CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- piwigoCross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6...6.5 Medium
- coppermine-gallery coppermine photo galleryCross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine...6.1 Medium
- openvpn** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in...9.1 Critical
- pingidentity ldapsdkWeak Password Requirements in UnboundID LDAP SDK9.8 Critical
- secluded tridentPitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident...7.5 High
- asus rt-n14uhp firmwareASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag"...6.1 Medium
- apache commons compress, oracle mysql cluster, weblogic server +2 moreApache Commons Compress vulnerable to denial of service due to infinite loop5.5 Medium
- mail.ru calendarThe Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a...5.4 Medium
- artezio kanban boardThe Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name...5.4 Medium
- mozilla firefox, firefox esr, debian linux +2 moreThe libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...6.7 Medium
- deltaww delta industrial automation dopsoftA Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial...7.8 High
- deltaww delta industrial automation screen editorA Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial...7.8 High
- deltaww delta industrial automation screen editorA Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen...7.8 High
- deltaww delta industrial automation screen editorAn Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation...7.8 High
- deltaww delta industrial automation screen editorA Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen...7.8 High
- schedmd slurm, debian linux +1 moreSchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against...9.8 Critical
- ibm forms serverCross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x,...6.1 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM)...4.8 Medium
- ibm business process managerIBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM)...6.1 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreIBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...9.8 Critical
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +26 more +28 moreIn Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD...9.8 Critical
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...9.8 Critical
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google androidIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...9.8 Critical
- apache alluraIn Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If...6.1 Medium
- vmware fusion, workstation, workstation player +1 more +3 moreVMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a...5.3 Medium
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA server auth command injection authentication bypass vulnerability in Trend Micro Smart...9.8 Critical
- trend micro email encryption gatewayA SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration...6.8 Medium
- trend micro email encryption gatewayA SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script...9.8 Critical
- trend micro email encryption gatewayA SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could...9.8 Critical
- trend micro email encryption gatewayA stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5...5.4 Medium
- trend micro email encryption gatewayReflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway...5.4 Medium
- trend micro email encryption gatewayAn XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5...4.3 Medium
- trend micro email encryption gatewayA lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email...8.8 High
- trend micro email encryption gatewayA missing authentication for appliance registration vulnerability in Trend Micro Email Encryption...9.8 Critical
- trend micro email encryption gatewayArbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to...7.8 High
- trend micro email encryption gatewayAn unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could...8.1 High
- trend micro email encryption gatewayAn arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an...9.8 Critical
- Show moreLoading…