Skip to content
OpenAdvisories

Archive

March 2018

Vulnerabilities first published in this month (UTC), newest first.

← February 2018 2018 / March April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

133 results · Clear filters · Feed

  • Unscored —
    CVE-2018-7182 Public exploit EPSS 29%

    The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out…

    ntp ntpsec Debian Ubuntu
  • Unscored —
    CVE-2017-17428 Public exploit EPSS 15%

    Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ci…

  • Unscored —
    CVE-2018-0491 Public exploit EPSS 15%

    A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of s…

    tor tor tor Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-1000115 Public exploit EPSS 88%

    Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…

    memcached memcached memcached Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-7665 Public exploit EPSS 16%

    An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name paramete…

  • Unscored —
    CVE-2018-7653 Public exploit Scanner template

    In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.

  • Unscored —
    CVE-2018-7449 Public exploit

    SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service (daemon crash) via an i…

  • Unscored —
    CVE-2018-7583 Public exploit EPSS 38%

    Proxy.exe in DualDesk 20 allows Remote Denial Of Service (daemon crash) via a long string to TCP port 5500.

  • Unscored —
    CVE-2018-1058 Public exploit EPSS 13%

    A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wi…

    The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine
  • High 7.3
    CVE-2017-14798 Public exploit

    local privilege escalation in SUSE postgresql init script

    A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.

    SUSE postgresql-init
  • Unscored —
    CVE-2018-7584 Public exploit EPSS 87%

    In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffe…

    php5 php7.0 php7.2 php7 Ubuntu Alpine
  • Unscored —
    CVE-2018-7573 Public exploit EPSS 69%

    An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with …

  • Medium 6.6
    CVE-2018-2380 Exploited · Ransomware Public exploit EPSS 29%

    SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information p…

    SAP SAP CRM
    KEV Nov 3, 2021