Skip to content
OpenAdvisories

Archive

31 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /31 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2018-8893

    Z-BlogPHP 1.5.1 Zero has CSRF in plugin_edit.php, resulting in the ability to execute arbitrary PHP code.

  • Unscored —
    CVE-2018-8908 Public exploit

    An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from C…

  • Unscored —
    CVE-2018-9161 Scanner template EPSS 57%

    Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for th…

  • Unscored —
    CVE-2018-9162

    Contec Smart Home 4.15 devices do not require authentication for new_user.php, edit_user.php, delete_user.php, and user…

  • Unscored —
    CVE-2015-9259

    In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files,…

    notary Debian
  • High 7.5
    CVE-2015-9258

    Docker Notary Signature Algorithm Not Matched to Key vulnerability

    In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature algorithm, they might (for example) be able to forge a signature by forcing a misin…

    notary github.com/docker/notary Debian Go
  • Medium 5.3
    CVE-2018-9159 Public exploit

    Moderate severity vulnerability that affects com.sparkjava:spark-core

    In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.

    com.sparkjava:spark-core Maven
  • Critical 9.8
    CVE-2018-9160 Public exploit EPSS 76%

    SiCKRAGE Discloses Plaintext Credentials

    SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.

    sickrage PyPI
  • Unscored —
    CVE-2017-18255

    The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local use…

    linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu