CVEs published March 31, 2018
9 CVEs were published on March 31, 2018: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- com.sparkjava:spark-core
- 1
- github.com/docker/notary
- 1
- sickrage
- 1
Medium, low and unrated 9
- CVE-2018-8893Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.
- CVE-2018-8908An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5.
- CVE-2018-9161Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account b
- CVE-2018-9162Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user.php, as demonstrated
- CVE-2015-9258In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability.github.com/docker/notary
- CVE-2015-9259In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment st
- CVE-2018-9159In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as com.sparkjava:spark-core
- CVE-2018-9160SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.sickrage
- CVE-2017-18255The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial