CVEs published March 15, 2018
53 CVEs were published on March 15, 2018: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 53
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Trend Micro Email Encryption Gateway
- 12
- Delta Electronics Delta Industrial Automation Screen Editor
- 4
- Apache Software Foundation Apache Allura
- 1
- Delta Electronics Delta Industrial Automation DOPSoft
- 1
- Trend Micro Smart Protection Server
- 1
- VMware Workstation · VMware Fusion
- 1
Medium, low and unrated 53
- CVE-2017-16745A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16747An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16749A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16751A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or…Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2018-5476A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior.Delta Electronics Delta Industrial Automation DOPSoft
- CVE-2015-7440IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before…
- CVE-2015-7453Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix…
- CVE-2015-7463IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete…
- CVE-2015-7471Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix…
- CVE-2016-0223Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote…
- CVE-2018-7033SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
- CVE-2016-10393In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip…
- CVE-2017-14878In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is…
- CVE-2017-14882In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR…
- CVE-2017-14885In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel…
- CVE-2017-15815In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer…
- CVE-2017-15821In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function…
- CVE-2017-17773In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD…
- CVE-2017-18056In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation…
- CVE-2017-18063In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation…
- CVE-2017-18064In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation…
- CVE-2017-18067In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation…
- CVE-2017-18068In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper buffer length…
- CVE-2017-18069In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length…
- CVE-2018-1319In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting.Apache Software Foundation Apache Allura
Show all 53 entriesShow fewer entries
- CVE-2017-18233An issue was discovered in Exempi before 2.4.4.
- CVE-2017-18234An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18235An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18236An issue was discovered in Exempi before 2.4.4.
- CVE-2017-18237An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18238An issue was discovered in Exempi before 2.4.4.
- CVE-2018-6219An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with…Trend Micro Email Encryption Gateway
- CVE-2018-6220An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which…Trend Micro Email Encryption Gateway
- CVE-2018-6221An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to…Trend Micro Email Encryption Gateway
- CVE-2018-6222Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be…Trend Micro Email Encryption Gateway
- CVE-2018-6223A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to…Trend Micro Email Encryption Gateway
- CVE-2018-6224A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker…Trend Micro Email Encryption Gateway
- CVE-2018-6225An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to…Trend Micro Email Encryption Gateway
- CVE-2018-6226Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an…Trend Micro Email Encryption Gateway
- CVE-2018-6227A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject…Trend Micro Email Encryption Gateway
- CVE-2018-6228A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands…Trend Micro Email Encryption Gateway
- CVE-2018-6229A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL…Trend Micro Email Encryption Gateway
- CVE-2018-6230A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to…Trend Micro Email Encryption Gateway
- CVE-2018-6231A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and…Trend Micro Smart Protection Server
- CVE-2018-6957VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can…VMware Workstation · VMware Fusion
- CVE-2018-8729Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject…
- CVE-2018-8728server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by…
- CVE-2018-8720ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal…
- CVE-2017-18232The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local…
- CVE-2018-8076ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component.
- CVE-2018-8721Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the…
- CVE-2018-8722Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.
- CVE-2018-7886An issue was discovered in CloudMe 1.11.0.