CVEs published March 8, 2018
59 CVEs were published on March 8, 2018: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 59
- Critical
- 1
- High
- 0
- Medium
- 4
- Low
- 0
- Unrated
- 54
- Now in CISA KEV
- 1
- Fix available
- 0
Most affected products
- Cisco Identity Services Engine
- 7
- QNAP Media Streaming Add-On
- 4
- Cisco Secure Access Control Server
- 2
- Cisco StarOS
- 2
- EMC RSA Archer GRC Platform RSA Archer versions prior to
- 2
- IBM Monitoring
- 2
- vApp Manager which is embedded in Dell EMC Unisphere for VM…
- 2
- Cisco 550X Series Stackable Managed Switches
- 1
- Cisco Data Center Network Manager
- 1
- Cisco Prime Collaboration Provisioning
- 1
Critical 1
Medium, low and unrated 58
- CVE-2018-7890A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640).
- CVE-2018-7889gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitr
- CVE-2014-7271Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
- CVE-2014-7272Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write o
- CVE-2018-5313A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions.
- CVE-2018-7183Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by lever
- CVE-2018-7866A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8.
- CVE-2018-7867There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf.
- CVE-2018-7868There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data.
- CVE-2018-7869There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.
- CVE-2018-7870An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data.
- CVE-2018-7871There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data.
- CVE-2018-7872An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data.
- CVE-2018-7873There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data.
- CVE-2018-7874An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8.
- CVE-2018-7875There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data.
- CVE-2018-7876In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote at
- CVE-2018-7877There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data.
- CVE-2018-4838A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (ASiemens AG EN100 Ethernet module IEC 61850 variant · Sie… +3
- CVE-2018-4839A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 ESiemens DIGSI · Siemens EN100 Ethernet module DNP3 vari… +13
- CVE-2018-4840A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 ESiemens DIGSI · Siemens EN100 Ethernet module DNP3 varia… +4
- CVE-2017-1625IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users.IBM Pulse for QRadar
- CVE-2018-1387IBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to IBM Monitoring
- CVE-2018-1442IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-site request forgery wIBM Monitoring
- CVE-2018-1443An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli FIBM Security Access Manager · IBM Tivoli Federated Identity…
- CVE-2018-1182An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and softwarEMC RSA Identity Governance and Lifecycle versions 7.0.1, 7…
- CVE-2018-1215An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions EvApp Manager which is embedded in Dell EMC Unisphere for VM…
- CVE-2018-1216A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions EnabvApp Manager which is embedded in Dell EMC Unisphere for VM…
- CVE-2018-1219EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user inforEMC RSA Archer GRC Platform RSA Archer versions prior to
- CVE-2018-1220EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature.EMC RSA Archer GRC Platform RSA Archer versions prior to
- CVE-2017-18222In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count d
- CVE-2017-6152A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other usF5 Networks BIG-IQ Centralized Management
- CVE-2017-7634Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remQNAP Media Streaming Add-On
- CVE-2017-7638QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly.QNAP Media Streaming Add-On
- CVE-2017-7640QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands aQNAP Media Streaming Add-On
- CVE-2017-7641QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.QNAP Media Streaming Add-On
- CVE-2018-7757Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local use
- CVE-2018-0087A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to theCisco Web Security Appliance
- CVE-2018-0141A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to thCisco Prime Collaboration Provisioning
- CVE-2018-0144A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attaCisco Prime Data Center Network Manager
- CVE-2018-0207A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticateCisco Secure Access Control Server
- CVE-2018-0208A vulnerability in the web-based management interface of the (cloud based) Cisco Registered Envelope Service could allow an authenticated, rCisco Registered Envelope Service
- CVE-2018-0209A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X Series Stackable ManCisco 550X Series Stackable Managed Switches
- CVE-2018-0210A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker tCisco Data Center Network Manager
- CVE-2018-0211A vulnerability in specific CLI commands for the Cisco Identity Services Engine could allow an authenticated, local attacker to cause a deniCisco Identity Services Engine
- CVE-2018-0212A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCisco Identity Services Engine
- CVE-2018-0213A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attackerCisco Identity Services Engine
- CVE-2018-0214A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to execute arbiCisco Identity Services Engine
- CVE-2018-0215A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCisco Identity Services Engine
- CVE-2018-0216A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCisco Identity Services Engine
- CVE-2018-0217A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenCisco StarOS
- CVE-2018-0218A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticateCisco Secure Access Control Server
- CVE-2018-0219A vulnerability in the web-based management interface of Cisco Unified Computing System (UCS) Director could allow an unauthenticated, remotCisco UCS Director
- CVE-2018-0220A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remote attacker to conduCisco Videoscape AnyRes Live
- CVE-2018-0221A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perforCisco Identity Services Engine
- CVE-2018-0223A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attCisco Security Manager
- CVE-2018-0224A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenCisco StarOS
- CVE-2018-7755An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7.