CVEs published March 26, 2018
51 CVEs were published on March 26, 2018: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 51
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 2
- Unrated
- 47
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Dell EMC Isilon OneFS
- 9
- Philips IntelliSpace Portal
- 9
- Apache Software Foundation Apache HTTP Server
- 7
- NetIQ Identity Manager
- 4
- NVIDIA Tegra
- 1
- Symantec Norton App Lock
- 1
Medium, low and unrated 51
- CVE-2017-12410It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System…
- CVE-2017-12815Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal…
- CVE-2018-7658NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by…
- CVE-2018-8802SQL injection vulnerability in the management interface in ePortal Manager allows remote attackers to execute arbitrary SQL commands via…
- CVE-2017-18249The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local…
- CVE-2018-1348NetIQ Identity Manager SSL RenegotiationNetIQ Identity Manager
- CVE-2018-1349NetIQ Identity Manager Driver Component Log File Information LeakageNetIQ Identity Manager
- CVE-2018-1350NetIQ Identity Manager Driver Component Information LeakageNetIQ Identity Manager
- CVE-2018-7673NetIQ Identity Manager DoS AttackNetIQ Identity Manager
- CVE-2014-2048The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID…
- CVE-2014-2293Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary…
- CVE-2014-2312The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
- CVE-2015-5039The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11…
- CVE-2015-5045The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain…
- CVE-2015-7401IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and…
- CVE-2015-7423Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1…
- CVE-2015-7424IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users…
- CVE-2015-7432IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and…
- CVE-2015-7433IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA…
- CVE-2015-7434IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA…
- CVE-2018-1186Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is…Dell EMC Isilon OneFS
- CVE-2018-1187Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting…Dell EMC Isilon OneFS
- CVE-2018-1188Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a…Dell EMC Isilon OneFS
- CVE-2018-1189Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is…Dell EMC Isilon OneFS
- CVE-2018-1201Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is…Dell EMC Isilon OneFS
Show all 51 entriesShow fewer entries
- CVE-2018-1202Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a…Dell EMC Isilon OneFS
- CVE-2018-1203In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges.Dell EMC Isilon OneFS
- CVE-2018-1204Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11…Dell EMC Isilon OneFS
- CVE-2018-1213Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11…Dell EMC Isilon OneFS
- CVE-2018-7543Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows…
- CVE-2017-18248The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending…
- CVE-2018-8937An issue was discovered in Open-AudIT Professional 2.1.
- CVE-2017-15534The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit.Symantec Norton App Lock
- CVE-2017-6278NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using…NVIDIA Tegra
- CVE-2017-15710In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses…Apache Software Foundation Apache HTTP Server
- CVE-2017-15715In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename…Apache Software Foundation Apache HTTP Server
- CVE-2018-1283In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the…Apache Software Foundation Apache HTTP Server
- CVE-2018-1301A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size…Apache Software Foundation Apache HTTP Server
- CVE-2018-1302When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer…Apache Software Foundation Apache HTTP Server
- CVE-2018-1303A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read…Apache Software Foundation Apache HTTP Server
- CVE-2018-1312In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not…Apache Software Foundation Apache HTTP Server
- CVE-2018-5454Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could…Philips IntelliSpace Portal
- CVE-2018-5458Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker…Philips IntelliSpace Portal
- CVE-2018-5462Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an…Philips IntelliSpace Portal
- CVE-2018-5464Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker…Philips IntelliSpace Portal
- CVE-2018-5466Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker…Philips IntelliSpace Portal
- CVE-2018-5468Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain…Philips IntelliSpace Portal
- CVE-2018-5470Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been…Philips IntelliSpace Portal
- CVE-2018-5472Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker…Philips IntelliSpace Portal
- CVE-2018-5474Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to…Philips IntelliSpace Portal
- CVE-2018-9020The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.