Archive

25 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /25 April 2018 →

All Critical High Medium Low Exploited only Public exploit

35 results · Feed

Unscored —

CVE-2018-9018

In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers coul…

graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine

Mar 25, 2018
Unscored —

CVE-2018-8817 Public exploit

Wampserver before 3.1.3 has CSRF in add_vhost.php.

Mar 25, 2018
Unscored —

CVE-2018-8979 Public exploit

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the cr…

Mar 25, 2018
Unscored —

CVE-2018-8978

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.

Mar 25, 2018
Unscored —

CVE-2018-9017

dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.

Mar 25, 2018
Unscored —

CVE-2018-9015

dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search bo…

Mar 25, 2018
Unscored —

CVE-2018-9010 Public exploit

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via …

Mar 25, 2018
Unscored —

CVE-2018-9016

dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.

Mar 25, 2018
Unscored —

CVE-2018-9014

dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.

Mar 25, 2018
Unscored —

CVE-2018-7719 Public exploit Scanner template EPSS 47%

Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.

Mar 25, 2018
High 7.5

CVE-2018-8947 Public exploit EPSS 11%

Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.

rap2hpoutre/laravel-log-viewer Packagist

Mar 25, 2018
Unscored —

CVE-2018-8997

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8991

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8990

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8994

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8975

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a deni…

Mar 25, 2018
Unscored —

CVE-2018-8999

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial …

Mar 25, 2018
Unscored —

CVE-2018-8995

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8977

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a deni…

Mar 25, 2018
Unscored —

CVE-2018-8993

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8989

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8998

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of se…

Mar 25, 2018
Unscored —

CVE-2018-8992

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8988

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-8996

In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…

Mar 25, 2018
Unscored —

CVE-2018-9009

In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.

ming Ubuntu

Mar 25, 2018
Unscored —

CVE-2018-9004

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of se…

Mar 25, 2018
Unscored —

CVE-2018-9000

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of se…

Mar 25, 2018
Unscored —

CVE-2018-9003

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of se…

Mar 25, 2018
Unscored —

CVE-2018-9007

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of se…

Mar 25, 2018
Unscored —

CVE-2018-9001

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial …

Mar 25, 2018
Unscored —

CVE-2018-9002

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial …

Mar 25, 2018
Unscored —

CVE-2018-9005

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial …

Mar 25, 2018
Unscored —

CVE-2018-9006

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial …

Mar 25, 2018
Unscored —

CVE-2018-8976

In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringForm…

exiv2 Debian

Mar 25, 2018