CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- trend micro email encryption gatewayAn Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow...6.5 Medium
- exempi project exempiAn issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in...5.5 Medium
- exempi project exempiAn issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source...5.5 Medium
- pojo activity logMultiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for...6.1 Medium
- kontenaserver/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login -...6.1 Medium
- servicenow it service managementServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka...5.4 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were...6.1 Medium
- zohocorp manageengine eventlog analyzerZoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2...6.1 Medium
- zenmateZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron...7.5 High
- linux kernelThe Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a...5.5 Medium
- cloudme syncAn issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to...7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 High
- exempi project exempi, debian linux +1 moreAn issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of...7.8 High
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles...5.5 Medium
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager...8.8 High
- embedthis appwebThe Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the...8.1 High
- joomla joomla\!In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads...8.8 High
- dewesoftRunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require...9.8 Critical
- securenvoy securmailCross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote...6.1 Medium
- securenvoy securmailDirectory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote...6.5 Medium
- securenvoy securmailDirectory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote...8.1 High
- securenvoy securmailSecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail...6.5 Medium
- securenvoy securmailCross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote...6.1 Medium
- securenvoy securmailSecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e...9.1 Critical
- securenvoy securmailMultiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501...6.5 Medium
- webminAn issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any...9.8 Critical
- woocommerce-filter woocommerce products filterA local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin...9.8 Critical
- woocommerce-filter woocommerce products filterA remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin...9.8 Critical
- unitrends backupIt was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could...9.8 Critical
- kaseya unitrends backupIt was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an...9.8 Critical
- sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP...7.6 High
- redwood sap business process automation, sap se business process automation (bpa) by redwood +1 moreSAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document...5.4 Medium
- redwood sap business process automationUnder certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an...7.5 High
- sap process monitoring infrastructureCross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7...6.1 Medium
- sap business clientUnder certain conditions SAP Business Client 6.5 allows an attacker to access information which...6.7 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreIn SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central...5.4 Medium
- redwood sap business process automation, sap se business process automation (bpa) by redwood +1 moreSAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit...4.3 Medium
- osisoft pi data archiveAn Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017...7.8 High
- osisoft pi data archiveAn Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and...5.9 Medium
- osisoft pi data archiveA Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017...7.5 High
- osisoft pi web api, pi vision +1 moreA Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior....6.1 Medium
- osisoft pi visionA Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior....6.1 Medium
- osisoft pi web api, pi vision +1 moreA Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API...9.8 Critical
- osisoft pi visionAn Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The...5.3 Medium
- red hat spacewalk, redhat satellite +1 moreSpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...7.5 High
- microsoft windows 10, windows server 2016, microsoft corporation windows storage services +2 moreWindows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016...7.0 High
- microsoft windows, windows 10, windows server 2016 +2 moreThe Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server...7.0 High
- Show moreLoading…