Archive

1 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /1 April 2018 →

All Critical High Medium Low Exploited only Public exploit

53 results · Feed

Unscored —

CVE-2018-2368

SAP NetWeaver System Landscape Directory, LM-CORE 7.10, 7.20, 7.30, 7.31, 7.40, does not perform any authentication che…

SAP SAP NetWeaver System Landscape Directory, LM-Core

Mar 1, 2018
Unscored —

CVE-2018-2365

SAP NetWeaver Portal, WebDynpro Java, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user controlled inputs, resu…

SAP SAP NetWeaver Portal WebDynpro RunTime

Mar 1, 2018
Unscored —

CVE-2018-5314

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before buil…

Mar 1, 2018
Unscored —

CVE-2018-5500

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP (MCTCP) connection esta…

F5 BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Network devices Browsers

Mar 1, 2018
Unscored —

CVE-2018-5501

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1,…

F5 BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Network devices Browsers

Mar 1, 2018
Unscored —

CVE-2017-6150

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble …

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Network devices

Mar 1, 2018
Unscored —

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memo…

F5 BIG-IP ASM Network devices

Mar 1, 2018
Unscored —

CVE-2018-7561

Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of …

Mar 1, 2018
Unscored —

CVE-2017-12627

In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer deref…

Apache Software Foundation Apache Xerces C++ xerces-c xerces-c Debian Ubuntu

Mar 1, 2018
Unscored —

CVE-2017-18207

The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, …

python3.4 python3.5 python2.7 python3.6 Ubuntu Azure Linux

Mar 1, 2018
Unscored —

CVE-2017-18208

The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Mar 1, 2018
Unscored —

CVE-2018-7550

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute …

qemu qemu Debian Ubuntu

Mar 1, 2018
Unscored —

CVE-2018-6653

comforte SWAP 1049 through 1069 and 20.0.0 through 21.5.3 (as used in SSLOBJ on HPE NonStop SSL T0910, and in the comfo…

Mar 1, 2018