# CVEs published 2018-03-15

53 CVEs were published on March 15, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2017-16745](https://cve.now/CVE-2017-16745.md): A Type Confusion issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. (no CVSS, Delta Electronics Delta Industrial Automation Screen Editor)
- [CVE-2017-16747](https://cve.now/CVE-2017-16747.md): An Out-of-bounds Write issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. (no CVSS, Delta Electronics Delta Industrial Automation Screen Editor)
- [CVE-2017-16749](https://cve.now/CVE-2017-16749.md): A Use-after-Free issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or prior. (no CVSS, Delta Electronics Delta Industrial Automation Screen Editor)
- [CVE-2017-16751](https://cve.now/CVE-2017-16751.md): A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation Screen Editor, Version 2.00.23.00 or pri (no CVSS, Delta Electronics Delta Industrial Automation Screen Editor)
- [CVE-2018-5476](https://cve.now/CVE-2018-5476.md): A Stack-based Buffer Overflow issue was discovered in Delta Electronics Delta Industrial Automation DOPSoft, Version 4.00.01 or prior. (no CVSS, Delta Electronics Delta Industrial Automation DOPSoft)
- [CVE-2015-7440](https://cve.now/CVE-2015-7440.md): IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0. (no CVSS)
- [CVE-2015-7453](https://cve.now/CVE-2015-7453.md): Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, (no CVSS)
- [CVE-2015-7463](https://cve.now/CVE-2015-7463.md): IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete pro (no CVSS)
- [CVE-2015-7471](https://cve.now/CVE-2015-7471.md): Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, (no CVSS)
- [CVE-2016-0223](https://cve.now/CVE-2016-0223.md): Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers (no CVSS)
- [CVE-2018-7033](https://cve.now/CVE-2018-7033.md): SchedMD Slurm before 17.02.10 and 17.11.x before 17.11.5 allows SQL Injection attacks against SlurmDBD. (no CVSS)
- [CVE-2016-10393](https://cve.now/CVE-2016-10393.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with (no CVSS)
- [CVE-2017-14878](https://cve.now/CVE-2017-14878.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a length variable which is u (no CVSS)
- [CVE-2017-14882](https://cve.now/CVE-2017-14882.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR spec (no CVSS)
- [CVE-2017-14885](https://cve.now/CVE-2017-14885.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, wma\_unified\_link\_peer\_stats\_ (no CVSS)
- [CVE-2017-15815](https://cve.now/CVE-2017-15815.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow (no CVSS)
- [CVE-2017-15821](https://cve.now/CVE-2017-15821.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma\_p2p\_noa\_ (no CVSS)
- [CVE-2017-17773](https://cve.now/CVE-2017-17773.md): In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD (no CVSS)
- [CVE-2017-18056](https://cve.now/CVE-2017-18056.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18063](https://cve.now/CVE-2017-18063.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18064](https://cve.now/CVE-2017-18064.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18067](https://cve.now/CVE-2017-18067.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation wh (no CVSS)
- [CVE-2017-18068](https://cve.now/CVE-2017-18068.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper buffer length calcu (no CVSS)
- [CVE-2017-18069](https://cve.now/CVE-2017-18069.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length calc (no CVSS)
- [CVE-2018-1319](https://cve.now/CVE-2018-1319.md): In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. (no CVSS, Apache Software Foundation Apache Allura)
- [CVE-2017-18233](https://cve.now/CVE-2017-18233.md): An issue was discovered in Exempi before 2.4.4. (no CVSS)
- [CVE-2017-18234](https://cve.now/CVE-2017-18234.md): An issue was discovered in Exempi before 2.4.3. (no CVSS)
- [CVE-2017-18235](https://cve.now/CVE-2017-18235.md): An issue was discovered in Exempi before 2.4.3. (no CVSS)
- [CVE-2017-18236](https://cve.now/CVE-2017-18236.md): An issue was discovered in Exempi before 2.4.4. (no CVSS)
- [CVE-2017-18237](https://cve.now/CVE-2017-18237.md): An issue was discovered in Exempi before 2.4.3. (no CVSS)
- [CVE-2017-18238](https://cve.now/CVE-2017-18238.md): An issue was discovered in Exempi before 2.4.4. (no CVSS)
- [CVE-2018-6219](https://cve.now/CVE-2018-6219.md): An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesdrop and tamper with c (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6220](https://cve.now/CVE-2018-6220.md): An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which ma (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6221](https://cve.now/CVE-2018-6221.md): An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middle attacker to tamper (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6222](https://cve.now/CVE-2018-6222.md): Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulat (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6223](https://cve.now/CVE-2018-6223.md): A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to man (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6224](https://cve.now/CVE-2018-6224.md): A lack of cross-site request forgery (CSRF) protection vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6225](https://cve.now/CVE-2018-6225.md): An XML external entity injection (XXE) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an authenticated user to expose (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6226](https://cve.now/CVE-2018-6226.md): Reflected cross-site scripting (XSS) vulnerabilities in two Trend Micro Email Encryption Gateway 5.5 configuration files could allow an atta (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6227](https://cve.now/CVE-2018-6227.md): A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject client-side (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6228](https://cve.now/CVE-2018-6228.md): A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6229](https://cve.now/CVE-2018-6229.md): A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL comma (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6230](https://cve.now/CVE-2018-6230.md): A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 search configuration script could allow an attacker to execute (no CVSS, Trend Micro Email Encryption Gateway)
- [CVE-2018-6231](https://cve.now/CVE-2018-6231.md): A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and bel (no CVSS, Trend Micro Smart Protection Server)
- [CVE-2018-6957](https://cve.now/CVE-2018-6957.md): VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2018-8729](https://cve.now/CVE-2018-8729.md): Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject a (no CVSS)
- [CVE-2018-8728](https://cve.now/CVE-2018-8728.md): server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, as demonstrated by /co (no CVSS)
- [CVE-2018-8720](https://cve.now/CVE-2018-8720.md): ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka (no CVSS)
- [CVE-2017-18232](https://cve.now/CVE-2017-18232.md): The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users (no CVSS)
- [CVE-2018-8076](https://cve.now/CVE-2018-8076.md): ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon component. (no CVSS)
- [CVE-2018-8721](https://cve.now/CVE-2018-8721.md): Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profi (no CVSS)
- [CVE-2018-8722](https://cve.now/CVE-2018-8722.md): Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026. (no CVSS)
- [CVE-2018-7886](https://cve.now/CVE-2018-7886.md): An issue was discovered in CloudMe 1.11.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.