CVEs published March 14, 2018
144 CVEs were published on March 14, 2018: 0 critical, 4 high. Browse them by severity, product and exploitation status.
- Published
- 144
- Critical
- 0
- High
- 4
- Medium
- 8
- Low
- 3
- Unrated
- 129
- Now in CISA KEV
- 0
- Fix available
- 17
Most affected products
- Microsoft SharePoint
- 13
- Microsoft Windows kernel
- 13
- ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- 10
- Microsoft Windows
- 6
- Microsoft Edge
- 4
- Microsoft Internet Explorer
- 3
- OSIsoft PI Data Archive
- 3
- IBM Notes
- 2
- Internet Explorer, Microsoft Edge
- 2
- Microsoft Exchange Server
- 2
High 4
- CVE-2018-2402In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about…SAP SE SAP HANA
- CVE-2018-1386IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions…IBM Workload Scheduler
- CVE-2018-1435IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack.IBM Notes
- CVE-2018-1437IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted…IBM Notes
Medium, low and unrated 140
- CVE-2017-12194A flaw was found in the way spice-client processed certain messages sent from the server.freedesktop.org spice-gtk
- CVE-2018-7701Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the…
- CVE-2018-7702SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to…
- CVE-2018-7703Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or…
- CVE-2018-7704SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a…
- CVE-2018-7705Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to…
- CVE-2018-7706Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail…
- CVE-2018-7707Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or…
- CVE-2018-7756RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which…
- CVE-2018-8045In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the…
- CVE-2018-8715The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c.
- CVE-2018-8717joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager…
- CVE-2018-2366SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information…SAP SE SAP Business Process Automation (BPA) By Redwood
- CVE-2018-2397In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently…SAP SE SAP Business Objects Business Intelligence Platform
- CVE-2018-2398Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restricted.SAP SE SAP Business Client
- CVE-2018-2399Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of…SAP SE SAP Process Monitoring Infrastructure
- CVE-2018-2400Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which…
- CVE-2018-2401SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source…SAP SE SAP Business Process Automation (BPA) By Redwood
- CVE-2018-6328It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could…
- CVE-2018-6329It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing…
- CVE-2018-8710A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as…
- CVE-2018-8711A local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as…
- CVE-2018-8712An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled.
- CVE-2018-1000120A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of…curl
- CVE-2018-1000121A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial…
Show all 140 entriesShow fewer entries
- CVE-2018-1000122A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a…
- CVE-2018-1077Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.spacewalk
- CVE-2018-7496An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior.OSIsoft PI Vision
- CVE-2018-7500A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.OSIsoft PI Web API
- CVE-2018-7504A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior.OSIsoft PI Vision
- CVE-2018-7508A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.OSIsoft PI Web API
- CVE-2018-7529A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-7531An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-7533An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-0787ASP.NET Core 1.0.Microsoft ASP.NET Core · Microsoft.AspNetCore.HttpOverri… +1
- CVE-2018-0808ASP.NET Core 1.0.Microsoft ASP.NET Core
- CVE-2018-0811The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0813The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0814The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0815The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of…Microsoft Windows
- CVE-2018-0816The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1…Microsoft Windows
- CVE-2018-0817The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1…Microsoft Windows
- CVE-2018-0868Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows Installer
- CVE-2018-0872ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0873ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0874ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0875.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted…Microsoft .NET Core · Microsoft.NETCore.Jit
- CVE-2018-0876Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting…Microsoft Edge
- CVE-2018-0877The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709…Microsoft Windows Desktop Bridge Virtual File System
- CVE-2018-0878Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and…Microsoft Windows Remote Assistance
- CVE-2018-0879Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge…Microsoft Edge
- CVE-2018-0880The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…Microsoft Windows Desktop Bridge
- CVE-2018-0881The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows
- CVE-2018-0882The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of…Microsoft Windows Deskop Bridge
- CVE-2018-0883Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows…Microsoft Windows Shell
- CVE-2018-0884Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a…Microsoft Windows Scripting Host
- CVE-2018-0885The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2…Microsoft Hyper-V Network Switch
- CVE-2018-0886The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…Microsoft Windows
- CVE-2018-0888The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…Microsoft Hyper-V Network SwitchHyper-V Network Switch
- CVE-2018-0889Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting…Microsoft Edge
- CVE-2018-0891ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows…ChakraCore, Microsoft Edge, Internet Explorer
- CVE-2018-0893Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting…Microsoft Edge
- CVE-2018-0894The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0895The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0896The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0897The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0898The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0899The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0900The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0901The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0902The Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 Gold, 1511, 1607, 1703, and 1709.Microsoft Cryptography Next Generation (CNG) kernel-mode dr…
- CVE-2018-0903Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code…Microsoft Access
- CVE-2018-0904The Windows kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10…Microsoft Windows kernel
- CVE-2018-0907Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and…Microsoft Excel
- CVE-2018-0909Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0910Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0911Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0912Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0913Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0914Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0915Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0916Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how…Microsoft SharePoint
- CVE-2018-0917Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are…Microsoft SharePoint
- CVE-2018-0919Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps…Microsoft Office
- CVE-2018-0921Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are…Microsoft SharePoint
- CVE-2018-0922Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office…Microsoft Office
- CVE-2018-0923Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are…Microsoft SharePoint
- CVE-2018-0924Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange…Microsoft Exchange Server
- CVE-2018-0925ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine…Microsoft ChakraCore · Microsoft.ChakraCore
- CVE-2018-0926The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2…Microsoft Windows kernel
- CVE-2018-0927Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…Internet Explorer, Microsoft Edge
- CVE-2018-0929Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2018-0930ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0931ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0932Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…Internet Explorer, Microsoft Edge
- CVE-2018-0933ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0934ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0935Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…Microsoft Internet Explorer
- CVE-2018-0936ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0937ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0939ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0940Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server…Microsoft Exchange Outlook Web Access
- CVE-2018-0941Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure…Microsoft Exchange Server
- CVE-2018-0942Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2018-0944Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due…Microsoft SharePoint
- CVE-2018-0947Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to…Microsoft SharePoint
- CVE-2018-0977The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows…Microsoft Windows
- CVE-2018-0983Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an…Microsoft Windows Storage Services
- CVE-2018-5779A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28…
- CVE-2018-5780A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28…
- CVE-2018-5781A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28…
- CVE-2018-5782A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28…
- CVE-2018-7677CSRF in NetIQ Access Manager (NAM) Identity Server componentNetIQ Access Manager (NAM) Admin Console
- CVE-2018-7678XSS vulnerability in NetIQ Access Manager (NAM) Admin Console componentNetIQ Access Manager (NAM) Admin Console
- CVE-2018-7474An issue was discovered in Textpattern CMS 4.6.2 and earlier.
- CVE-2018-1000129An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript…org.jolokia:jolokia-core
- CVE-2018-1000130A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java…org.jolokia:jolokia-core
- CVE-2018-1000131Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the…
- CVE-2018-1000132Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in…mercurial
- CVE-2018-6875Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be…
- CVE-2018-7279A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
- CVE-2018-8097io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where…eve
- CVE-2018-8108The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by…
- CVE-2018-8100The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow…
- CVE-2018-8101The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer…
- CVE-2018-8102The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (buffer over-read…
- CVE-2018-8103The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer…
- CVE-2018-8104The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and…
- CVE-2018-8105The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read…
- CVE-2018-8106The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer…
- CVE-2018-8107The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and…
- CVE-2017-18229An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-18230An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-18231An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-1741IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper…IBM WebSphere Application Server
- CVE-2018-1441IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site…IBM Monitoring
- CVE-2018-1444IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Portal
- CVE-2018-8096Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via…
- CVE-2018-8098Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an…
- CVE-2018-8099Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows…