Skip to content
OpenAdvisories

Archive

4 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /4 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2018-7662 Scanner template EPSS 47%

    Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.fu…

  • Unscored —
    CVE-2018-7661

    Papenmeier WiFi Baby Monitor Free & Lite before 2.02.2 allows remote attackers to obtain audio data via certain request…

  • High 7.5
    CVE-2017-18214

    Regular Expression Denial of Service in moment

    The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

    reaper ntopng moment node-moment Debian Ubuntu Azure Linux npm
  • High 7.5
    CVE-2018-7560

    AWS Lambda parser is vulnerable to Regular Expression Denial of Service

    index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.

    aws-lambda-multipart-parser npm
  • Unscored —
    CVE-2018-7567

    In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authent…

    otrs2 Debian
  • Unscored —
    CVE-2018-7653 Public exploit Scanner template

    In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.

  • Unscored —
    CVE-2017-18213

    In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.

  • Unscored —
    CVE-2018-7449 Public exploit

    SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service (daemon crash) via an i…

  • Unscored —
    CVE-2018-7583 Public exploit EPSS 38%

    Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.

  • Unscored —
    CVE-2018-7654

    On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access …

  • Unscored —
    CVE-2018-7652

    lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS.

  • Medium 5.9
    CVE-2018-7651

    Regular Expression Denial of Service in ssri

    index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string.

    node-ssri ssri node-ssri Debian Ubuntu npm