Skip to content
OpenAdvisories

Archive

29 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /29 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2016-0898

    MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were …

  • Unscored —
    CVE-2016-6658

    Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL po…

  • Unscored —
    CVE-2017-16839

    Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.

  • Unscored —
    CVE-2017-16873

    It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5…

  • Unscored —
    CVE-2017-16512

    The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root priv…

  • Unscored —
    CVE-2018-1191

    Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access…

    Cloud Foundry Garden-runC
  • Unscored —
    CVE-2015-4952

    The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers t…

  • Unscored —
    CVE-2015-4953

    IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attack…

  • Unscored —
    CVE-2015-2003

    The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveragi…

  • Unscored —
    CVE-2015-2009

    Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 In…

  • Unscored —
    CVE-2015-2002

    The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a…

  • Unscored —
    CVE-2015-2004

    The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by lever…

  • Unscored —
    CVE-2015-2001

    The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize meth…

  • Unscored —
    CVE-2015-2020

    The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method…

  • Unscored —
    CVE-2015-2000

    The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method …

  • Unscored —
    CVE-2014-6604

    Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress…

  • Unscored —
    CVE-2014-5028

    The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote au…

  • Unscored —
    CVE-2014-5170

    The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveragi…

  • Unscored —
    CVE-2017-5947

    An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can rebo…

  • Unscored —
    CVE-2018-9031

    The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an "if(pwd ==…

  • Unscored —
    CVE-2018-4841

    A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to por…

    Siemens TIM 1531 IRC ICS / OT
  • Unscored —
    CVE-2018-6587

    CA API Developer Portal 3.5 up to and including 3.5 CR6 has a reflected cross-site scripting vulnerability related to t…

    CA Technologies CA API Developer Portal
  • Unscored —
    CVE-2018-6586

    CA API Developer Portal 3.5 up to and including 3.5 CR6 has a stored cross-site scripting vulnerability related to prof…

    CA Technologies CA API Developer Portal
  • Unscored —
    CVE-2018-6588

    CA API Developer Portal 3.5 up to and including 3.5 CR5 has a reflected cross-site scripting vulnerability related to t…

    CA Technologies CA API Developer Portal
  • Unscored —
    CVE-2018-5223

    Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows…

    Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2018-5224

    Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating sys…

    Atlassian Bamboo
  • Critical 9.8
    CVE-2018-7600 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Drupal Core Remote Code Execution Vulnerability

    Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

    drupal/core drupal/drupal drupal7 drupal7 Web / CMS Ubuntu Alpine Packagist
    KEV Nov 3, 2021
  • Unscored —
    CVE-2018-9116

    An XXE vulnerability within WireMock before 2.16.0 allows a remote unauthenticated attacker to access local files and i…

  • Unscored —
    CVE-2018-9117

    WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files bey…

  • Unscored —
    CVE-2018-9123

    In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.

  • Unscored —
    CVE-2018-9122

    In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.

  • Unscored —
    CVE-2018-9120

    In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.

  • Unscored —
    CVE-2018-9121

    In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.