# CVEs published 2018-03-16

42 CVEs were published on March 16, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11074](https://cve.now/CVE-2017-11074.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is an obsolete set/res (no CVSS)
- [CVE-2017-11082](https://cve.now/CVE-2017-11082.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in a (no CVSS)
- [CVE-2017-14887](https://cve.now/CVE-2017-14887.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of message (no CVSS)
- [CVE-2017-14889](https://cve.now/CVE-2017-14889.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range c (no CVSS)
- [CVE-2017-15814](https://cve.now/CVE-2017-15814.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in msm\_flash\_subdev\_do\_ioctl (no CVSS)
- [CVE-2017-15830](https://cve.now/CVE-2017-15830.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper ch\_list array index (no CVSS)
- [CVE-2017-15831](https://cve.now/CVE-2017-15831.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma\_ndp\_end\_ (no CVSS)
- [CVE-2017-15833](https://cve.now/CVE-2017-15833.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, untrusted pointer dereferenc (no CVSS)
- [CVE-2017-15834](https://cve.now/CVE-2017-15834.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, race condition in diag\_dbgfs (no CVSS)
- [CVE-2017-18050](https://cve.now/CVE-2017-18050.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18051](https://cve.now/CVE-2017-18051.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18052](https://cve.now/CVE-2017-18052.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18053](https://cve.now/CVE-2017-18053.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18054](https://cve.now/CVE-2017-18054.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18055](https://cve.now/CVE-2017-18055.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18057](https://cve.now/CVE-2017-18057.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18058](https://cve.now/CVE-2017-18058.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18059](https://cve.now/CVE-2017-18059.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18060](https://cve.now/CVE-2017-18060.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18061](https://cve.now/CVE-2017-18061.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow ca (no CVSS)
- [CVE-2017-18062](https://cve.now/CVE-2017-18062.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow ca (no CVSS)
- [CVE-2017-18065](https://cve.now/CVE-2017-18065.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation fo (no CVSS)
- [CVE-2017-18066](https://cve.now/CVE-2017-18066.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM COR (no CVSS)
- [CVE-2018-3560](https://cve.now/CVE-2018-3560.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Double Free vulnerability (no CVSS)
- [CVE-2018-3561](https://cve.now/CVE-2018-3561.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag\_ioc (no CVSS)
- [CVE-2016-9880](https://cve.now/CVE-2016-9880.md): The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not require authenticatio (no CVSS, Dell EMC GemFire broker for Cloud Foundry)
- [CVE-2017-14384](https://cve.now/CVE-2017-14384.md): In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. (no CVSS, Dell EMC Dell Storage Manager)
- [CVE-2017-8013](https://cve.now/CVE-2017-8013.md): EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and va (no CVSS, Dell EMC EMC Data Protection Advisor)
- [CVE-2018-1078](https://cve.now/CVE-2018-1078.md): OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should (no CVSS, OpenDayLight)
- [CVE-2018-1199](https://cve.now/CVE-2018-1199.md): Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 an (no CVSS, Dell EMC Spring by Pivotal · org.springframework.securit… +1)
- [CVE-2018-1200](https://cve.now/CVE-2018-1200.md): Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged (no CVSS, Dell EMC Apps Manager for PCF)
- [CVE-2018-8739](https://cve.now/CVE-2018-8739.md): VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. (no CVSS)
- [CVE-2014-4612](https://cve.now/CVE-2014-4612.md): Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before (no CVSS)
- [CVE-2014-4613](https://cve.now/CVE-2014-4613.md): Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the aut (no CVSS)
- [CVE-2018-1068](https://cve.now/CVE-2018-1068.md): A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging. (no CVSS, Linux Kernel Organization Linux Kernel)
- [CVE-2018-7544](https://cve.now/CVE-2018-7544.md): A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. (no CVSS)
- [CVE-2017-12590](https://cve.now/CVE-2017-12590.md): ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter. (no CVSS)
- [CVE-2018-1000133](https://cve.now/CVE-2018-1000133.md): Pitchfork version 1.4.6 RC1 contains an Improper Privilege Management vulnerability in Trident Pitchfork components that can result in A sta (no CVSS)
- [CVE-2018-1000134](https://cve.now/CVE-2018-1000134.md): UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where (no CVSS, com.unboundid:unboundid-ldapsdk)
- [CVE-2016-10715](https://cve.now/CVE-2016-10715.md): The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board action, related to an (no CVSS)
- [CVE-2016-10716](https://cve.now/CVE-2016-10716.md): The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCa (no CVSS)
- [CVE-2018-1324](https://cve.now/CVE-2018-1324.md): A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipF (no CVSS, Apache Software Foundation Apache Commons Compress · org… +2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.