Week 13, 2018
26 March – 1 April 2018
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 100%
- Critical 9.8 EPSS 76%
-
Critical 9.8
CVE-2018-0151 A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca…EPSS 14%
- Critical 9.1 EPSS 2.9%
- Critical 9.1 EPSS 2.9%
- Critical 9.8 EPSS 1.9%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 7.5
CVE-2018-0171 A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reloa…EPSS 99%
-
Unscored
CVE-2017-15715 In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching …EPSS 86%
-
Unscored
CVE-2018-7700 DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in …EPSS 74%
-
Unscored
CVE-2018-1303 A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to b…EPSS 70%
-
Unscored
CVE-2018-9161 Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scri…EPSS 57%
-
Unscored
CVE-2018-8823 modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows …EPSS 50%
-
Unscored
CVE-2018-7658 NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 b…EPSS 39%
-
Unscored
CVE-2018-1189 Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-sit…EPSS 30%
Advisories
- Debian Security (DSA / DLA) 335 critical
- SUSE / openSUSE Security Updates 272 critical
- Ubuntu Security Notices (USN) 9
- CISA ICS & IT advisories 62 critical
- BSI CERT-Bund (WID) 41 critical
- Siemens ProductCERT 1
- Oracle Linux Security Advisories (ELSA) 1
- WID-SEC-2025-1871 Cisco IOS: Mehrere Schwachstellen 34 CVEs
- SUSE-SU-2018:0807-1 Security update for memcached 9 CVEs
- ICSA-18-093-01 ICSA-18-093-01 Siemens Building Technologies Products (Update A) 8 CVEs
- DLA-1336-1 rubygems - security update 4 CVEs
- DLA-1337-1 jruby - security update 4 CVEs
- DLA-1331-1 mercurial - security update 1 CVEs
- SUSE-SU-2018:0844-1 Security update for python-paramiko 1 CVEs
- DSA-4156-1 drupal7 - security update 1 CVEs
- DLA-1325-1 drupal7 - security update 1 CVEs
- ICSA-18-088-02 Siemens TIM 1531 IRC 1 CVEs