CVEs published March 2, 2018
46 CVEs were published on March 2, 2018: 0 critical, 2 high.
- Published
- 46
- Critical
- 0
- High
- 2
- Medium
- 15
- Low
- 3
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- NetIQ Access Manager
- 4
- NetIQ eDirectory
- 2
- NetIQ Identity Manager
- 2
- Novell eDirectory
- 2
- Amazon Music Player
- 1
- IBM Rational Publishing Engine
- 1
- IBM Security Guardium Big Data Intelligence
- 1
- IBM Spectrum Scale
- 1
- Linux kernel
- 1
- Linux kernel 4.15.0-rc9
- 1
High 2
Medium, low and unrated 44
- CVE-2015-7596SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable m
- CVE-2015-7597SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local
- CVE-2015-7598SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, w
- CVE-2015-7961SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, w
- CVE-2015-7962SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, wh
- CVE-2015-7963SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows
- CVE-2015-7964SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows l
- CVE-2015-7965SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al
- CVE-2015-7966SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al
- CVE-2015-7967SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable module
- CVE-2015-0796open build service source server symlink exploitation via source patchSUSE open build service
- CVE-2017-14801Reflected xss in Admin Console REST interfaceNetIQ Access Manager
- CVE-2017-14802Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLsNetIQ Access Manager
- CVE-2017-5189private SSL key embedded in JAR file in iManagerNetIQ iManager
- CVE-2017-7419NetIQ Access Manager OAuth Consent screen XSS attackNetIQ Access Manager
- CVE-2017-7434NetIQ Identity Manager JDBC driver could leak passwords in exception tracesNetIQ Identity Manager
- CVE-2017-7438DOM cross site scripting attack against NetIQ Privileged Account ManagerNetIQ Privileged Account Manager
- CVE-2017-9267eDirectory LDAP peer certificate validation issueNovell eDirectory
- CVE-2017-9276XSS Vulnerability in iManagerNetIQ Access Manager
- CVE-2017-9277existing connection is being used even though eDirectory LDAP server is upgraded to EBANovell eDirectory
- CVE-2017-9278Avoid password disclosure via EBS event logging in the iManager Oracle driverNetIQ Identity Manager Oracle EBS driver
- CVE-2017-9279NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensionsNetIQ Identity Manager
- CVE-2017-9280Novell Identity Manager User Application get request url contains the session token.NetIQ Identity Manager Applications
- CVE-2017-9285Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interfaceNetIQ eDirectory
- CVE-2018-7433The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.
- CVE-2017-1654IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files.IBM Spectrum Scale
- CVE-2017-1787IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to IBM Rational Publishing Engine
- CVE-2018-7648An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG 2.3.0.
- CVE-2017-14461A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensiThe Dovecot Project Dovecot
- CVE-2017-15130A denial of service flaw was found in dovecot before 2.2.34.The Dovecot Project dovecot
- CVE-2018-1058A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users.The PostgreSQL Global Development Group postgresql
- CVE-2018-1063Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinSELinux Project policycoreutils
- CVE-2018-7642The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, all
- CVE-2018-7643The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and
- CVE-2018-7637An issue was discovered in CImg v.220.
- CVE-2018-7638An issue was discovered in CImg v.220.
- CVE-2018-7639An issue was discovered in CImg v.220.
- CVE-2018-7640An issue was discovered in CImg v.220.
- CVE-2018-7641An issue was discovered in CImg v.220.
- CVE-2018-1065The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined Linux kernel 4.15.0-rc9
- CVE-2018-1066The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an Linux kernel
- CVE-2018-1169This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213.Amazon Music Player
- CVE-2018-1170This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installations of Volkswagen Volkswagen Customer-Link App
- CVE-2018-6490MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)Micro Focus Operations Orchestration Software