CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- atlassian bitbucket, bitbucket server +1 moreIn browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed...9.9 Critical
- securebrain phishwall client, securebrain corporation the installer of phishwall client firefox and chrome edition for windows +1 moreUntrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome...7.8 High
- lunarnight laboratory webproxyDirectory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary...7.5 High
- hisayuki nomura tiny ftp daemon, tinyftp project tinyftp +1 moreBuffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS)...9.8 Critical
- k okada vixUntrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain...7.8 High
- gundam cult qqq qqq systems, qqq systems project systems +1 moreQQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors.9.8 Critical
- gundam cult qqq qqq systems, qqq systems project systems +1 moreCross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary...6.1 Medium
- gundam cult qqq qqq systems, qqq systems project systems +1 moreCross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary...6.1 Medium
- gundam cult qqq qqq systems, qqq systems project systems +1 moreCross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary...6.1 Medium
- kagaminokuni php 2chbbs, php 2chbbs project 2chbbs +1 moreCross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject...6.1 Medium
- arsenol project arsenolCross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary...6.1 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4...4.8 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server)...7.7 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than...6.2 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several...6.2 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG...7.4 High
- ibm tivoli monitoring v6, tivoli monitoring +1 moreIBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute...9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5,...7.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses...5.1 Medium
- ibm cognos analyticsIBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in...5.3 Medium
- wireThe Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside...7.5 High
- identityserver identityserver4IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect...6.1 Medium
- ucopia wireless appliance firmwareImproper input sanitization within the restricted administration shell on UCOPIA Wireless...6.7 Medium
- dsmall project dsmalldsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress...6.1 Medium
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345DumpBlock.sys) allows local users to cause a...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345DumpBlock.sys) allows local users to cause a...7.8 High
- 2345 security guard project security guardIn 2345 Security Guard 3.6, the driver file (2345BdPcSafe.sys) allows local users to cause a...7.8 High
- frog cms project cmsAn Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.9.8 Critical
- libtiff, canonical ubuntu linux, debian linux +3 more +5 moreIn LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw...8.8 High
- malwarebytes anti-malwareA vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware...7.8 High
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain...5.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a...5.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited...5.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap...5.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out...5.3 Medium
- omron cx-supervisor, ics-cert beaconmedæs totalalert scroll medical air systems web application +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities...5.3 Medium
- ics-cert omron cx-supervisor, omron cx-supervisor +1 moreIn Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack...5.3 Medium
- pivotal software spring batch admin, spring by pivotal batch admin +1 morePivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection....8.8 High
- pivotal software spring batch admin, spring by pivotal batch admin +1 moreCross-site Scripting in Pivotal Spring Batch Admin6.1 Medium
- gitlab, gitlab community and enterprise editions +1 moreGitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the...6.5 Medium
- gitlab, gitlab community and enterprise editions +1 moreGitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels...6.1 Medium
- gitlab, gitlab community and enterprise editions +1 moreGitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython...6.1 Medium
- gitlab, gitlab community and enterprise editions +1 moreGitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the...7.5 High
- gitlab, gitlab community and enterprise editions +1 moreGitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL...7.5 High
- yiiframework yiiYii Framework Code Injection8.1 High
- yiiframework yiiyii2-redis Potential Remote code execution9.8 Critical
- yiiframework yiiYii SQL injection vulnerability9.8 Critical
drupal/exifPackagistThis module enables you to retrieve image metadata and use them in fields or title. The module doesn't sufficiently restrict access to module setting pages thereby causing an access bypass vulnerabili…No score- Show moreLoading…