Archive
26 March 2018
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
Unscored —
NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of servic…
-
Unscored —
SQL injection vulnerability in the management interface in ePortal Manager allows remote attackers to execute arbitrary…
-
Unscored —
It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya …
-
Unscored —
Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a…
-
Unscored —
The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, w…
-
Medium 5.1
NetIQ Identity Manager DoS Attack
The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.
-
Medium 5.3
NetIQ Identity Manager SSL Renegotiation
NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.
-
Low 2.3
NetIQ Identity Manager Driver Component Log File Information Leakage
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration.
-
Low 2.3
NetIQ Identity Manager Driver Component Information Leakage
The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.
-
Unscored —
IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote …
-
Unscored —
IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access re…
-
Unscored —
IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveragin…
-
Unscored —
IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edit…
-
Unscored —
IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveragin…
-
Unscored —
The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local use…
-
Unscored —
The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.…
-
Unscored —CVE-2018-7543 Public exploit
Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 fo…
-
Unscored —CVE-2018-1186 Public exploit
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and ver…
-
Unscored —CVE-2018-1203 Public exploit
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0…
-
Unscored —CVE-2018-1204 Public exploit
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, a…
-
Unscored —CVE-2018-1202 Public exploit
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is a…
-
Unscored —CVE-2018-1188 Public exploit
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is a…
-
Unscored —CVE-2018-1187 Public exploit
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-sit…
-
Unscored —
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and ver…
-
Unscored —CVE-2018-1201 Public exploit
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and ver…
-
Unscored —CVE-2018-1213 Public exploit
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, a…
-
Unscored —
The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack o…
-
Unscored —
The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure…
-
Unscored —
Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and …
-
Unscored —
An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_ur…
-
Unscored —
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote a…
-
Unscored —
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or wr…
-
Unscored —
The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of c…
-
Unscored —
In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (Sessio…
-
Unscored —CVE-2018-1312 EPSS 16%
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent rep…
-
Unscored —CVE-2018-1301 EPSS 14%
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound a…
-
Unscored —CVE-2018-1303 EPSS 70%
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out…
-
Unscored —CVE-2018-1302 EPSS 13%
When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have writ…
-
Unscored —CVE-2017-15710 EPSS 18%
In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCha…