Skip to content
OpenAdvisories

Archive

23 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /23 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2018-1000139

    I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.ph…

  • Unscored —
    CVE-2018-1000137

    I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can r…

  • Unscored —
    CVE-2018-1000138

    I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php th…

  • Unscored —
    CVE-2018-1000141

    I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can …

  • Unscored —
    CVE-2018-8960

    The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, l…

    imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-8964

    In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage thi…

    ming Ubuntu
  • Unscored —
    CVE-2018-8961

    In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote attackers could leverage …

    ming Ubuntu
  • Unscored —
    CVE-2018-8957

    CoverCMS v1.1.6 has XSS via the fourth input box to index.php, related to admina/mconfigs.inc.php.

  • Unscored —
    CVE-2018-8963

    In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote attackers could leverag…

    ming Ubuntu
  • Unscored —
    CVE-2018-8962

    In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attack…

    ming Ubuntu
  • High 8.1
    CVE-2018-1000136

    Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration

    Electron version 1.7 up to 1.7.12; 1.8 up to 1.8.3 and 2.0.0 up to 2.0.0-beta.3 contains an improper handling of values vulnerability in Webviews that can result in remote code execution. This attack appear to be exploitable via an app which allows execution …

    electron npm
  • Medium 5.4
    CVE-2018-1429

    IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users …

    IBM MQ Appliance
  • Unscored —
    CVE-2017-18247

    The av_audio_fifo_size function in libavutil/audio_fifo.c in Libav 12.2 allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2017-18246

    The pcm_encode_frame function in libavcodec/pcm.c in Libav 12.2 allows remote attackers to cause a denial of service (h…

    libav Ubuntu
  • Unscored —
    CVE-2017-18245

    The mpc8_probe function in libavformat/mpc8.c in Libav 12.2 allows remote attackers to cause a denial of service (heap-…

    libav Ubuntu
  • Medium 5.4
    CVE-2017-1762

    IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting…

    IBM Rational Collaborative Lifecycle Management
  • Medium 5.4
    CVE-2017-1629

    IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting…

    IBM Rational Collaborative Lifecycle Management
  • Medium 4.3
    CVE-2017-1602

    IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access se…

    IBM Rational Collaborative Lifecycle Management
  • Medium 5.4
    CVE-2017-1655

    IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting…

    IBM Rational Collaborative Lifecycle Management
  • Medium 4.3
    CVE-2017-1524

    IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to …

    IBM Rational Collaborative Lifecycle Management
  • Unscored —
    CVE-2018-7502

    Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of us…

    ICS-CERT Beckhoff TwinCAT PLC products
  • Unscored —
    CVE-2018-8948

    In MISP before 2.4.89, app/View/Events/resolved_attributes.ctp has multiple XSS issues via a malicious MISP module.

  • Unscored —
    CVE-2018-8949

    An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potent…

  • Unscored —
    CVE-2017-15326

    DBS3900 TDD LTE V100R003C00, V100R004C10 have a weak encryption algorithm security vulnerability. DBS3900 TDD LTE suppo…

    Huawei DBS3900 TDD LTE Network devices
  • Unscored —
    CVE-2017-15325

    The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than P…

    Huawei Prague Network devices
  • Unscored —
    CVE-2017-17736 Public exploit Scanner template EPSS 68%

    Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visi…

  • Unscored —
    CVE-2018-1207 Public exploit Scanner template EPSS 90%

    Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execut…

  • Unscored —
    CVE-2018-1211

    Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI pa…

    DELL EMC iDRAC7/iDRAC8
  • Unscored —
    CVE-2018-1000140 Public exploit

    rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificate…

    librelp librelp Debian Ubuntu