Skip to content
OpenAdvisories

Archive

18 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /18 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2018-8765

    In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD…

  • Unscored —
    CVE-2018-8756

    Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary co…

  • Unscored —
    CVE-2018-8770 Public exploit Scanner template EPSS 59%

    Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.php, controllers/getConfigTest.php, contr…

  • Unscored —
    CVE-2018-8766

    joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, …

  • Unscored —
    CVE-2018-8769

    elfutils 0.170 has a buffer over-read in the ebl_dynamic_tag_name function of libebl/ebldynamictagname.c because SYMTAB…

  • High 7.8
    CVE-2018-8768

    Jupyter Notebook file bypasses sanitization, executes JavaScript

    In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

    notebook jupyter-notebook ipython ipython Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-8767

    joyplus-cms 1.6.0 has XSS in manager/admin_ajax.php?action=save&tab={pre}vod_type via the t_name parameter.

  • Unscored —
    CVE-2018-8754

    The libevt_record_values_read_event() function in libevt_record_values.c in libevt before 2018-03-17 does not properly …

    libevt libevt Debian Ubuntu
  • Critical 9.8
    CVE-2017-18239

    Exposure of Sensitive information in authentikat-jwt

    A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token t…

    com.jason-goodwin:authentikat-jwt_2.12 Maven