CVEs published March 28, 2018
56 CVEs were published on March 28, 2018: 1 critical, 11 high. 15 are now in CISA KEV.
- Published
- 56
- Critical
- 1
- High
- 11
- Medium
- 3
- Low
- 2
- Unrated
- 39
- Now in CISA KEV
- 15
- Fix available
- 4
Most affected products
- Cisco IOS XE
- 19
- Cisco IOS and IOS XE
- 10
- Cisco IOS
- 5
- Cisco IOS, IOS XE, and IOS XR
- 2
- NetIQ Identity Manager
- 2
- Philips Alice 6 System
- 2
- studio-42/elfinder
- 2
- Cisco IOS XE Software
- 1
- Firebird Foundation Firebird SQL Server
- 1
- libvirt
- 1
Critical 1
High 11
- CVE-2018-0154A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unaCisco IOS
- CVE-2018-0155A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco CataCisco IOS and IOS XE
- CVE-2018-0156A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attackerCisco IOS and IOS XE
- CVE-2018-0158A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unautheCisco IOS and IOS XE
- CVE-2018-0159A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE SoftwaCisco IOS and IOS XE
- CVE-2018-0167Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software,Cisco IOS, IOS XE, and IOS XR
- CVE-2018-0171A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attackerCisco IOS and IOS XE
- CVE-2018-0172A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticCisco IOS and IOS XE
- CVE-2018-0173A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP VersioCisco IOS and IOS XE
- CVE-2018-0174A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticCisco IOS and IOS XE
- CVE-2018-0175Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOCisco IOS, IOS XE, and IOS XR
Medium, low and unrated 44
- CVE-2018-0150A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release oCisco IOS XE
- CVE-2018-0152A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevCisco IOS XE Software
- CVE-2018-0157A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device tCisco IOS XE
- CVE-2018-0160A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attackeCisco IOS XE
- CVE-2018-0161A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco CatalystCisco IOS
- CVE-2018-0163A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent atCisco IOS
- CVE-2018-0164A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to causeCisco IOS XE
- CVE-2018-0165A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an unaCisco IOS XE
- CVE-2018-0169Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underCisco IOS XE
- CVE-2018-0170A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause Cisco IOS XE
- CVE-2018-0176Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underCisco IOS XE
- CVE-2018-0177A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 SCisco IOS XE
- CVE-2018-0179Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attackCisco IOS
- CVE-2018-0180Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attackCisco IOS
- CVE-2018-0182Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commandCisco IOS XE
- CVE-2018-0183A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying LinCisco IOS XE
- CVE-2018-0184A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying LinCisco IOS XE
- CVE-2018-0185Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commandCisco IOS XE
- CVE-2018-0186Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker tCisco IOS XE
- CVE-2018-0188Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker tCisco IOS XE
- CVE-2018-0189A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticatedCisco IOS and IOS XE
- CVE-2018-0190Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker tCisco IOS XE
- CVE-2018-0193Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commandCisco IOS XE
- CVE-2018-0195A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and uCisco IOS XE
- CVE-2018-0196A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbCisco IOS XE
- CVE-2018-6608In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https:
- CVE-2017-0936Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability.Nextcloud Server
- CVE-2018-8820An issue was discovered in Square 9 GlobalForms 6.2.x.
- CVE-2018-8885screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypa
- CVE-2018-1064libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMUlibvirt
- CVE-2017-11509An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL staFirebird Foundation Firebird SQL Server
- CVE-2017-11510An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator usWanscam HW0021
- CVE-2018-5451In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficienPhilips Alice 6 System
- CVE-2018-7498In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrityPhilips Alice 6 System
- CVE-2018-7674IDM URL Redirection attackNetIQ Identity Manager
- CVE-2018-7676IDM Information LeakageNetIQ Identity Manager
- CVE-2018-9110Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a restudio-42/elfinder
- CVE-2018-1083Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.zsh
- CVE-2018-1142Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability.Tenable Appliance
- CVE-2018-9109Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a restudio-42/elfinder
- CVE-2018-9106CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for J
- CVE-2018-9107CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 f
- CVE-2018-9108CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privilegesquickapps/cms
- CVE-2018-8823modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 thro