Skip to content
OpenAdvisories

Archive

14 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /14 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

144 results · Feed

  • Unscored —
    CVE-2018-0907

    Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 20…

    Microsoft Microsoft Excel
  • High 7.5
    CVE-2018-0872 EPSS 16%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerab…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0897 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0909

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0880 Public exploit

    The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

    Microsoft Windows Desktop Bridge Windows
  • Unscored —
    CVE-2018-0877 Public exploit

    The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server…

    Microsoft Windows Desktop Bridge Virtual File System Windows
  • High 8.8
    CVE-2018-0787

    ASP.NET Core allow an elevation of privilege

    ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".

    Microsoft ASP.NET Core Microsoft.AspNetCore.Server.Kestrel.Core Microsoft.AspNetCore.HttpOverrides NuGet
  • Unscored —
    CVE-2018-0895 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0923

    Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0911

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Medium 4.3
    CVE-2018-0939

    ChakraCore information disclosure vulnerability

    ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0921

    Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted…

    Microsoft Microsoft SharePoint
  • High 7.5
    CVE-2018-0933 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0808

    ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle…

    Microsoft ASP.NET Core
  • Unscored —
    CVE-2018-0915

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0913

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0901 Public exploit

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0903 EPSS 16%

    Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run all…

    Microsoft Microsoft Access
  • Unscored —
    CVE-2018-0882 Public exploit

    The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

    Microsoft Windows Deskop Bridge Windows
  • High 7.5
    CVE-2018-0925 EPSS 11%

    ChakraCore RCE Vulnerability

    ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0876, CVE-2018-0889, CVE-2018-0893, and CVE-2018-0935.

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2018-0889 EPSS 16%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0904

    The Windows kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 …

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0896

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • High 7.5
    CVE-2018-0931 EPSS 11%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0817

    The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…

    Microsoft Windows Windows
  • Unscored —
    CVE-2018-0811

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0942

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2018-0900

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0881

    The Microsoft Video Control in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Ser…

    Microsoft Windows Windows
  • Unscored —
    CVE-2018-5782 Public exploit EPSS 19%

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14…

  • Unscored —
    CVE-2018-5780

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14…

  • Unscored —
    CVE-2018-5779

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14…

  • Unscored —
    CVE-2018-5781

    A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14…

  • Low 3.5
    CVE-2018-7677

    CSRF in NetIQ Access Manager (NAM) Identity Server component

    A CSRF exposure exists in NetIQ Access Manager (NAM) 4.4 Identity Server component.

    NetIQ NetIQ Access Manager (NAM) Admin Console
  • Low 3.5
    CVE-2018-7678

    XSS vulnerability in NetIQ Access Manager (NAM) Admin Console component

    A cross site scripting vulnerability exist in the Administration Console in NetIQ Access Manager (NAM) 4.3 and 4.4.

    NetIQ NetIQ Access Manager (NAM) Admin Console
  • Unscored —
    CVE-2018-7474 Public exploit

    An issue was discovered in Textpattern CMS 4.6.2 and earlier. It is possible to inject SQL code in the variable "qty" o…

  • High 8.1
    CVE-2018-1000130 Scanner template EPSS 74%

    Injection in Jolokia agent

    A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

    org.jolokia:jolokia-core Maven
  • Unscored —
    CVE-2018-1000131

    Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulne…

  • Medium 6.1
    CVE-2018-1000129 Public exploit Scanner template EPSS 25%

    Cross-site Scripting in Jolokia agent

    An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

    org.jolokia:jolokia-core Maven
  • Critical 9.1
    CVE-2018-1000132

    Mercurial Incorrect Access Control vulnerability

    Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have bee…

    mercurial mercurial mercurial mercurial Debian Ubuntu Alpine PyPI