CVEs published March 26, 2018
51 CVEs were published on March 26, 2018: 0 critical, 0 high.
- Published
- 51
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 2
- Unrated
- 47
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Dell EMC Isilon OneFS
- 9
- Philips IntelliSpace Portal
- 9
- Apache Software Foundation Apache HTTP Server
- 7
- NetIQ Identity Manager
- 4
- NVIDIA Tegra
- 1
- Symantec Norton App Lock
- 1
Medium, low and unrated 51
- CVE-2017-12410It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Admini
- CVE-2017-12815Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulne
- CVE-2018-7658NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by s
- CVE-2018-8802SQL injection vulnerability in the management interface in ePortal Manager allows remote attackers to execute arbitrary SQL commands via u
- CVE-2017-18249The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local use
- CVE-2018-1348NetIQ Identity Manager SSL RenegotiationNetIQ Identity Manager
- CVE-2018-1349NetIQ Identity Manager Driver Component Log File Information LeakageNetIQ Identity Manager
- CVE-2018-1350NetIQ Identity Manager Driver Component Information LeakageNetIQ Identity Manager
- CVE-2018-7673NetIQ Identity Manager DoS AttackNetIQ Identity Manager
- CVE-2014-2048The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementatio
- CVE-2014-2293Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary file
- CVE-2014-2312The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
- CVE-2015-5039The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 d
- CVE-2015-5045The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitiv
- CVE-2015-7401IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain
- CVE-2015-7423Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0,
- CVE-2015-7424IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users t
- CVE-2015-7432IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and parame
- CVE-2015-7433IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA i
- CVE-2015-7434IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA i
- CVE-2018-1186Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affeDell EMC Isilon OneFS
- CVE-2018-1187Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerabiDell EMC Isilon OneFS
- CVE-2018-1188Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-siDell EMC Isilon OneFS
- CVE-2018-1189Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affeDell EMC Isilon OneFS
- CVE-2018-1201Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affeDell EMC Isilon OneFS
- CVE-2018-1202Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-siDell EMC Isilon OneFS
- CVE-2018-1203In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges.Dell EMC Isilon OneFS
- CVE-2018-1204Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 iDell EMC Isilon OneFS
- CVE-2018-1213Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 aDell EMC Isilon OneFS
- CVE-2018-7543Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows re
- CVE-2017-18248The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending p
- CVE-2018-8937An issue was discovered in Open-AudIT Professional 2.1.
- CVE-2017-15534The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit.Symantec Norton App Lock
- CVE-2017-6278NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using anNVIDIA Tegra
- CVE-2017-15710In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Apache Software Foundation Apache HTTP Server
- CVE-2017-15715In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, raApache Software Foundation Apache HTTP Server
- CVE-2018-1283In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the defaApache Software Foundation Apache HTTP Server
- CVE-2018-1301A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size liApache Software Foundation Apache HTTP Server
- CVE-2018-1302When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer poApache Software Foundation Apache HTTP Server
- CVE-2018-1303A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while Apache Software Foundation Apache HTTP Server
- CVE-2018-1312In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not coApache Software Foundation Apache HTTP Server
- CVE-2018-5454Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could alloPhilips IntelliSpace Portal
- CVE-2018-5458Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker tPhilips IntelliSpace Portal
- CVE-2018-5462Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an atPhilips IntelliSpace Portal
- CVE-2018-5464Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker toPhilips IntelliSpace Portal
- CVE-2018-5466Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker tPhilips IntelliSpace Portal
- CVE-2018-5468Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unaPhilips IntelliSpace Portal
- CVE-2018-5470Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified,Philips IntelliSpace Portal
- CVE-2018-5472Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to Philips IntelliSpace Portal
- CVE-2018-5474Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to executPhilips IntelliSpace Portal
- CVE-2018-9020The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.