Skip to content
OpenAdvisories

Archive

March 2018

Vulnerabilities first published in this month (UTC), newest first.

← February 2018 2018 / March April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

1,339 results · Feed

  • Medium 4.3
    CVE-2018-2366

    SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of pa…

    SAP SAP Business Process Automation (BPA) By Redwood
  • Unscored —
    CVE-2018-8711

    A local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordP…

  • Unscored —
    CVE-2018-8712

    An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is …

  • Unscored —
    CVE-2018-8710

    A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for Word…

  • Unscored —
    CVE-2018-1000121

    A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker …

    curl curl curl Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-1000120 EPSS 12%

    curl FTP path confusion leads to NIL byte out of bounds write

    A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

    curl curl curl curl Debian Ubuntu Alpine NuGet
  • Unscored —
    CVE-2018-1000122

    A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an atta…

    curl curl curl Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-7508

    A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may …

  • Unscored —
    CVE-2018-7496

    An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header a…

  • Unscored —
    CVE-2018-7531

    An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated u…

  • Unscored —
    CVE-2018-7533

    An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure defa…

  • Unscored —
    CVE-2018-7500

    A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. P…

  • Unscored —
    CVE-2018-7504

    A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection …

  • Unscored —
    CVE-2018-7529

    A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenti…

  • Unscored —
    CVE-2018-1077

    Spacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially sensitive information fr…

    spacewalk spacewalk
  • Unscored —
    CVE-2018-0927

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve…

    Microsoft Internet Explorer, Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0917

    Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0902

    The Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 Gold, 1511, 1607, 1703, and 1709. Win…

    Microsoft Cryptography Next Generation (CNG) kernel-mode driver (cng.sys)
  • Unscored —
    CVE-2018-0891 Public exploit EPSS 14%

    ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows R…

    Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers
  • Unscored —
    CVE-2018-0876 EPSS 16%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0884

    Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, ver…

    Microsoft Windows Scripting Host Windows
  • Unscored —
    CVE-2018-0814

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0898

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • High 7.5
    CVE-2018-0874 EPSS 16%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerab…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0941 EPSS 12%

    Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an info…

    Microsoft Exchange Server
  • Low 3.1
    CVE-2018-0878 Public exploit EPSS 21%

    Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windo…

    Microsoft Windows Remote Assistance Windows
  • High 7.5
    CVE-2018-0873 EPSS 15%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability"…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0888

    The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…

    Microsoft Hyper-V Network SwitchHyper-V Network Switch Virtualization
  • High 7.5
    CVE-2018-0937 EPSS 15%

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0883 EPSS 15%

    Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 20…

    Microsoft Windows Shell Windows
  • Unscored —
    CVE-2018-0935 Public exploit EPSS 56%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2018-0899

    The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0922 EPSS 18%

    Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Micros…

    Microsoft Microsoft Office
  • Unscored —
    CVE-2018-0929

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2018-0912

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0815

    The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an…

    Microsoft Windows Windows
  • Unscored —
    CVE-2018-0910

    Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0816

    The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…

    Microsoft Windows Windows
  • Unscored —
    CVE-2018-0947

    Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privileg…

    Microsoft Microsoft SharePoint
  • Unscored —
    CVE-2018-0893 EPSS 27%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

    Microsoft Microsoft Edge Browsers