CVEs published March 21, 2018
30 CVEs were published on March 21, 2018: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 2
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- GitLab Community and Enterprise Editions
- 12
- ICS-CERT Omron CX-Supervisor
- 6
- NetIQ iManager
- 3
- ICS-CERT BeaconMedæs TotalAlert Scroll Medical A…
- 1
- NetIQ eDirectory
- 1
- Spring by Pivotal Spring Batch Admin
- 1
- Spring by Pivotal Spring Batch Admin · org.springframework.…
- 1
- yiisoft/yii2-dev
- 1
- yiisoft/yii2-dev · yiisoft/yii2-elasticsearch
- 1
- yiisoft/yii2-redis
- 1
Medium, low and unrated 30
- CVE-2016-10717A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.
- CVE-2017-0914Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component rGitLab Community and Enterprise Editions
- CVE-2017-0915Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote cGitLab Community and Enterprise Editions
- CVE-2017-0916Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component rGitLab Community and Enterprise Editions
- CVE-2017-0917Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross siteGitLab Community and Enterprise Editions
- CVE-2017-0918Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code exeGitLab Community and Enterprise Editions
- CVE-2017-0922Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resGitLab Community and Enterprise Editions
- CVE-2017-0923Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent crGitLab Community and Enterprise Editions
- CVE-2017-0924Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross siteGitLab Community and Enterprise Editions
- CVE-2017-0925Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration APGitLab Community and Enterprise Editions
- CVE-2017-0926Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthoriGitLab Community and Enterprise Editions
- CVE-2017-0927Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthoGitLab Community and Enterprise Editions
- CVE-2018-1229Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature.Spring by Pivotal Spring Batch Admin · org.springframework.…
- CVE-2018-1230Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection.Spring by Pivotal Spring Batch Admin
- CVE-2018-3710Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resultinGitLab Community and Enterprise Editions
- CVE-2018-7513In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.ICS-CERT Omron CX-Supervisor
- CVE-2018-7515In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectICS-CERT BeaconMedæs TotalAlert Scroll Medical A…
- CVE-2018-7517In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.ICS-CERT Omron CX-Supervisor
- CVE-2018-7519In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.ICS-CERT Omron CX-Supervisor
- CVE-2018-7521In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafteICS-CERT Omron CX-Supervisor
- CVE-2018-7523In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.ICS-CERT Omron CX-Supervisor
- CVE-2018-7525In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereferICS-CERT Omron CX-Supervisor
- CVE-2018-7269The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attayiisoft/yii2-dev
- CVE-2018-8073Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with thyiisoft/yii2-redis
- CVE-2018-8074Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunctioyiisoft/yii2-dev · yiisoft/yii2-elasticsearch
- CVE-2017-18241fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer dereference and panic) by us
- CVE-2018-1344NetIQ iManager Communication Downgrade AttackNetIQ iManager
- CVE-2018-1345iManager elevation of privilegeNetIQ iManager
- CVE-2018-1346NetIQ eDirectory Denial of ServiceNetIQ eDirectory
- CVE-2018-1347NetIQ iManager, versions prior to 3.1, reflected XSS issueNetIQ iManager