CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- siemens simatic wincc oa ui, siemens ag simatic wincc oa ui for android, simatic wincc oa ui for ios +1 moreA vulnerability has been identified in SIMATIC WinCC OA UI for Android (All versions < V3.15.10),...6.7 Medium
- siemens simatic cp 343-1 (incl. siplus variants), simatic cp 343-1 advanced (incl. siplus variants), simatic cp 443-1 +52 more +54 moreA vulnerability has been identified in SIMATIC CP 343-1 Advanced (All versions), SIMATIC CP 343-1...6.5 Medium
- ncr s1 dispenser controller firmwareMemory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an...7.5 High
- gnome networkmanager, canonical ubuntu linux +1 moreGNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200)...7.5 High
- fortinet fortiwebAn Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0...5.9 Medium
- jungo windriverwindrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of...5.5 Medium
- alkacon opencmsCross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows...4.6 Medium
- alkacon opencms** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts...8.8 High
- radare radare2In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of...5.5 Medium
- radare radare2In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik...5.5 Medium
- radare radare2In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm...5.5 Medium
- libmingIn libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c....6.5 Medium
- libmingIn libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c....6.5 Medium
- yxcmsYxcms building system (compatible cell phone) v1.4.7 has XSS via the content parameter to...6.1 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreNetwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in...7.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreIncorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in...7.8 High
- imagemagick, canonical ubuntu linux +1 moreWriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a...8.8 High
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4J9.8 Critical
- mikrotik routerosA buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session...9.8 Critical
- redhat ceph, fedoraproject fedora +1 moreIn Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function...7.5 High
- getgrav grav cmsGrav CMS Cross-site scripting (XSS) vulnerability6.1 Medium
- seafile serverSeafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to...7.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreSSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0...5.9 Medium
- truecrypt project truecryptMultiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive...7.1 High
- truecrypt project truecryptThe ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to...3.3 Low
- wp-html-sitemap project wp-html-sitemapCross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap...6.5 Medium
- ajax-pagination project ajax-paginationDirectory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress...7.5 High
- unify openscape deployment serviceSQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11...9.8 Critical
- disable comments projectCross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for...8.8 High
- videowhisper live streaming integrationMultiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming...6.1 Medium
- subscribe to comments reloaded project to comments reloadedCross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin...8.8 High
- wampserverCross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject...5.4 Medium
- cloudfoundry cf-deployment, routing-release, dell emc the cloud foundry gorouter +2 moreIn cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Bal…8.1 High
- dell emc networker, dell emc networker +1 moreIn Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions...7.5 High
- dell emc windows stemcellsIn Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on...8.5 High
- dell emc spring boot, spring boot +1 moreModerate severity vulnerability that affects org.springframework.boot:spring-boot5.9 Medium
- cloudfoundry cf-deployment, cf-release, dell emc cloud controller +1 more +3 moreIn Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf...8.8 High
- joyent smartos, oracle solaris +1 moreThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.0 High
- docutrac dtisqlinstaller.exe, docutracinc dtisqlinstaller +1 moreDocuTrac DTISQLInstaller.exe Hard-Coded Salt2.9 Low
- docutrac dtisqlinstaller.exe, docutracinc dtisqlinstaller +1 moreDocuTrac DTISQLInstaller.exe Hard-Coded Credentials9.0 Critical
- yxcmsprotected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell...7.5 High
- siteeditor site editorA Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows...7.5 High
- kentico xperienceKentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface.7.2 High
- kentico xperienceKentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in which a crafted URL results in improper...5.4 Medium
- cloudfoundry garden, dell emc garden nstar +1 moreIn Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar...7.5 High
- grails resources, dell emc grails by pivotal +1 moreThe Grails Resource Plugin often has to exchange URIs for resources with other internal...7.5 High
sharutilsMageiaUpdated sharutils packages fix security vulnerabilityNo score- mozilla bugzillaA third party website can access information available to a user with access to a restricted bug...8.8 High
- collectdThe Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to...5.5 Medium
- cobub razorPhysical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers...5.3 Medium
- Show moreLoading…