# CVEs published 2018-03-02

46 CVEs were published on March 2, 2018: 0 critical, 2 high. Days are UTC.

- [CVE-2015-7596](https://cve.now/CVE-2015-7596.md): SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable m (no CVSS)
- [CVE-2015-7597](https://cve.now/CVE-2015-7597.md): SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local (no CVSS)
- [CVE-2015-7598](https://cve.now/CVE-2015-7598.md): SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, w (no CVSS)
- [CVE-2015-7961](https://cve.now/CVE-2015-7961.md): SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, w (no CVSS)
- [CVE-2015-7962](https://cve.now/CVE-2015-7962.md): SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, wh (no CVSS)
- [CVE-2015-7963](https://cve.now/CVE-2015-7963.md): SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows (no CVSS)
- [CVE-2015-7964](https://cve.now/CVE-2015-7964.md): SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows l (no CVSS)
- [CVE-2015-7965](https://cve.now/CVE-2015-7965.md): SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al (no CVSS)
- [CVE-2015-7966](https://cve.now/CVE-2015-7966.md): SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al (no CVSS)
- [CVE-2015-7967](https://cve.now/CVE-2015-7967.md): SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable module (no CVSS)
- [CVE-2015-0796](https://cve.now/CVE-2015-0796.md): open build service source server symlink exploitation via source patch (CVSS 6.3, SUSE open build service)
- [CVE-2017-14801](https://cve.now/CVE-2017-14801.md): Reflected xss in Admin Console REST interface (CVSS 4.6, NetIQ Access Manager)
- [CVE-2017-14802](https://cve.now/CVE-2017-14802.md): Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs (CVSS 5.4, NetIQ Access Manager)
- [CVE-2017-5189](https://cve.now/CVE-2017-5189.md): private SSL key embedded in JAR file in iManager (CVSS 4.3, NetIQ iManager)
- [CVE-2017-7419](https://cve.now/CVE-2017-7419.md): NetIQ Access Manager OAuth Consent screen XSS attack (CVSS 4.6, NetIQ Access Manager)
- [CVE-2017-7429](https://cve.now/CVE-2017-7429.md): Fix for NetIQ shell code upload (CVSS 8.8, NetIQ eDirectory)
- [CVE-2017-7434](https://cve.now/CVE-2017-7434.md): NetIQ Identity Manager JDBC driver could leak passwords in exception traces (CVSS 3.3, NetIQ Identity Manager)
- [CVE-2017-7438](https://cve.now/CVE-2017-7438.md): DOM cross site scripting attack against NetIQ Privileged Account Manager (CVSS 4.6, NetIQ Privileged Account Manager)
- [CVE-2017-9267](https://cve.now/CVE-2017-9267.md): eDirectory LDAP peer certificate validation issue (CVSS 6.5, Novell eDirectory)
- [CVE-2017-9276](https://cve.now/CVE-2017-9276.md): XSS Vulnerability in iManager (CVSS 5.4, NetIQ Access Manager)
- [CVE-2017-9277](https://cve.now/CVE-2017-9277.md): existing connection is being used even though eDirectory LDAP server is upgraded to EBA (CVSS 4.2, Novell eDirectory)
- [CVE-2017-9278](https://cve.now/CVE-2017-9278.md): Avoid password disclosure via EBS event logging in the iManager Oracle driver (CVSS 3.3, NetIQ Identity Manager Oracle EBS driver)
- [CVE-2017-9279](https://cve.now/CVE-2017-9279.md): NetIQ Identity Manager allowed uploading of user icons with incorrect types or extensions (CVSS 2.0, NetIQ Identity Manager)
- [CVE-2017-9280](https://cve.now/CVE-2017-9280.md): Novell Identity Manager User Application get request url contains the session token. (CVSS 4.3, NetIQ Identity Manager Applications)
- [CVE-2017-9285](https://cve.now/CVE-2017-9285.md): Login restrictions not applied when using ebaclient against NetIQ eDirectory EBA interface (CVSS 5.4, NetIQ eDirectory)
- [CVE-2018-7433](https://cve.now/CVE-2018-7433.md): The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page. (no CVSS)
- [CVE-2017-1654](https://cve.now/CVE-2017-1654.md): IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. (CVSS 4.0, IBM Spectrum Scale)
- [CVE-2017-1787](https://cve.now/CVE-2017-1787.md): IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to (CVSS 4.4, IBM Rational Publishing Engine)
- [CVE-2018-1373](https://cve.now/CVE-2018-1373.md): IBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to br (CVSS 7.5, IBM Security Guardium Big Data Intelligence)
- [CVE-2018-7648](https://cve.now/CVE-2018-7648.md): An issue was discovered in mj2/opj\_mj2\_extract.c in OpenJPEG 2.3.0. (no CVSS)
- [CVE-2017-14461](https://cve.now/CVE-2017-14461.md): A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensi (CVSS 5.9, The Dovecot Project Dovecot)
- [CVE-2017-15130](https://cve.now/CVE-2017-15130.md): A denial of service flaw was found in dovecot before 2.2.34. (no CVSS, The Dovecot Project dovecot)
- [CVE-2018-1058](https://cve.now/CVE-2018-1058.md): A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. (no CVSS, The PostgreSQL Global Development Group postgresql)
- [CVE-2018-1063](https://cve.now/CVE-2018-1063.md): Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELin (no CVSS, SELinux Project policycoreutils)
- [CVE-2018-7642](https://cve.now/CVE-2018-7642.md): The swap\_std\_reloc\_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, all (no CVSS)
- [CVE-2018-7643](https://cve.now/CVE-2018-7643.md): The display\_debug\_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and (no CVSS)
- [CVE-2018-7637](https://cve.now/CVE-2018-7637.md): An issue was discovered in CImg v.220. (no CVSS)
- [CVE-2018-7638](https://cve.now/CVE-2018-7638.md): An issue was discovered in CImg v.220. (no CVSS)
- [CVE-2018-7639](https://cve.now/CVE-2018-7639.md): An issue was discovered in CImg v.220. (no CVSS)
- [CVE-2018-7640](https://cve.now/CVE-2018-7640.md): An issue was discovered in CImg v.220. (no CVSS)
- [CVE-2018-7641](https://cve.now/CVE-2018-7641.md): An issue was discovered in CImg v.220. (no CVSS)
- [CVE-2018-1065](https://cve.now/CVE-2018-1065.md): The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined (no CVSS, Linux kernel 4.15.0-rc9)
- [CVE-2018-1066](https://cve.now/CVE-2018-1066.md): The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup\_ntlmv2\_rsp() that allows an (no CVSS, Linux kernel)
- [CVE-2018-1169](https://cve.now/CVE-2018-1169.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. (no CVSS, Amazon Music Player)
- [CVE-2018-1170](https://cve.now/CVE-2018-1170.md): This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installations of Volkswagen (no CVSS, Volkswagen Customer-Link App)
- [CVE-2018-6490](https://cve.now/CVE-2018-6490.md): MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS) (CVSS 5.9, Micro Focus Operations Orchestration Software)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.