7.0 High
- microsoft edgeMicrosoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWindows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows...3.1 Low
- microsoft windows 10, windows server, windows server 2016 +1 more +3 moreThe Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server...7.8 High
- microsoft edgeMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote...7.5 High
- microsoft .net core, powershell core, asp.net core +2 more.NET Core Denial of Service Vulnerability7.5 High
- microsoft edge, microsoft corporation chakracore, microsoft edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edge, microsoft corporation chakracore, microsoft edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft edge, microsoft corporation chakracore, microsoft edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWindows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and...7.0 High
- microsoft windows, windows 10, windows 7 +5 more +7 moreThe Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1,...7.0 High
- microsoft windows, windows 10, windows 7 +5 more +7 moreThe Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1,...7.0 High
- microsoft windows, windows 7, windows server 2008 +2 moreThe Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and...7.0 High
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreThe Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreThe Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreThe Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1...5.5 Medium
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET...7.5 High
- microsoft asp.net coreASP.NET Core allow an elevation of privilege8.8 High
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...9.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...9.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...9.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...9.8 Critical
- netiq access manager, access manager (nam) admin console +1 moreXSS vulnerability in NetIQ Access Manager (NAM) Admin Console component3.5 Low
- netiq access manager, access manager (nam) admin console +1 moreCSRF in NetIQ Access Manager (NAM) Identity Server component3.5 Low
- textpatternAn issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code...9.8 Critical
- alienvault open source security information management, unified security management +1 moreA remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.9.8 Critical
- shapeshift keepkey firmwareFormat String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information...7.5 High
- mercurial, debian linux +1 moreMercurial Incorrect Access Control vulnerability9.1 Critical
- wpsupportplus wp support plus responsive ticket systemPradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains...9.8 Critical
- jolokia webarchive agentInjection in Jolokia agent8.1 High
- jolokiaCross-site Scripting in Jolokia agent6.1 Medium
- bui project buiThe select component in bui through 2018-03-13 has XSS because it performs an escape operation on...6.1 Medium
- python-eve eveEve allows execution of arbitrary code9.8 Critical
- xpdfreader xpdfThe JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of...5.5 Medium
- xpdfreader xpdfThe JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch...5.5 Medium
- xpdfreader xpdfThe JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch...5.5 Medium
- xpdfreader xpdfThe BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of...5.5 Medium
- xpdfreader xpdfThe JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to...5.5 Medium
- xpdfreader xpdfThe JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to...5.5 Medium
- xpdfreader xpdfThe JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to...5.5 Medium
- xpdfreader xpdfThe JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch...7.8 High
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was...6.5 Medium
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was...6.5 Medium
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found...6.5 Medium
- libgit2, debian linux +1 moreIncorrect returning of an error code in the index.c:read_entry() function leads to a double free...6.5 Medium
- libgit2, debian linux +1 moreInteger overflow in the index.c:read_entry() function while decompressing a compressed prefix...6.5 Medium
- Show moreLoading…