Skip to content
OpenAdvisories

Archive

19 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /19 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Critical 9.8
    CVE-2018-7445 Exploited Public exploit EPSS 66%

    A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remo…

    KEV Sep 8, 2022
  • Unscored —
    CVE-2018-7262

    In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't ha…

  • Medium 6.1
    CVE-2018-5233 Scanner template

    Grav CMS Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

    getgrav/grav Packagist
  • Unscored —
    CVE-2014-4024

    SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 be…

  • Unscored —
    CVE-2014-2884

    The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrict…

  • Unscored —
    CVE-2014-2297

    Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for Wo…

  • Unscored —
    CVE-2014-2675

    Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress al…

  • Unscored —
    CVE-2014-2652

    SQL injection vulnerability in OpenScape Deployment Service (DLS) before 6.x and 7.x before R1.11.3 allows remote attac…

  • Unscored —
    CVE-2014-2550

    Cross-site request forgery (CSRF) vulnerability in the Disable Comments plugin before 1.0.4 for WordPress allows remote…

  • Unscored —
    CVE-2014-2674 Public exploit EPSS 15%

    Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attacke…

  • Unscored —
    CVE-2014-2885

    Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involvin…

  • Unscored —
    CVE-2014-2274

    Cross-site request forgery (CSRF) vulnerability in the Subscribe To Comments Reloaded plugin before 140219 for WordPres…

  • Unscored —
    CVE-2014-5450

    Zarafa Collaboration Platform 4.1 uses world-readable permissions for /etc/zarafa/license, which allows local users to …

  • Unscored —
    CVE-2014-5443

    Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vecto…

  • Unscored —
    CVE-2018-8732 Public exploit

    Cross-site scripting (XSS) vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2018-1197

    In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are …

    DELL EMC Windows Stemcells Windows
  • Unscored —
    CVE-2018-1195

    In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 2…

    DELL EMC Cloud Controller
  • Unscored —
    CVE-2018-1221

    In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requ…

    DELL EMC The Cloud Foundry Gorouter
  • Unscored —
    CVE-2018-1218 Public exploit EPSS 16%

    In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the …

    DELL EMC Dell EMC NetWorker
  • Unscored —
    CVE-2018-1171

    This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-…

    Joyent Joyent SmartOS
  • Medium 5.9
    CVE-2018-1196

    Moderate severity vulnerability that affects org.springframework.boot:spring-boot

    Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which a…

    DELL EMC Spring Boot org.springframework.boot:spring-boot Maven
  • Low 2.9
    CVE-2018-5552

    DocuTrac DTISQLInstaller.exe Hard-Coded Salt

    Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".

    DocuTrac DTISQLInstaller.exe
  • Critical 9.0
    CVE-2018-5551

    DocuTrac DTISQLInstaller.exe Hard-Coded Credentials

    Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa.

    DocuTrac DTISQLInstaller.exe
  • Unscored —
    CVE-2018-7422 Public exploit Scanner template EPSS 62%

    A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to r…

  • Unscored —
    CVE-2018-6843

    Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface.

  • Unscored —
    CVE-2018-6842

    Kentico 10 before 10.0.50 and 11 before 11.0.3 has XSS in which a crafted URL results in improper construction of a sys…

  • Unscored —
    CVE-2018-8761

    protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a lo…

  • Unscored —
    CVE-2015-5350

    In Garden versions 0.22.0-0.329.0, a vulnerability has been discovered in the garden-linux nstar executable that allows…

    DELL EMC Garden Nstar
  • Unscored —
    CVE-2014-3626

    The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other compone…

    DELL EMC Grails by Pivotal
  • Unscored —
    CVE-2017-18240

    The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account,…