Archive
14 March 2018
Vulnerabilities first published on this day (UTC), newest first.
144 results · Feed
-
Unscored —
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
-
Unscored —
Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information th…
-
Unscored —CVE-2018-8108 Public exploit
The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text,…
-
Critical 9.8CVE-2018-8097 Public exploit
Eve allows execution of arbitrary code
io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.
-
Unscored —
The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-ba…
-
Unscored —
The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buf…
-
Unscored —
The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (hea…
-
Unscored —
The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-bas…
-
Unscored —
The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service…
-
Unscored —
The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service…
-
Unscored —
The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf 4.00 allows attackers to launch denial of service …
-
Unscored —
The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buf…
-
Unscored —
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function Re…
-
Unscored —
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function Re…
-
Unscored —
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIF…
-
High 7.4
IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, 9.1, 9.2, 9.3, and 9.4) contains directories with i…
-
Medium 6.1
IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable …
-
High 7.8
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to mu…
-
Medium 5.4
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
High 7.8
IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a m…
-
Unscored —
Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before …
-
Unscored —
Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass (with the attacker obtaining admin access) via '"Nam…
-
Unscored —
Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.2…
-
Medium 4.3
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information c…