CVEs published March 5, 2018
51 CVEs were published on March 5, 2018: 0 critical, 1 high.
- Published
- 51
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…
- 4
- Huawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…
- 3
- Moxa OnCell G3100-HSPA Series
- 3
- Huawei Technologies Co. VP9660
- 2
- simplesamlphp/saml2
- 2
- Tor
- 2
- Apache Software Foundation Apache ODE · org.apache.ode:ode
- 1
- Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- 1
- Huawei Technologies Co. DP300; RP200; TE30; TE50; TE60; VP9…
- 1
- Huawei Technologies Co. Enjoy 5s; Y6 Pro
- 1
High 1
Medium, low and unrated 50
- CVE-2018-7713The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of servi
- CVE-2018-7714The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of servi
- CVE-2018-7715PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool.
- CVE-2018-7716PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool.
- CVE-2018-7717The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has
- CVE-2017-18219An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-18220The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service
- CVE-2018-7711HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utisimplesamlphp/saml2
- CVE-2017-18217An issue was discovered in InvoicePlane before 1.5.5.
- CVE-2017-18218In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free
- CVE-2018-7493CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool.
- CVE-2017-17131Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V6Huawei Technologies Co. DP300; RP200; TE30; TE50; TE60; VP9…
- CVE-2017-17132Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information.Huawei Technologies Co. VP9660
- CVE-2017-17133Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification.Huawei Technologies Co. VP9660
- CVE-2017-17134XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17135PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…
- CVE-2017-17136PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…
- CVE-2017-17137PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…
- CVE-2017-17138PEM module of DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP6300 V500R001C00; V500R001C30Huawei Technologies Co. DP300; IPS Module; NGFW Module; NIP…
- CVE-2017-17139Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.33Huawei Technologies Co. Mate 9; Mate 9 Pro
- CVE-2017-17140Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an informHuawei Technologies Co. Enjoy 5s; Y6 Pro
- CVE-2017-17141Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700Huawei Technologies Co. S12700; S1700; S2700; S3700; S5700;…
- CVE-2017-17142SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500RHuawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…
- CVE-2017-17143SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R002C00SPC500; V500RHuawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…
- CVE-2017-17144Backup feature of SIP module in Huawei DP300 V500R002C00; V500R002C00SPC100; V500R002C00SPC200; V500R002C00SPC300; V500R002C00SPC400; V500R0Huawei Technologies Co. DP300; RP200; RSE6500; TE30; TE40;…
- CVE-2017-8164Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EHuawei Technologies Co. EVA-AL10; EVA-CL00; EVA-DL00; EVA-L…
- CVE-2017-8165Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability.Huawei Technologies Co. Mate
- CVE-2018-7698An issue was discovered in D-Link mydlink+ 3.8.5 build 259 for DCS-933L 1.05.04 and DCS-934L 1.05.04 devices.
- CVE-2017-16922In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and ret
- CVE-2017-17428Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leve
- CVE-2017-18215xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code exe
- CVE-2017-18216In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and B
- CVE-2018-5255The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart
- CVE-2017-7633QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices.QNAP Qfinder Pro
- CVE-2018-5449A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior.Moxa OnCell G3100-HSPA Series
- CVE-2018-5453An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and Moxa OnCell G3100-HSPA Series
- CVE-2018-5455A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 1606Moxa OnCell G3100-HSPA Series
- CVE-2017-7427iManager - Multiple Reflected Cross-Site Scripting attacksNetIQ Identity Manager
- CVE-2017-7437Cross site scripting attacks against NetIQ Privileged Account ManagerNetIQ Privileged Account Manager
- CVE-2018-0490An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10.Tor
- CVE-2018-0491A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10.Tor
- CVE-2018-1000115Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP
- CVE-2018-1316The ODE process deployment web service was sensible to deployment messages with forged names.Apache Software Foundation Apache ODE · org.apache.ode:ode
- CVE-2018-7644The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowsimplesamlphp/saml2
- CVE-2018-7663An issue was discovered in resources/views/layouts/app.blade.php in Voten.co before 2017-08-25.
- CVE-2018-7664An issue was discovered in ClipBucket before 4.0.0 Release 4902.
- CVE-2018-7665An issue was discovered in ClipBucket before 4.0.0 Release 4902.
- CVE-2018-7666An issue was discovered in ClipBucket before 4.0.0 Release 4902.
- CVE-2018-7667Adminer through 4.3.1 has SSRF via the server parameter.vrana/adminer
- CVE-2018-7668TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload