CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- ibm capacity management analyticsIBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and...7.8 High
- ibm capacity management analyticsIBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords...7.8 High
- ibm infosphere master data managementIBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4,...4.3 Medium
- ibm infosphere master data managementMultiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM...5.4 Medium
- ibm curam social program managementIBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to...4.3 Medium
- ibm rational license key serverThe Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9...3.3 Low
- ibm rational clearcaseThe Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x...7.4 High
- intel thermaldThe main function in android_main.cpp in thermald allows local users to write to arbitrary files...5.5 Medium
- zikula application frameworkZikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object...9.8 Critical
- owncloudThe user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by...9.8 Critical
- open-auditAn issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious...6.1 Medium
- nvidia corporation tegra, nvidia jetson tk1 firmware, jetson tx1 firmware +1 more +3 moreNVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the...7.8 High
- symantec norton app lockThe Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass...6.7 Medium
- philips intellispace portalPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability...9.8 Critical
- philips intellispace portalPhilips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions...9.8 Critical
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or...7.8 High
- philips intellispace portalPhilips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access...9.8 Critical
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL...7.5 High
- philips intellispace portalPhilips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code...8.1 High
- pixelite events managerThe Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js...5.4 Medium
- canonical screen-resolution-extra, ubuntu linux +1 morescreenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit...7.0 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +4 more +6 moreA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 High
- apache http server, canonical ubuntu linux, netapp clustered data ontap +3 more +5 moreWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 moreZsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete...7.8 High
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreAn issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the...6.5 Medium
- debian linux, linux kernel +1 moreThe add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly...7.0 High
- apple cupsThe add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can...5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 High
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c....6.5 Medium
- open-auditOpen-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting...8.8 High
- open-auditOpen-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.5.4 Medium
- wampserverWampserver before 3.1.3 has CSRF in add_vhost.php.8.8 High
- dsmall project dsmalldsmall v20180320 allows XSS via the member search box at the public/index.php/home...5.4 Medium
- dsmall project dsmalldsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.6.1 Medium
- dsmall project dsmalldsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter ...5.4 Medium
- dsmall project dsmalldsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html...7.5 High
- intelbras tip200 firmware, tip200lite firmware +1 moreIntelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to...7.2 High
- laravel log viewer project log viewerPlaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.07.5 High
- acrolinx serverAcrolinx Server before 5.2.5 on Windows allows Directory Traversal.7.5 High
- libming, debian linux +1 moreIn libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.8.8 High
- iobit advanced systemcare ultimateIn Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users...7.8 High
- Show moreLoading…