Archive
March 2018
Vulnerabilities first published in this month (UTC), newest first.
22 results · Clear filters · Feed
-
Critical 9.8
Drupal Core Remote Code Execution Vulnerability
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
KEV Nov 3, 2021 -
High 7.5CVE-2018-0156 Exploited
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…
KEV Mar 3, 2022 -
High 8.6CVE-2018-0158 Exploited
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…
KEV Mar 3, 2022 -
High 7.5CVE-2018-0154 Exploited
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwa…
KEV Mar 3, 2022 -
High 8.0CVE-2018-0175 Exploited
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…
KEV Mar 3, 2022 -
High 8.6CVE-2018-0172 Exploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…
KEV Mar 3, 2022 -
High 8.6CVE-2018-0155 Exploited
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…
KEV Mar 3, 2022 -
Medium 6.3CVE-2018-0161 Exploited
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…
KEV Mar 3, 2022 -
High 7.5
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…
KEV Nov 3, 2021 -
High 8.6CVE-2018-0174 Exploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…
KEV Mar 3, 2022 -
Medium 6.8CVE-2018-0179 Exploited
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…
KEV Mar 3, 2022 -
Medium 6.8CVE-2018-0180 Exploited
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…
KEV Mar 3, 2022 -
High 7.5CVE-2018-0159 Exploited
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…
KEV Mar 3, 2022 -
Critical 9.8
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…
KEV Mar 3, 2022 -
High 8.6CVE-2018-0173 Exploited
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…
KEV Mar 3, 2022 -
High 8.8CVE-2018-0167 Exploited
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…
KEV Mar 3, 2022 -
Medium 6.1
Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Su…
KEV Apr 19, 2022 -
Medium 5.9CVE-2017-12319 Exploited
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE S…
KEV Mar 3, 2022 -
Critical 9.8
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remo…
KEV Sep 8, 2022 -
Critical 9.8
A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 c…
KEV Mar 25, 2022 -
Critical 9.8
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH…
KEV Sep 8, 2022 -
Medium 6.6
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information p…
KEV Nov 3, 2021