CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local...7.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- windows optimization master project optimization masterIn Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect...7.8 High
- exiv2In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote...6.5 Medium
- netpbm project netpbmThe pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote...5.5 Medium
- exiv2, debian linux, redhat enterprise linux desktop +2 more +4 moreIn Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...6.5 Medium
- otcmsOTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin...6.1 Medium
- creditwestbank cwcmsCreditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for...8.8 High
- gitlab, debian linux +1 moreThe Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has...9.8 Critical
- openbsd libresslThe int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2...7.4 High
- bmc remedy action request systemBMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.6.1 Medium
- zzcmsAn issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete...7.5 High
- zzcmsAn issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary...7.5 High
- zzcmsAn issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php...9.8 Critical
- zzcmsAn issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to...7.5 High
- zzcmsAn issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary...7.5 High
- bose soundtouchBose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site...8.8 High
- bose soundtouchBose SoundTouch devices allow XSS via a crafted public playlist from Spotify.5.4 Medium
- bose soundtouchBose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by...5.4 Medium
- libmingIn libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote...6.5 Medium
- libmingIn libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote...6.5 Medium
- libmingIn libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use...6.5 Medium
- libmingIn libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote...6.5 Medium
- covercms project covercmsCoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php.5.4 Medium
- scilico i\, librarianI, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in...9.1 Critical
- scilico i\, librarianI, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id"...6.1 Medium
- scilico i\, librarianI, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of...9.1 Critical
- scilico i\, librarianI, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability...8.8 High
- ibm mq applianceIBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This...5.4 Medium
- electronjs electronElectron Vulnerable to Code Execution by Re-Enabling Node.js Integration8.1 High
- libavThe av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers...6.5 Medium
- libavThe pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause...6.5 Medium
- libavThe mpc8_probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a...6.5 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable...5.4 Medium
- Show moreLoading…