CVEs published March 7, 2018
24 CVEs were published on March 7, 2018: 0 critical, 0 high.
- Published
- 24
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 1
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- bacula-web/bacula-web
- 1
- bleach
- 1
- electron
- 1
- Emerson ControlWave Micro Process Automation Controller
- 1
- NetIQ Sentinel
- 1
- rack-protection
- 1
- Red Hat 389-ds-base
- 1
- Red Hat HornetQ/Artemis · org.hornetq:hornetq-server +1
- 1
Medium, low and unrated 24
- CVE-2018-7752GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than C
- CVE-2018-7753An issue was discovered in Bleach 2.1.x before 2.1.3.bleach
- CVE-2017-12174It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is createdRed Hat HornetQ/Artemis · org.hornetq:hornetq-server +1
- CVE-2018-7675Potential Information Disclosure in SentinelNetIQ Sentinel
- CVE-2017-15367Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula databasebacula-web/bacula-web
- CVE-2018-7204inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/fi
- CVE-2018-7564Stored XSS exists on Polycom QDX 6000 devices.
- CVE-2018-7565CSRF exists on Polycom QDX 6000 devices.
- CVE-2018-5452A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWavEmerson ControlWave Micro Process Automation Controller
- CVE-2018-7745An issue was discovered in Western Bridge Cobub Razor 0.7.2.
- CVE-2018-7746An issue was discovered in Western Bridge Cobub Razor 0.7.2.
- CVE-2014-5044Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran appli
- CVE-2014-8780Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a conten
- CVE-2018-7473Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attackers to redirect users
- CVE-2018-1000116NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.
- CVE-2018-1000117Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function
- CVE-2018-1000118Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in electron
- CVE-2018-1000119Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can rack-protection
- CVE-2018-1054An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4Red Hat 389-ds-base
- CVE-2018-7741Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI.
- CVE-2017-18221The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK acc
- CVE-2018-7720A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting
- CVE-2018-7721Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles inp
- CVE-2018-7740The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a