Archive
8 March 2018
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —
A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The p…
-
Unscored —
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attack…
-
Unscored —CVE-2018-7183 EPSS 10%
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute ar…
-
Unscored —
A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions.…
-
Unscored —
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as …
-
Unscored —
Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
-
Unscored —
An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 d…
-
Unscored —
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The …
-
Unscored —
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data.…
-
Unscored —
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A…
-
Unscored —
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. …
-
Unscored —
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data…
-
Unscored —
In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, w…
-
Unscored —
There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a deni…
-
Unscored —
There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 dat…
-
Unscored —
A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a s…
-
Unscored —
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterN…
-
Unscored —
An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerabili…
-
Unscored —
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions…
-
Unscored —
A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet m…
-
Unscored —
A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions…
-
Medium 5.3
IBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensit…
-
Medium 4.3
IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-s…
-
Medium 5.9
An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9…
-
Medium 5.3
IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used t…
-
Unscored —CVE-2018-1216 EPSS 21%
A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, De…
-
Unscored —
EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature. A remote attack…
-
Unscored —
An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware …
-
Unscored —
An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX,…
-
Unscored —
EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to…
-
Unscored —
Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.…
-
Unscored —
In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, a…
-
Unscored —
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
-
Unscored —
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests pr…
-
Unscored —
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run ar…
-
Unscored —
A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the …
-
Unscored —
A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote atta…
-
Unscored —
A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could al…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X…