Skip to content
OpenAdvisories

Archive

March 2018

Vulnerabilities first published in this month (UTC), newest first.

1,339 results · Feed

  • Unscored —

    A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access …

    iOS
  • High 8.0
    CVE-2018-0175 Exploited

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running …

    iOS
  • Unscored —

    Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

    iOS
  • Unscored —

    Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gai…

    iOS
  • High 8.6
    CVE-2018-0172 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access …

    iOS
  • High 8.6
    CVE-2018-0155 Exploited

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Sw…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gai…

    iOS
  • Medium 6.3
    CVE-2018-0161 Exploited

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote …

    iOS
  • High 7.5
    CVE-2018-0171 Exploited Public exploit Scanner template EPSS 99%

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

    iOS
    KEV Nov 3, 2021
  • Unscored —

    Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

    iOS
  • Unscored —

    A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenti…

    iOS
  • High 8.6
    CVE-2018-0174 Exploited

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

    iOS
  • Unscored —

    A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthe…

    iOS
  • Unscored —

    Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

    iOS
  • Unscored —

    A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, rem…

    iOS
  • Unscored —

    Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

    iOS
  • Unscored —

    A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API autho…

    iOS
  • Unscored —

    Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

    iOS
  • Medium 6.8
    CVE-2018-0179 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • Medium 6.8
    CVE-2018-0180 Exploited

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-0159 Exploited

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2018-0151 Exploited EPSS 14%

    A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…

    iOS
    KEV Mar 3, 2022
  • High 8.6
    CVE-2018-0173 Exploited

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote …

    iOS
  • Unscored —

    A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remo…

    iOS
  • High 8.8
    CVE-2018-0167 Exploited

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, C…

    iOS
    KEV Mar 3, 2022
  • Unscored —

    In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client inform…

  • Unscored —

    screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allow…

  • Unscored —
    CVE-2018-8820 Public exploit

    An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" paramete…

  • Unscored —

    Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerabilit…

  • Unscored —

    libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5…

  • Unscored —

    In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confi…

  • Unscored —

    In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not…

  • Unscored —

    An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executin…

  • Unscored —

    An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover…

  • Low 3.9

    IDM Information Leakage

    The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.