# CVEs published 2018-03-09

104 CVEs were published on March 9, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-7227](https://cve.now/CVE-2018-7227.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrievi (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7228](https://cve.now/CVE-2018-7228.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unaut (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7229](https://cve.now/CVE-2018-7229.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unaut (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7230](https://cve.now/CVE-2018-7230.md): A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Pr (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7231](https://cve.now/CVE-2018-7231.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executio (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7232](https://cve.now/CVE-2018-7232.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executio (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7233](https://cve.now/CVE-2018-7233.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow executio (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7234](https://cve.now/CVE-2018-7234.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrar (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7235](https://cve.now/CVE-2018-7235.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrar (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7236](https://cve.now/CVE-2018-7236.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH ser (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7237](https://cve.now/CVE-2018-7237.md): A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7238](https://cve.now/CVE-2018-7238.md): A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior t (no CVSS, Schneider Electric SE Pelco Sarix Professional)
- [CVE-2018-7239](https://cve.now/CVE-2018-7239.md): A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to (no CVSS, Schneider Electric SE SoMove)
- [CVE-2016-8782](https://cve.now/CVE-2016-8782.md): Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. (no CVSS, Huawei Technologies Co. CloudEngine)
- [CVE-2016-8783](https://cve.now/CVE-2016-8783.md): Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02\_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a sta (no CVSS, Huawei Technologies Co. H60 (Honor 6), P9 Plus)
- [CVE-2016-8784](https://cve.now/CVE-2016-8784.md): Huawei CloudEngine 12800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00 have a memory leak vulnerability. (no CVSS, Huawei Technologies Co. CloudEngine)
- [CVE-2016-8785](https://cve.now/CVE-2016-8785.md): Huawei S12700 V200R007C00, V200R008C00, S5700 V200R007C00, S7700 V200R002C00, V200R005C00, V200R006C00, V200R007C00, V200R008C00, S9700 V200 (no CVSS, Huawei Technologies Co. S12700, S5700, S7700, S9700)
- [CVE-2016-8786](https://cve.now/CVE-2016-8786.md): Huawei S12700 V200R005C00, V200R006C00, V200R007C00, V200R008C00, S5700 V200R006C00, V200R007C00, V200R008C00, S6700 V200R008C00, S7700 V200 (no CVSS, Huawei Technologies Co. S12700, S5700, S6700, S7700, S9700)
- [CVE-2017-15314](https://cve.now/CVE-2017-15314.md): Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C00, TE30 V100R001C10SPC300, V100R001C10SPC500, V100R001C10SPC600, V100R001C10SPC (no CVSS, Huawei Technologies Co. DP300,RP200,TE30,TE40,TE50,TE60)
- [CVE-2017-15315](https://cve.now/CVE-2017-15315.md): Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C20SPC200, NIP6600 V500R001C20SPC100, V500R001C20SPC200, Secospace USG6300 V500R00 (no CVSS, Huawei Technologies Co. NIP6300,NIP6600,Secospace USG6300,S…)
- [CVE-2017-15323](https://cve.now/CVE-2017-15323.md): Huawei DP300 V500R002C00, NIP6600 V500R001C00, V500R001C20, V500R001C30, Secospace USG6500 V500R001C00, V500R001C20, V500R001C30, TE60 V100R (no CVSS, Huawei Technologies Co. DP300,NIP6600,Secospace USG6500,TE6…)
- [CVE-2017-17282](https://cve.now/CVE-2017-17282.md): SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, (no CVSS, Huawei Technologies Co. DP300, RP200, TE30, TE40, TE50, TE60)
- [CVE-2014-2592](https://cve.now/CVE-2014-2592.md): Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file (no CVSS)
- [CVE-2014-4861](https://cve.now/CVE-2014-4861.md): The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypte (no CVSS)
- [CVE-2014-6617](https://cve.now/CVE-2014-6617.md): Softing FG-100 PB PROFIBUS firmware version FG-x00-PB\_V2.02.0.00 contains a hardcoded password for the root account, which allows remote att (no CVSS)
- [CVE-2016-8612](https://cve.now/CVE-2016-8612.md): Apache HTTP Server mod\_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in th (no CVSS, Red Hat mod\_cluster)
- [CVE-2016-9591](https://cve.now/CVE-2016-9591.md): JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on t (no CVSS, JasPer Project jasper)
- [CVE-2016-9606](https://cve.now/CVE-2016-9606.md): JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untr (no CVSS, Red Hat RESTEasy · org.jboss.resteasy:resteasy-bom)
- [CVE-2018-7290](https://cve.now/CVE-2018-7290.md): Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1. (no CVSS)
- [CVE-2018-7537](https://cve.now/CVE-2018-7537.md): An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. (no CVSS, django)
- [CVE-2018-7581](https://cve.now/CVE-2018-7581.md): \\ProgramData\\WebLog Expert\\WebServer\\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\\Users:(ID)C), wh (no CVSS)
- [CVE-2018-7582](https://cve.now/CVE-2018-7582.md): WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991. (no CVSS)
- [CVE-2016-0253](https://cve.now/CVE-2016-0253.md): Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x (no CVSS)
- [CVE-2016-0268](https://cve.now/CVE-2016-0268.md): XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x b (no CVSS)
- [CVE-2016-0272](https://cve.now/CVE-2016-0272.md): Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3 (no CVSS)
- [CVE-2016-0274](https://cve.now/CVE-2016-0274.md): IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (no CVSS)
- [CVE-2016-0275](https://cve.now/CVE-2016-0275.md): IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (no CVSS)
- [CVE-2016-0276](https://cve.now/CVE-2016-0276.md): IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (no CVSS)
- [CVE-2016-0286](https://cve.now/CVE-2016-0286.md): IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote authenticated user (no CVSS)
- [CVE-2018-7998](https://cve.now/CVE-2018-7998.md): In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips\_region\_generate function in region.c, which (no CVSS)
- [CVE-2018-7999](https://cve.now/CVE-2018-7999.md): In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, whi (no CVSS)
- [CVE-2018-8000](https://cve.now/CVE-2018-8000.md): In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a rela (no CVSS)
- [CVE-2018-8001](https://cve.now/CVE-2018-8001.md): In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. (no CVSS)
- [CVE-2018-8002](https://cve.now/CVE-2018-8002.md): In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result (no CVSS)
- [CVE-2017-17145](https://cve.now/CVE-2017-17145.md): Huawei Honor V9 Play smart phones with the versions before Jimmy-AL00AC00B135 have an authentication bypass vulnerability due to the imprope (no CVSS)
- [CVE-2017-17146](https://cve.now/CVE-2017-17146.md): Huawei DP300 V500R002C00 have a buffer overflow vulnerability due to the lack of validation. (no CVSS, Huawei Technologies Co. DP300)
- [CVE-2017-17147](https://cve.now/CVE-2017-17147.md): Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. (no CVSS, Huawei Technologies Co. DP300)
- [CVE-2017-17148](https://cve.now/CVE-2017-17148.md): Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called. (no CVSS, Huawei Technologies Co. DP300)
- [CVE-2017-17149](https://cve.now/CVE-2017-17149.md): Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. (no CVSS, Huawei Technologies Co. Huawei HiWallet App)
- [CVE-2017-17150](https://cve.now/CVE-2017-17150.md): Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17167](https://cve.now/CVE-2017-17167.md): Huawei DP300 V500R002C00; TP3206 V100R002C00; ViewPoint 9030 V100R011C02; V100R011C03 have a use of a broken or risky cryptographic algorith (no CVSS, Huawei Technologies Co. DP300; TP3206; ViewPoint)
- [CVE-2017-17168](https://cve.now/CVE-2017-17168.md): The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages (no CVSS, DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981)
- [CVE-2017-17169](https://cve.now/CVE-2017-17169.md): The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages (no CVSS, DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981)
- [CVE-2017-17170](https://cve.now/CVE-2017-17170.md): The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages (no CVSS, DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981)
- [CVE-2017-17199](https://cve.now/CVE-2017-17199.md): Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17200](https://cve.now/CVE-2017-17200.md): Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17216](https://cve.now/CVE-2017-17216.md): Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17217](https://cve.now/CVE-2017-17217.md): Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17218](https://cve.now/CVE-2017-17218.md): SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 (no CVSS)
- [CVE-2017-17219](https://cve.now/CVE-2017-17219.md): SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17220](https://cve.now/CVE-2017-17220.md): SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17221](https://cve.now/CVE-2017-17221.md): Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerabilit (no CVSS, Huawei Technologies Co. eSpace 7950; eSpace)
- [CVE-2017-17222](https://cve.now/CVE-2017-17222.md): Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnera (no CVSS, Huawei Technologies Co. eSpace 7950; eSpace)
- [CVE-2017-17223](https://cve.now/CVE-2017-17223.md): Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. (no CVSS, Huawei Technologies Co. eSpace 7910; eSpace 7950; eSpace)
- [CVE-2017-17225](https://cve.now/CVE-2017-17225.md): The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer (no CVSS, Huawei Technologies Co. Mate 9 Pro)
- [CVE-2017-17226](https://cve.now/CVE-2017-17226.md): The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vul (no CVSS, Huawei Technologies Co. TripAdvisor)
- [CVE-2017-17227](https://cve.now/CVE-2017-17227.md): GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-17250](https://cve.now/CVE-2017-17250.md): Huawei AR120-S V200R005C32; AR1200 V200R005C32; AR1200-S V200R005C32; AR150 V200R005C32; AR150-S V200R005C32; AR160 V200R005C32; AR200 V200R (no CVSS, Huawei Technologies Co. AR120-S; AR1200; AR1200-S; AR150; A…)
- [CVE-2017-17279](https://cve.now/CVE-2017-17279.md): The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343(C00) has an authenticatio (no CVSS, Huawei Technologies Co. Mate 9 Pro)
- [CVE-2017-17280](https://cve.now/CVE-2017-17280.md): NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. (no CVSS, Huawei Technologies Co. LON-AL00B)
- [CVE-2017-17281](https://cve.now/CVE-2017-17281.md): SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17303](https://cve.now/CVE-2017-17303.md): Huawei DP300 V500R002C00; V500R002C00B010; V500R002C00B011; V500R002C00B012; V500R002C00B013; V500R002C00B014; V500R002C00B017; V500R002C00B (no CVSS, Huawei Technologies Co. DP300; RP200; TE30; TE40; TE50; TE60)
- [CVE-2017-17304](https://cve.now/CVE-2017-17304.md): The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages (no CVSS, DP300, RP200, TE30, TE40, TE50, TE60, eSpace U1981)
- [CVE-2017-17321](https://cve.now/CVE-2017-17321.md): Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability. (no CVSS, Huawei Technologies Co. eNSP)
- [CVE-2017-17322](https://cve.now/CVE-2017-17322.md): Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure vulnerability. (no CVSS, Huawei Technologies Co. Honor Smart Scale Application)
- [CVE-2017-17323](https://cve.now/CVE-2017-17323.md): Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. (no CVSS, Huawei Technologies Co. iBMC)
- [CVE-2017-17324](https://cve.now/CVE-2017-17324.md): Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. (no CVSS, Huawei Technologies Co. Mate 9 Pro)
- [CVE-2017-17325](https://cve.now/CVE-2017-17325.md): Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. (no CVSS, Huawei Technologies Co. HiCinema)
- [CVE-2017-17326](https://cve.now/CVE-2017-17326.md): Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. (no CVSS, Huawei Technologies Co. Mate 9 Pro)
- [CVE-2017-17327](https://cve.now/CVE-2017-17327.md): Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. (no CVSS, Huawei Technologies Co. MHA-AL00A)
- [CVE-2017-17328](https://cve.now/CVE-2017-17328.md): Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. (no CVSS, Huawei Technologies Co. MHA-AL00A)
- [CVE-2017-17329](https://cve.now/CVE-2017-17329.md): Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability. (no CVSS, Huawei Technologies Co. ViewPoint)
- [CVE-2017-17330](https://cve.now/CVE-2017-17330.md): Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C (no CVSS, Huawei Technologies Co. AR3200; NGFW Module)
- [CVE-2017-10852](https://cve.now/CVE-2017-10852.md): Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors. (no CVSS, Corega CG-WGR1200)
- [CVE-2017-10853](https://cve.now/CVE-2017-10853.md): Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. (no CVSS, Corega CG-WGR1200)
- [CVE-2017-10854](https://cve.now/CVE-2017-10854.md): Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vector (no CVSS, Corega CG-WGR1200)
- [CVE-2018-0521](https://cve.now/CVE-2018-0521.md): Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device (no CVSS, BUFFALO WXR-1900DHP2)
- [CVE-2018-0522](https://cve.now/CVE-2018-0522.md): Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted f (no CVSS, BUFFALO WXR-1900DHP2)
- [CVE-2018-0523](https://cve.now/CVE-2018-0523.md): Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. (no CVSS, BUFFALO WXR-1900DHP2)
- [CVE-2018-0524](https://cve.now/CVE-2018-0524.md): Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors. (no CVSS, Jubatus Community Jubatus · jubatus)
- [CVE-2018-0525](https://cve.now/CVE-2018-0525.md): Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS, Jubatus Community Jubatus · jubatus)
- [CVE-2018-0543](https://cve.now/CVE-2018-0543.md): Untrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in a (no CVSS, WoodyBells Jtrim)
- [CVE-2018-0544](https://cve.now/CVE-2018-0544.md): Untrusted search path vulnerability in WinShot 1.53a and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in (no CVSS, WoodyBells WinShot)
- [CVE-2018-0546](https://cve.now/CVE-2018-0546.md): Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web s (no CVSS, Soflyy WP All Import)
- [CVE-2018-0547](https://cve.now/CVE-2018-0547.md): Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web s (no CVSS, Soflyy WP All Import)
- [CVE-2018-7996](https://cve.now/CVE-2018-7996.md): Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter. (no CVSS)
- [CVE-2018-7997](https://cve.now/CVE-2018-7997.md): Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted (no CVSS)
- [CVE-2016-9585](https://cve.now/CVE-2016-9585.md): Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passe (no CVSS, Red Hat EAP-5)
- [CVE-2018-1071](https://cve.now/CVE-2018-1071.md): zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. (no CVSS, zsh)
- [CVE-2018-6916](https://cve.now/CVE-2018-6916.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IP (no CVSS, FreeBSD)
- [CVE-2018-7894](https://cve.now/CVE-2018-7894.md): Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced\_filter parameter (aka the Search Parameter) (no CVSS)
- [CVE-2018-7995](https://cve.now/CVE-2018-7995.md): Race condition in the store\_int\_with\_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local (no CVSS)
- [CVE-2018-1069](https://cve.now/CVE-2018-1069.md): Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. (no CVSS, Red Hat OpenShift Enterprise)
- [CVE-2018-7536](https://cve.now/CVE-2018-7536.md): An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. (no CVSS, django)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.