CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
drupal/jsonapiPackagistThis module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The module doesn't sufficiently check access when viewing related reso…No score- netiq imanagerNetIQ iManager, versions prior to 3.1, reflected XSS issue5.3 Medium
- edirectoryNetIQ eDirectory Denial of Service3.1 Low
- netiq imanageriManager elevation of privilege5.9 Medium
- netiq imanagerNetIQ iManager Communication Downgrade Attack3.1 Low
- loofah project loofah, debian linux +1 moreCross-site Scripting in loofah6.1 Medium
- sanitize project sanitize, ryan grove sanitize (ruby gem) +1 moreSanitize vulnerable to Improper Input Validation and Cross-site Scripting7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service...5.5 Medium
- nasm netwide assemblerNetwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm...7.8 High
- nasm netwide assemblerNetwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a...7.8 High
- enhavoenhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group...4.8 Medium
- ibm connectionsXML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0...6.5 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreIBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0...3.3 Low
- invisioncommunity invision power boardSQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows...8.8 High
- opencartThe Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows...9.8 Critical
- deadwood project deadwood, maradns project maradns +1 moreDeadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2...5.9 Medium
- deadwood project deadwood, maradns project maradns +1 moreDeadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2...5.9 Medium
- owncloudCross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated...5.4 Medium
- openwebanalytics open web analyticsOpen Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it...8.8 High
- coreftp core ftpMultiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain...7.8 High
- kamailio, debian linux +1 moreA Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x...9.8 Critical
- intel sgx sdkEdger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate...4.7 Medium
- intel software guard extensions platform software componentAn elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1...8.8 High
- tendacn ac15 firmwareA remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router...9.8 Critical
- tenable nessusWhen installing Nessus to a directory outside of the default location, Nessus versions prior to 7...7.0 High
- opensuse openbuildservice, open build service +1 moreopenbuildservice webui code injection8.1 High
- philips intellispace cardiovascularPhilips ISCV application prior to version 2.3.0 has an insufficient session expiration...6.3 Medium
- apache syncopeExposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope4.9 Medium
- apache syncopeHigh severity vulnerability that affects org.apache.syncope:syncope-core7.2 High
- eaton elcsoftIn Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted...5.3 Medium
- ge centricity pacs ra1000GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these...9.8 Critical
- ge xelerisGE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are...9.8 Critical
- ge gemnet license server, ge healthcare gemnet license server aka. (echoserver) +1 moreGE GEMNet License server (EchoServer) all current versions are affected these devices use default...9.8 Critical
- ge healthcare infinia, ge infinia hawkeye 4 firmware +1 moreGE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these...9.8 Critical
- tendacn ac15 firmwareAn issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a...9.8 Critical
- huawei technologies co., ltd. fusionsphere openstack, huawei fusionsphere openstack firmware +1 moreHuawei FusionSphere OpenStack V100R006C00SPC102(NFV) has a privilege escalation vulnerability....7.2 High
- huawei technologies co., ltd. iptv stb, huawei iptv stb firmware +1 moreHuawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication...7.5 High
- huawei mate 9 pro, mate 9 pro firmware +1 moreHuawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON...7.8 High
- huawei technologies co., ltd. p9, huawei p9 firmware +1 moreHuawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure...5.5 Medium
- huawei technologies co., ltd. vns-l21, huawei vns-l21 firmware +1 moreSome Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read...5.5 Medium
- huawei technologies co., ltd. vns-l21, huawei vns-l21 firmware +1 moreSome Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS...5.5 Medium
- huawei technologies co., ltd. hg532, huawei hg532 firmware +1 moreHuawei HG532 with some customized versions has a remote code execution vulnerability. An...8.8 High
- ncr s2 dispenser controller firmwareMemory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an...7.5 High
- Show moreLoading…