CVEs published March 9, 2018
104 CVEs were published on March 9, 2018: 0 critical, 0 high.
- Published
- 104
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 104
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Schneider Electric SE Pelco Sarix Professional
- 12
- Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- 9
- DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
- 4
- Huawei Technologies Co. Mate 9 Pro
- 4
- BUFFALO WXR-1900DHP2
- 3
- Corega CG-WGR1200
- 3
- Huawei Technologies Co. DP300
- 3
- django
- 2
- Huawei Technologies Co. CloudEngine
- 2
- Huawei Technologies Co. eSpace 7950; eSpace
- 2
Medium, low and unrated 104
- CVE-2018-7227A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieviSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7228A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unautSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7229A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unautSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7230A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix PrSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7231A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executioSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7232A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executioSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7233A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executioSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7234A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrarSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7235A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrarSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7236A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH serSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7237A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remoteSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7238A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior tSchneider Electric SE Pelco Sarix Professional
- CVE-2018-7239A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior toSchneider Electric SE SoMove
- CVE-2016-8782Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability.Huawei Technologies Co. CloudEngine
- CVE-2016-8783Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a staHuawei Technologies Co. H60 (Honor 6), P9 Plus
- CVE-2016-8784Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability.Huawei Technologies Co. CloudEngine
- CVE-2016-8785Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200Huawei Technologies Co. S12700, S5700, S7700, S9700
- CVE-2016-8786Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200Huawei Technologies Co. S12700, S5700, S6700, S7700, S9700
- CVE-2017-15314Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPCHuawei Technologies Co. DP300,RP200,TE30,TE40,TE50,TE60
- CVE-2017-15315Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R00Huawei Technologies Co. NIP6300,NIP6600,Secospace USG6300,S…
- CVE-2017-15323Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100RHuawei Technologies Co. DP300,NIP6600,Secospace USG6500,TE6…
- CVE-2017-17282SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00,Huawei Technologies Co. DP300, RP200, TE30, TE40, TE50, TE60
- CVE-2014-2592Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file
- CVE-2014-4861The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypte
- CVE-2014-6617Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote att
- CVE-2016-8612Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in thRed Hat mod_cluster
- CVE-2016-9591JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on tJasPer Project jasper
- CVE-2016-9606JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrRed Hat RESTEasy · org.jboss.resteasy:resteasy-bom
- CVE-2018-7290Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.
- CVE-2018-7537An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.django
- CVE-2018-7581\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), wh
- CVE-2018-7582WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
- CVE-2016-0253Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x
- CVE-2016-0268XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x b
- CVE-2016-0272Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3
- CVE-2016-0274IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager
- CVE-2016-0275IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager
- CVE-2016-0276IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager
- CVE-2016-0286IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated user
- CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which
- CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, whi
- CVE-2018-8000In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a rela
- CVE-2018-8001In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp.
- CVE-2018-8002In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result
- CVE-2017-17145Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the imprope
- CVE-2017-17146Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation.Huawei Technologies Co. DP300
- CVE-2017-17147Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation.Huawei Technologies Co. DP300
- CVE-2017-17148Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called.Huawei Technologies Co. DP300
- CVE-2017-17149Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability.Huawei Technologies Co. Huawei HiWallet App
- CVE-2017-17150Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; VHuawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17167Huawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use of a broken or risky cryptographic algorithHuawei Technologies Co. DP300; TP3206; ViewPoint
- CVE-2017-17168The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messagesDP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
- CVE-2017-17169The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messagesDP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
- CVE-2017-17170The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messagesDP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
- CVE-2017-17199Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17200Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17216Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17217Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17218SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600
- CVE-2017-17219SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17220SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17221Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerabilitHuawei Technologies Co. eSpace 7950; eSpace
- CVE-2017-17222Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulneraHuawei Technologies Co. eSpace 7950; eSpace
- CVE-2017-17223Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability.Huawei Technologies Co. eSpace 7910; eSpace 7950; eSpace
- CVE-2017-17225The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a bufferHuawei Technologies Co. Mate 9 Pro
- CVE-2017-17226The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulHuawei Technologies Co. TripAdvisor
- CVE-2017-17227GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); TheHuawei Technologies Co. Mate
- CVE-2017-17250Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200RHuawei Technologies Co. AR120-S; AR1200; AR1200-S; AR150; A…
- CVE-2017-17279The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343(C00) has an authenticatioHuawei Technologies Co. Mate 9 Pro
- CVE-2017-17280NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability.Huawei Technologies Co. LON-AL00B
- CVE-2017-17281SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17303Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00BHuawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60
- CVE-2017-17304The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messagesDP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981
- CVE-2017-17321Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability.Huawei Technologies Co. eNSP
- CVE-2017-17322Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability.Huawei Technologies Co. Honor Smart Scale Application
- CVE-2017-17323Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability.Huawei Technologies Co. iBMC
- CVE-2017-17324Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability.Huawei Technologies Co. Mate 9 Pro
- CVE-2017-17325Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability.Huawei Technologies Co. HiCinema
- CVE-2017-17326Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability.Huawei Technologies Co. Mate 9 Pro
- CVE-2017-17327Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability.Huawei Technologies Co. MHA-AL00A
- CVE-2017-17328Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability.Huawei Technologies Co. MHA-AL00A
- CVE-2017-17329Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability.Huawei Technologies Co. ViewPoint
- CVE-2017-17330Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008CHuawei Technologies Co. AR3200; NGFW Module
- CVE-2017-10852Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.Corega CG-WGR1200
- CVE-2017-10853Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.Corega CG-WGR1200
- CVE-2017-10854Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectorCorega CG-WGR1200
- CVE-2018-0521Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device BUFFALO WXR-1900DHP2
- CVE-2018-0522Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted fBUFFALO WXR-1900DHP2
- CVE-2018-0523Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.BUFFALO WXR-1900DHP2
- CVE-2018-0524Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.Jubatus Community Jubatus · jubatus
- CVE-2018-0525Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors.Jubatus Community Jubatus · jubatus
- CVE-2018-0543Untrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in aWoodyBells Jtrim
- CVE-2018-0544Untrusted search path vulnerability in WinShot 1.53a and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL inWoodyBells WinShot
- CVE-2018-0546Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web sSoflyy WP All Import
- CVE-2018-0547Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web sSoflyy WP All Import
- CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter.
- CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted
- CVE-2016-9585Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passeRed Hat EAP-5
- CVE-2018-1071zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function.zsh
- CVE-2018-6916In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPFreeBSD
- CVE-2018-7894Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter (aka the Search Parameter)
- CVE-2018-7995Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local
- CVE-2018-1069Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems.Red Hat OpenShift Enterprise
- CVE-2018-7536An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.django