Skip to content
OpenAdvisories

Archive

20 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /20 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2014-1665 Public exploit

    Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary…

  • Medium 4.9
    CVE-2018-1322 Public exploit EPSS 20%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

    An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven
  • High 7.2
    CVE-2018-1321 Public exploit EPSS 18%

    High severity vulnerability that affects org.apache.syncope:syncope-core

    An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, includin…

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven
  • Unscored —
    CVE-2017-17215 Public exploit EPSS 78%

    Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could s…

    Huawei HG532 Network devices
  • Unscored —
    CVE-2017-8176 Public exploit

    Huawei IPTV STB with earlier than IPTV STB V100R003C01LMYTa6SPC001 versions has an authentication bypass vulnerability.…

    Huawei IPTV STB Network devices
  • Unscored —
    CVE-2018-8811 Public exploit

    Cross-site request forgery (CSRF) vulnerability in system/workplace/admin/accounts/user_role.jsp in OpenCMS 10.5.3 allo…

  • Unscored —
    CVE-2018-8815 Public exploit

    Cross-site scripting (XSS) vulnerability in the gallery function in Alkacon OpenCMS 10.5.3 allows remote attackers to i…