CVEs published March 14, 2018
144 CVEs were published on March 14, 2018: 0 critical, 4 high.
- Published
- 144
- Critical
- 0
- High
- 4
- Medium
- 8
- Low
- 3
- Unrated
- 129
- Now in CISA KEV
- 0
- Fix available
- 17
Most affected products
- Microsoft SharePoint
- 13
- Microsoft Windows kernel
- 13
- ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- 10
- Microsoft Windows
- 6
- Microsoft Edge
- 4
- Microsoft Internet Explorer
- 3
- OSIsoft PI Data Archive
- 3
- IBM Notes
- 2
- Internet Explorer, Microsoft Edge
- 2
- Microsoft Exchange Server
- 2
High 4
- CVE-2018-2402In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about caSAP SE SAP HANA
- CVE-2018-1386IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with improper permissions tIBM Workload Scheduler
- CVE-2018-1435IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack.IBM Notes
- CVE-2018-1437IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted searIBM Notes
Medium, low and unrated 140
- CVE-2017-12194A flaw was found in the way spice-client processed certain messages sent from the server.freedesktop.org spice-gtk
- CVE-2018-7701Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attackers to hijack the authe
- CVE-2018-7702SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e-mail messages to ar
- CVE-2018-7703Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT
- CVE-2018-7704SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1 parameter in a reply
- CVE-2018-7705Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitr
- CVE-2018-7706Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages
- CVE-2018-7707Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbitrary web script or HT
- CVE-2018-7756RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which al
- CVE-2018-8045In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User
- CVE-2018-8715The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function in http/httpLib.c.
- CVE-2018-8717joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager req
- CVE-2018-2366SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information providSAP SE SAP Business Process Automation (BPA) By Redwood
- CVE-2018-2397In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently eSAP SE SAP Business Objects Business Intelligence Platform
- CVE-2018-2398Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be restricted.SAP SE SAP Business Client
- CVE-2018-2399Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inefficient encoding of uSAP SE SAP Process Monitoring Infrastructure
- CVE-2018-2400Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which would
- CVE-2018-2401SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrusted source resulting SAP SE SAP Business Process Automation (BPA) By Redwood
- CVE-2018-6328It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, which then could allo
- CVE-2018-6329It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL injection, allowing a
- CVE-2018-8710A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrate
- CVE-2018-8711A local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated
- CVE-2018-8712An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled.
- CVE-2018-1000120A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of securl
- CVE-2018-1000121A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of
- CVE-2018-1000122A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denia
- CVE-2018-1077Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information from the server.spacewalk
- CVE-2018-7496An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior.OSIsoft PI Vision
- CVE-2018-7500A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.OSIsoft PI Web API
- CVE-2018-7504A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior.OSIsoft PI Vision
- CVE-2018-7508A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior.OSIsoft PI Web API
- CVE-2018-7529A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-7531An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-7533An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.OSIsoft PI Data Archive
- CVE-2018-0787ASP.NET Core 1.0.Microsoft ASP.NET Core · Microsoft.AspNetCore.HttpOverri… +1
- CVE-2018-0808ASP.NET Core 1.0.Microsoft ASP.NET Core
- CVE-2018-0811The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0813The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0814The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0815The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an elevation of privileMicrosoft Windows
- CVE-2018-0816The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Microsoft Windows
- CVE-2018-0817The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Microsoft Windows
- CVE-2018-0868Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindowMicrosoft Windows Installer
- CVE-2018-0872ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, duChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0873ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to hChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0874ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, duChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0875.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted reMicrosoft .NET Core · Microsoft.NETCore.Jit
- CVE-2018-0876Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting enMicrosoft Edge
- CVE-2018-0877The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allowsMicrosoft Windows Desktop Bridge Virtual File System
- CVE-2018-0878Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2Microsoft Windows Remote Assistance
- CVE-2018-0879Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Microsoft Edge
- CVE-2018-0880The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilegeMicrosoft Windows Desktop Bridge
- CVE-2018-0881The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindMicrosoft Windows
- CVE-2018-0882The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilegeMicrosoft Windows Deskop Bridge
- CVE-2018-0883Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10Microsoft Windows Shell
- CVE-2018-0884Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a seMicrosoft Windows Scripting Host
- CVE-2018-0885The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, WindowsMicrosoft Hyper-V Network Switch
- CVE-2018-0886The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and Microsoft Windows
- CVE-2018-0888The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, WindowsMicrosoft Hyper-V Network SwitchHyper-V Network Switch
- CVE-2018-0889Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting enMicrosoft Edge
- CVE-2018-0891ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows ServerChakraCore, Microsoft Edge, Internet Explorer
- CVE-2018-0893Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting enMicrosoft Edge
- CVE-2018-0894The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0895The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0896The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0897The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0898The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0899The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0900The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0901The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0902The Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 Gold, 1511, 1607, 1703, and 1709.Microsoft Cryptography Next Generation (CNG) kernel-mode dr…
- CVE-2018-0903Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execMicrosoft Access
- CVE-2018-0904The Windows kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 GoMicrosoft Windows kernel
- CVE-2018-0907Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and MMicrosoft Excel
- CVE-2018-0909Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0910Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0911Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0912Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0913Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0914Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0915Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0916Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how sMicrosoft SharePoint
- CVE-2018-0917Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanMicrosoft SharePoint
- CVE-2018-0919Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2Microsoft Office
- CVE-2018-0921Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanMicrosoft SharePoint
- CVE-2018-0922Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office CompatibilMicrosoft Office
- CVE-2018-0923Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanMicrosoft SharePoint
- CVE-2018-0924Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange ServMicrosoft Exchange Server
- CVE-2018-0925ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Microsoft ChakraCore · Microsoft.ChakraCore
- CVE-2018-0926The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Windows kernel
- CVE-2018-0927Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and MiInternet Explorer, Microsoft Edge
- CVE-2018-0929Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2018-0930ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objeChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0931ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the ChakrChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0932Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and MiInternet Explorer, Microsoft Edge
- CVE-2018-0933ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the ChakrChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0934ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the ChakrChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0935Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, WiMicrosoft Internet Explorer
- CVE-2018-0936ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0937ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0939ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in mChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2018-0940Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 201Microsoft Exchange Outlook Web Access
- CVE-2018-0941Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure vuMicrosoft Exchange Server
- CVE-2018-0942Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2018-0944Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how Microsoft SharePoint
- CVE-2018-0947Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to duMicrosoft SharePoint
- CVE-2018-0977The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows aMicrosoft Windows
- CVE-2018-0983Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elMicrosoft Windows Storage Services
- CVE-2018-5779A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and
- CVE-2018-5780A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and
- CVE-2018-5781A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and
- CVE-2018-5782A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and
- CVE-2018-7677CSRF in NetIQ Access Manager (NAM) Identity Server componentNetIQ Access Manager (NAM) Admin Console
- CVE-2018-7678XSS vulnerability in NetIQ Access Manager (NAM) Admin Console componentNetIQ Access Manager (NAM) Admin Console
- CVE-2018-7474An issue was discovered in Textpattern CMS 4.6.2 and earlier.
- CVE-2018-1000129An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript iorg.jolokia:jolokia-core
- CVE-2018-1000130A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java corg.jolokia:jolokia-core
- CVE-2018-1000131Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the funct
- CVE-2018-1000132Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthormercurial
- CVE-2018-6875Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be acce
- CVE-2018-7279A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
- CVE-2018-8097io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameteve
- CVE-2018-8108The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by w
- CVE-2018-8100The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow a
- CVE-2018-8101The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer o
- CVE-2018-8102The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (buffer over-read and
- CVE-2018-8103The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer o
- CVE-2018-8104The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and app
- CVE-2018-8105The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read a
- CVE-2018-8106The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-r
- CVE-2018-8107The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and app
- CVE-2017-18229An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-18230An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-18231An issue was discovered in GraphicsMagick 1.3.26.
- CVE-2017-1741IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper hanIBM WebSphere Application Server
- CVE-2018-1441IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scriptiIBM Monitoring
- CVE-2018-1444IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Portal
- CVE-2018-8096Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Name":"isauthenticatione
- CVE-2018-8098Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an att
- CVE-2018-8099Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an