CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- square-9 globalformsAn issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability...7.5 High
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User...5.7 Medium
- philips alice 6 system, alice 6 firmware +1 moreIn Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up...9.8 Critical
- philips alice 6 system, alice 6 firmware +1 moreIn Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity,...9.8 Critical
- wanscam hw0021, hw0021 firmware +1 moreAn information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated...9.8 Critical
- firebird foundation sql server, firebirdsql firebird, debian linux +2 moreAn authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...7.8 High
- std42 elfinderDirectory Traversal in Studio 42 elFinder9.1 Critical
- netiq identity managerIDM Information Leakage3.9 Low
- netiq identity managerIDM URL Redirection attack2.1 Low
- tenable applianceTenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS...5.4 Medium
- std42 elfinderelFinder Path Traversal vulnerability9.1 Critical
- quickappscms quickapps cmsQuickAppsCMS Cross-Site Request Forgery (CSRF)8.8 High
- acyba acymailingCSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...8.8 High
- acyba acysmsCSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in...8.8 High
- prestashop, responsive mega menu pro project mega menu pro +1 moremodules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown)...9.8 Critical
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- drupal, drupal core, debian linux +2 moreDrupal Core Remote Code Execution Vulnerability9.8 Critical
- nordvpnNordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability. The...8.8 High
- 1234n minicmsThere is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the...8.8 High
- long range zip project range zipIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of...5.5 Medium
- apache strutsApache Struts REST Plugin can potentially allow a DoS attack7.5 High
- dell emc scaleio, dell emc scaleio +1 moreDell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light...7.5 High
- dell emc scaleio, dell emc scaleio +1 moreDell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication...9.8 Critical
- dell emc scaleio, dell emc scaleio +1 moreDell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM...7.5 High
- linux kernelIn the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before...5.5 Medium
- opensslIncorrect CRYPTO_memcmp on HP-UX PA-RISC5.9 Medium
- qnap qtsCross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4...6.1 Medium
- qnap qtsCross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6...6.1 Medium
- qnap qtsQNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to...5.3 Medium
- avolvesoftware projectdoxAvolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to...4.3 Medium
- avolvesoftware projectdoxAvolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive...6.5 Medium
- avolvesoftware projectdoxAvolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information...6.5 Medium
- hashicorp terraformHashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG9.8 Critical
- dedecmsDedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter...8.8 High
- arm cortex-a, intel atom c, atom e +206 more +208 moreSystems with microprocessors utilizing speculative execution may allow unauthorized disclosure of...5.6 Medium
- enhancesoft osticketCross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2...6.1 Medium
- enhancesoft osticketEnhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an...8.1 High
- enhancesoft osticketInteger format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2...4.9 Medium
- enhancesoft osticketCross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1...6.1 Medium
- enhancesoft osticketCross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket...6.1 Medium
- swisscom tvmediahelperSwisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated,...7.8 High
- swisscom myswisscomassistantSwisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an...7.8 High
- ibm control desk, maximo asset management, maximo asset management essentials +11 more +13 moreIBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5;...4.3 Medium
- ibm tealeaf customer experienceThe search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote...6.5 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self...5.9 Medium
- ldap-account-manager ldap account manager, debian linux +1 moreRoland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the...8.8 High
- ldap-account-manager ldap account manager, debian linux +1 moreRoland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to...6.1 Medium
- jenkins mailerCross-Site Request Forgery in Jenkins Mailer Plugin8.0 High
- Show moreLoading…