Archive
March 2018
Vulnerabilities first published in this month (UTC), newest first.
1,339 results · Feed
-
Unscored —
Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulne…
-
Unscored —
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation…
-
Unscored —
Huawei iBMC V200R002C10; V200R002C20; V200R002C30 have an improper authorization vulnerability. The software incorrectl…
-
Unscored —
Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability.…
-
Unscored —
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00;…
-
Unscored —
SFTP module in Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C0…
-
Unscored —
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation…
-
Unscored —
Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C…
-
Unscored —
SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; T…
-
Unscored —
The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.3…
-
Unscored —
Huawei DP300 V500R002C00 have an integer overflow vulnerability due to the lack of validation. An authenticated local a…
-
Unscored —
NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulner…
-
Unscored —
Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00…
-
Unscored —
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation…
-
Unscored —
The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbi…
-
Unscored —
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary co…
-
Unscored —
Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to i…
-
Unscored —
Untrusted search path vulnerability in WinShot 1.53a and earlier (Installer) allows an attacker to gain privileges via …
-
Unscored —
Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.
-
Unscored —
Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified …
-
Unscored —
Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to i…
-
Unscored —
Untrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to gain privileges via a …
-
Unscored —
Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unsp…
-
Unscored —
Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via …
-
Unscored —
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, wit…
-
Unscored —
Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter.
-
Unscored —
Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password v…
-
Unscored —
Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspeci…
-
Unscored —
Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via uns…
-
Unscored —
Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through…
-
Unscored —
Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter (aka …
-
Unscored —
zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd() function. A local atta…
-
Unscored —
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not…
-
Unscored —
Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes …
-
Unscored —
Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An…
-
Medium 5.3
Django denial-of-service possibility in urlize and urlizetrunc template filters
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (…
-
Unscored —
A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The p…
-
Unscored —
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attack…
-
Unscored —CVE-2018-7183 EPSS 10%
Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute ar…
-
Unscored —
A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions.…