Skip to content
OpenAdvisories

Archive

28 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /28 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2017-0936

    Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerabilit…

    Nextcloud Nextcloud Server Web / CMS
  • Unscored —
    CVE-2018-1064

    libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5…

    libvirt libvirt libvirt libvirt Debian Ubuntu
  • Unscored —
    CVE-2018-7498

    In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confi…

    Philips Philips Alice 6 System
  • Unscored —
    CVE-2018-5451

    In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not…

    Philips Philips Alice 6 System
  • Unscored —
    CVE-2017-11509

    An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executin…

    Firebird Foundation Firebird SQL Server firebird3.0 firebird3.0 Debian Ubuntu
  • Unscored —
    CVE-2017-11510

    An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover…

    Wanscam Wanscam HW0021
  • Low 3.9
    CVE-2018-7676

    IDM Information Leakage

    The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.

    NetIQ Identity Manager
  • Low 2.1
    CVE-2018-7674

    IDM URL Redirection attack

    The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.

    NetIQ Identity Manager
  • Critical 9.1
    CVE-2018-9110

    Directory Traversal in Studio 42 elFinder

    Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the …

    studio-42/elfinder Packagist
  • Unscored —
    CVE-2018-1142

    Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a special…

    Tenable Tenable Appliance
  • Unscored —
    CVE-2018-1083

    Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unp…

    zsh zsh zsh zsh Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2018-9109

    elFinder Path Traversal vulnerability

    Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the …

    studio-42/elfinder Packagist
  • Unscored —
    CVE-2018-9107 Public exploit

    CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing ext…

  • High 8.8
    CVE-2018-9108

    QuickAppsCMS Cross-Site Request Forgery (CSRF)

    CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges.

    quickapps/cms Packagist
  • Unscored —
    CVE-2018-9106 Public exploit

    CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extensi…

  • Unscored —
    CVE-2018-8823 Scanner template EPSS 50%

    modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for Pr…