Skip to content
OpenAdvisories

Archive

March 2018

Vulnerabilities first published in this month (UTC), newest first.

22 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-7600 Exploited · Ransomware Public exploit EPSS 100%

    Drupal Core Remote Code Execution Vulnerability

    Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

    KEV Nov 3, 2021
  • High 7.5
    CVE-2018-0156 Exploited

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0158 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0154 Exploited

    A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwa…

    iOS
    KEV Mar 3, 2022
  • High 8.0
    CVE-2018-0175 Exploited

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0155 Exploited

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…

    iOS
    KEV Mar 3, 2022
  • Medium 6.3
    CVE-2018-0161 Exploited

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0171 Exploited Public exploit EPSS 99%

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Nov 3, 2021
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0179 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0180 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0159 Exploited

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-0151 Exploited EPSS 14%

    A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • Medium 6.1
    CVE-2018-6882 Exploited · Ransomware EPSS 30%

    Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Su…

    KEV Apr 19, 2022
  • Medium 5.9
    CVE-2017-12319 Exploited

    A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-7445 Exploited Public exploit EPSS 66%

    A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remo…

    KEV Sep 8, 2022
  • Critical 9.8
    CVE-2018-0147 Exploited EPSS 18%

    A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 c…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2018-6530 Exploited · Ransomware EPSS 97%

    OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH…

    KEV Sep 8, 2022
  • Medium 6.6
    CVE-2018-2380 Exploited · Ransomware Public exploit EPSS 29%

    SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information p…

    KEV Nov 3, 2021