CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an...4.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an...4.3 Medium
- misp-project mispAn issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API...4.3 Medium
- misp-project mispIn MISP before 2.4.89, app/View/Events/resolved_attributes.ctp has multiple XSS issues via a...6.1 Medium
- beckhoff twincat, twincat c\+\+, ics-cert beckhoff twincat plc products +2 moreKernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack...7.8 High
- huawei technologies co., ltd. dbs3900 tdd lte, huawei dbs3900 tdd lte firmware +1 moreDBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability....4.3 Medium
- fox-themes prague, huawei prague-al00a firmware, prague-al00b firmware +3 more +5 moreThe Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211,...7.8 High
- kentico xperienceKentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global...9.8 Critical
- dell emc idrac7, dell emc idrac7/idrac8, dell emc idrac8 +2 moreDell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in...7.5 High
- dell emc idrac7, emc idrac8 +1 moreDell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly...8.8 High
- rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 morersyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the...9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka...5.5 Medium
- phpokPHPOK 4.8.338 has an arbitrary file upload vulnerability.9.8 Critical
- phpsheThere is a SQL injection in the PHPSHE 1.6 userbank parameter.9.8 Critical
- xiuno bbs project bbsXiuno BBS 4.0.0 has XSS in the adminpage sitename parameter.5.4 Medium
- open-auditOpen-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.5.4 Medium
- libavThe stereo_processing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to...6.5 Medium
- libavThe unpack_parse_unit function in libavcodec/dirac_parser.c in Libav 12.2 allows remote attackers...6.5 Medium
- libavThe apply_dependent_coupling function in libavcodec/aacdec.c in Libav 12.2 allows remote...6.5 Medium
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreUnauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0...9.8 Critical
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreAn SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4...9.1 Critical
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreA cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250...8.8 High
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreAn improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version...9.8 Critical
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreA server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250...7.3 High
- geutebrück g-cam/efd-2250 (part n° 5.02024) firmware and topline topfd-2125 (part n° 5.02820) firmware, geutebrueck g-cam\/efd-2250 firmware, topfd-2125 firmware +2 moreA cross-site scripting vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1...6.1 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +6 more +8 moreOn F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server...7.5 High
- f5 big-ip analytics, big-ip application security manager, f5 networks, inc. big-ip (asm and analytics) +2 moreOn F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart...5.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn some circumstances, the Traffic Management Microkernel (TMM) does not properly handle certain...8.1 High
- f5 big-ip policy enforcement manager, f5 networks, inc. big-ip (pem) +1 moreOn F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP...7.5 High
- heimdalsecurity heimdalAn issue was discovered in Heimdal PRO 2.2.190. As part of the scanning feature, a process called...7.0 High
- heimdalsecurity heimdalA vulnerability has been found in Heimdal PRO v2.2.190, but it is most likely also present in...7.8 High
- meco usb memory stick with fingerprint firwmareAn issue was discovered on MECO USB Memory Stick with Fingerprint MECOZiolsamDE601 devices. The...6.8 Medium
- gitlab, gitlab community and enterprise editions +1 moreGitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an...4.3 Medium
- amd epyc server firmware, ryzen firmware, ryzen mobile firmware +1 more +3 moreThe AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security...9.0 Critical
- amd ryzen firmware, ryzen pro firmware +1 moreThe Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC,...9.0 Critical
- amd ryzen firmware, ryzen pro firmware +1 moreThe Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware,...9.0 Critical
- amd epyc server firmwareThe AMD EPYC Server processor chips have insufficient access control for protected memory regions...9.0 Critical
- amd ryzen firmware, ryzen pro firmware +1 moreThe AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure...9.0 Critical
- amd ryzen firmware, ryzen mobile firmware, ryzen pro firmware +2 moreThe AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for...9.0 Critical
- amd epyc server firmware, ryzen firmware, ryzen mobile firmware +1 more +3 moreThe AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient...9.0 Critical
- qnap systems inc. photo stationImproper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station...8.8 High
- qnap systems inc. photo stationCross-site scripting (XSS) vulnerability in Log Viewer in Synology Photo Station before 6.8.3...6.1 Medium
- ui edgeos, ubiquiti edgerouter x +1 moreUbiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management...8.8 High
- ubnt edgeos, ubiquiti edgerouter x +1 moreUbiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management...8.8 High
- ubnt edgeos, ubiquiti edgerouter x +1 moreUbiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF)...8.0 High
- ubnt edgeos, ubiquiti edgerouter x +1 moreUbiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management...8.8 High
- Show moreLoading…