Skip to content
OpenAdvisories

Archive

14 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /14 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

31 results · Clear filters · Feed

  • Unscored —
    CVE-2018-7702 Public exploit EPSS 14%

    SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend …

  • Unscored —
    CVE-2018-7707 Public exploit

    Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2018-7705 Public exploit

    Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-ma…

  • Unscored —
    CVE-2018-7756 Public exploit EPSS 61%

    RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TC…

  • Unscored —
    CVE-2018-7704 Public exploit

    SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1…

  • Unscored —
    CVE-2018-7706 Public exploit

    Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbi…

  • Unscored —
    CVE-2018-7703 Public exploit

    Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2018-7701 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attacker…

  • Unscored —
    CVE-2018-8045 Public exploit EPSS 28%

    In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vuln…

  • Unscored —
    CVE-2018-8715 Public exploit Scanner template EPSS 23%

    The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function i…

  • Unscored —
    CVE-2018-6328 Public exploit EPSS 64%

    It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, …

  • Unscored —
    CVE-2018-6329 Public exploit EPSS 61%

    It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL …

  • Unscored —
    CVE-2018-0891 Public exploit EPSS 14%

    ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows R…

    Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers
  • Low 3.1
    CVE-2018-0878 Public exploit EPSS 21%

    Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windo…

    Microsoft Windows Remote Assistance Windows
  • Unscored —
    CVE-2018-0935 Public exploit EPSS 56%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2018-0894 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0886 Public exploit EPSS 82%

    The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 …

    Microsoft Windows Windows
  • High 7.5
    CVE-2018-0934 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0897 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0880 Public exploit

    The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

    Microsoft Windows Desktop Bridge Windows
  • Unscored —
    CVE-2018-0877 Public exploit

    The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server…

    Microsoft Windows Desktop Bridge Virtual File System Windows
  • Unscored —
    CVE-2018-0895 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • High 7.5
    CVE-2018-0933 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0901 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0882 Public exploit

    The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

    Microsoft Windows Deskop Bridge Windows
  • Unscored —
    CVE-2018-5782 Public exploit EPSS 19%

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14…

  • Unscored —
    CVE-2018-7474 Public exploit

    An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" o…

  • Medium 6.1
    CVE-2018-1000129 Public exploit Scanner template EPSS 25%

    Cross-site Scripting in Jolokia agent

    An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

    org.jolokia:jolokia-core Maven
  • Unscored —
    CVE-2018-8108 Public exploit

    The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text,…

  • Critical 9.8
    CVE-2018-8097 Public exploit

    Eve allows execution of arbitrary code

    io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

    eve PyPI
  • Unscored —
    CVE-2018-8096 Public exploit EPSS 48%

    Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Nam…