CVEs published in March 2018
1,348 vulnerabilities, 201 critical, 22 exploited.
- dedecmsfile_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by...8.8 High
- ibm financial transaction managerIBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1...5.4 Medium
- ibm business process manager, business process manager enterprise service bus, websphere enterprise service bus +1 more +3 moreIBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm business process managerIBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm business process managerDue to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work...4.3 Medium
- ibm business process manager, business process manager enterprise service bus +1 moreIBM Business Process Manager 8.6 could allow an authenticated user with special privileges to...3.1 Low
- ibm business process manager, business process manager enterprise service bus, websphere +2 moreIBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by...4.0 Medium
- ibm mq, websphere mq +1 moreA specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0...5.3 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page...4.3 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android...6.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm sd 625 firmware, sd 650 firmware +2 more +4 moreIn Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing...9.8 Critical
- qualcomm, inc. snapdragon iot, snapdragon mobile, qualcomm mdm9206 firmware, sd 625 firmware +4 more +6 moreIn Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD...9.8 Critical
- qualcomm, inc. snapdragon iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreIn Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206,...9.8 Critical
- qualcomm, inc. snapdragon iot, snapdragon mobile, snapdragon automobile, qualcomm apq8096au firmware, mdm9206 firmware +12 more +14 moreIn Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile...9.8 Critical
- google android, qualcomm, inc. snapdragon iot, snapdragon mobile +1 moreIn Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607,...9.8 Critical
- google android, qualcomm, inc. snapdragon iot, snapdragon mobile +1 moreIn Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD...9.8 Critical
- zohocorp manageengine servicedesk plusIn Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run...6.1 Medium
- exiv2In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor...6.5 Medium
- exiv2In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It...8.1 High
- samsung mobileOn Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub...9.8 Critical
- samsung mobileOn Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the...7.0 High
- samsung mobileOn Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote...7.8 High
- samsung mobileOn Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event...6.1 Medium
- samsung mobileOn Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows...9.8 Critical
- gnu binutilsAn issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and...5.5 Medium
- jungo windriverwindrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of...5.5 Medium
- imagemagickIn ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in...8.8 High
- libming, debian linux +1 morelibming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file....6.5 Medium
- ibosIBOS 4.4.3 has XSS via a company full name.6.1 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage...6.5 Medium
- hashicorp vagrant vmware fusionIt is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware...7.8 High
- hashicorp vagrant vmware fusionHashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware...7.0 High
- hashicorp vagrant vmware fusionThe vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local...7.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime +1 moreApplications in cf-release before 245 can be configured and pushed with a user-provided custom...9.6 Critical
- vmware pivotal software mysqlMySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext....10.0 Critical
- cloud foundry garden-runc, cloudfoundry cf-deployment, garden-runc-release +2 moreCloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure...8.8 High
- oneplus oxygenosAn issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier....6.8 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for...4.8 Medium
- ibm endpoint manager for remote controlThe on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user...8.8 High
- myscriptThe MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by...9.8 Critical
- ibm qradar security information and event managerCross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1...8.8 High
- gracenote gnsdkThe GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute...9.8 Critical
- pjsip pjsua2 sdkThe PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute...9.8 Critical
- esri arcgisruntime sdkThe ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute...9.8 Critical
- metaio sdkThe MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by...9.8 Critical
- jumio sdkThe Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by...9.8 Critical
- subscribe2 project subscribe2Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin...6.1 Medium
- drupal storage apiThe Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute...9.8 Critical
- reviewboard review boardThe Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before...6.5 Medium
- tnlsoftsolutions sentry visionThe login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by...9.8 Critical
- Show moreLoading…