CVEs published March 15, 2018
53 CVEs were published on March 15, 2018: 0 critical, 0 high.
- Published
- 53
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Trend Micro Email Encryption Gateway
- 12
- Delta Electronics Delta Industrial Automation Screen Editor
- 4
- Apache Software Foundation Apache Allura
- 1
- Delta Electronics Delta Industrial Automation DOPSoft
- 1
- Trend Micro Smart Protection Server
- 1
- VMware Workstation · VMware Fusion
- 1
Medium, low and unrated 53
- CVE-2017-16745A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16747An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16749A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior.Delta Electronics Delta Industrial Automation Screen Editor
- CVE-2017-16751A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or priDelta Electronics Delta Industrial Automation Screen Editor
- CVE-2018-5476A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior.Delta Electronics Delta Industrial Automation DOPSoft
- CVE-2015-7440IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.
- CVE-2015-7453Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1,
- CVE-2015-7463IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete pro
- CVE-2015-7471Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1,
- CVE-2016-0223Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers
- CVE-2018-7033SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD.
- CVE-2016-10393In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with
- CVE-2017-14878In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is u
- CVE-2017-14882In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR spec
- CVE-2017-14885In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma_unified_link_peer_stats_
- CVE-2017-15815In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow
- CVE-2017-15821In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_p2p_noa_
- CVE-2017-17773In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD
- CVE-2017-18056In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo
- CVE-2017-18063In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo
- CVE-2017-18064In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo
- CVE-2017-18067In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation wh
- CVE-2017-18068In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper buffer length calcu
- CVE-2017-18069In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length calc
- CVE-2018-1319In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting.Apache Software Foundation Apache Allura
- CVE-2017-18233An issue was discovered in Exempi before 2.4.4.
- CVE-2017-18234An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18235An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18236An issue was discovered in Exempi before 2.4.4.
- CVE-2017-18237An issue was discovered in Exempi before 2.4.3.
- CVE-2017-18238An issue was discovered in Exempi before 2.4.4.
- CVE-2018-6219An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with cTrend Micro Email Encryption Gateway
- CVE-2018-6220An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which maTrend Micro Email Encryption Gateway
- CVE-2018-6221An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper Trend Micro Email Encryption Gateway
- CVE-2018-6222Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulatTrend Micro Email Encryption Gateway
- CVE-2018-6223A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manTrend Micro Email Encryption Gateway
- CVE-2018-6224A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to Trend Micro Email Encryption Gateway
- CVE-2018-6225An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to exposeTrend Micro Email Encryption Gateway
- CVE-2018-6226Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an attaTrend Micro Email Encryption Gateway
- CVE-2018-6227A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side Trend Micro Email Encryption Gateway
- CVE-2018-6228A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands toTrend Micro Email Encryption Gateway
- CVE-2018-6229A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commaTrend Micro Email Encryption Gateway
- CVE-2018-6230A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute Trend Micro Email Encryption Gateway
- CVE-2018-6231A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and belTrend Micro Smart Protection Server
- CVE-2018-6957VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can beVMware Workstation · VMware Fusion
- CVE-2018-8729Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject a
- CVE-2018-8728server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by /co
- CVE-2018-8720ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka
- CVE-2017-18232The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users
- CVE-2018-8076ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component.
- CVE-2018-8721Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profi
- CVE-2018-8722Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.
- CVE-2018-7886An issue was discovered in CloudMe 1.11.0.