CVE-2018-7732: An issue was discovered in YxtCMF 3.1.
An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html.
Published Mar 6, 2018 · Updated Sep 16, 2024
CVE archive
March 2018
Browse CVE records published in March 2018, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 1325 matching CVEs · Page 11 of 27.
CVE-2018-7519: In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buff...
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
Published Mar 21, 2018 · Updated Sep 16, 2024
CVE-2018-1000110: An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus...
An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.
Published Mar 13, 2018 · Updated Sep 16, 2024
CVE-2018-1083: Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality.
Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.
Published Mar 28, 2018 · Updated Sep 16, 2024
CVE-2018-6304: Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denia...
Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service
Published Mar 13, 2018 · Updated Sep 16, 2024
CVE-2018-8943: There is a SQL injection in the PHPSHE 1.6 userbank parameter.
There is a SQL injection in the PHPSHE 1.6 userbank parameter.
Published Mar 22, 2018 · Updated Sep 16, 2024
CVE-2018-8875: In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service...
In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x0022209c.
Published Mar 20, 2018 · Updated Sep 16, 2024
CVE-2018-5224: Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows o...
Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan in Bamboo that has a non-linked Mercurial repository, or create a plan in Bamboo either globally or in a project using Bamboo Specs can can execute code of their choice on systems that run a vulnerable version of Bamboo on the Windows operating system. All versions of Bamboo starting with 2.7.0 before 6.3.3 (the fixed version for 6.3.x) and from version 6.4.0 before 6.4.1 (the fixed version for 6.4.x) running on the Windows operating system are affected by this vulnerability.
Published Mar 29, 2018 · Updated Sep 16, 2024
CVE-2018-1321: An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before...
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.
Published Mar 20, 2018 · Updated Sep 16, 2024
CVE-2018-1938: IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensiti...
IBM Cloud Private 3.1.1 could alllow a local user with administrator privileges to intercept highly sensitive unencrypted data. IBM X-Force ID: 153318.
Published Mar 5, 2019 · Updated Sep 16, 2024
CVE-2018-8070: QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.
QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.
Published Mar 12, 2018 · Updated Sep 16, 2024
CVE-2018-12222: Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before version...
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-0896: The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1,...
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, CVE-2018-0901 and CVE-2018-0926.
Published Mar 14, 2018 · Updated Sep 16, 2024
CVE-2018-18816: TIBCO JasperReports Persistent Cross Site Scripting Vulnerability
The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
Published Mar 7, 2019 · Updated Sep 16, 2024
CVE-2018-1141: When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did n...
When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.
Published Mar 20, 2018 · Updated Sep 16, 2024
CVE-2018-12190: Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12....
Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.60 or 4.0.10 may allow a privileged user to potentially enable an escalation of privilege via local access.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-9105: NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability.
NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability. The vulnerability stems from its privileged helper tool's implemented XPC service. This XPC service is responsible for receiving and processing new OpenVPN connection requests from the main application. Unfortunately this XPC service is not protected, which allows arbitrary applications to connect and send it XPC messages. An attacker can send a crafted XPC message to the privileged helper tool requesting it make a new OpenVPN connection. Because he or she controls the contents of the XPC message, the attacker can specify the location of the openvpn executable, which could point to something malicious they control located on disk. Without validation of the openvpn executable, this will give the attacker code execution in the context of the privileged helper tool.
Published Mar 27, 2018 · Updated Sep 16, 2024
CVE-2018-17497: eVisitorPass contains default administrative credentials.
eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
Published Mar 19, 2019 · Updated Sep 16, 2024
CVE-2018-19641: Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5
Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.
Published Mar 27, 2019 · Updated Sep 16, 2024
CVE-2018-12203: Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Cor...
Denial of service vulnerability in Platform Sample/ Silicon Reference firmware for 8th Generation Intel Core Processor, 7th Generation Intel Core Processor may allow privileged user to potentially execute arbitrary code via local access.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-1427: IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment vari...
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072.
Published Mar 22, 2018 · Updated Sep 16, 2024
CVE-2018-0901: The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1,...
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way memory addresses are handled, aka "Windows Kernel Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0811, CVE-2018-0813, CVE-2018-0814, CVE-2018-0894, CVE-2018-0895, CVE-2018-0896, CVE-2018-0897, CVE-2018-0898, CVE-2018-0899, CVE-2018-0900, and CVE-2018-0926.
Published Mar 14, 2018 · Updated Sep 16, 2024
CVE-2018-1823: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150426.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-9120: In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
Published Mar 29, 2018 · Updated Sep 16, 2024
CVE-2018-12223: Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10...
Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to escape from a virtual machine guest-to-host via local access.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-1204: Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, version...
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary code with root privileges.
Published Mar 26, 2018 · Updated Sep 16, 2024
CVE-2018-17488: Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an er...
Lobby Track Desktop could allow a local attacker to gain elevated privileges on the system, caused by an error in the printer dialog. By visiting the kiosk and accessing the print badge screen, an attacker could exploit this vulnerability using the command line to break out of kiosk mode.
Published Mar 19, 2019 · Updated Sep 16, 2024
CVE-2018-5468: Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that co...
Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code
Published Mar 26, 2018 · Updated Sep 16, 2024
CVE-2018-1205: Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service.
Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash.
Published Mar 27, 2018 · Updated Sep 16, 2024
CVE-2018-8942: Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter.
Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter.
Published Mar 22, 2018 · Updated Sep 16, 2024
CVE-2018-0875: .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerabilit...
.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".
Published Mar 14, 2018 · Updated Sep 16, 2024
CVE-2018-1910: IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152734.
Published Mar 14, 2019 · Updated Sep 16, 2024
CVE-2018-8973: OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.p...
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.php?mudi=add request.
Published Mar 24, 2018 · Updated Sep 16, 2024
CVE-2018-8949: An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89.
An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event (without attribute UUIDs but attribute IDs set) could overwrite an existing attribute.
Published Mar 23, 2018 · Updated Sep 16, 2024
CVE-2018-8101: The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denia...
The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer over-read and application crash) via a specific pdf file, as demonstrated by pdftohtml.
Published Mar 14, 2018 · Updated Sep 16, 2024
CVE-2018-1196: Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd...
Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible.
Published Mar 19, 2018 · Updated Sep 16, 2024
CVE-2018-0787: ASP.NET Core 1.0.
ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability".
Published Mar 14, 2018 · Updated Sep 16, 2024
CVE-2018-7652: lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS.
lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS.
Published Mar 4, 2018 · Updated Sep 16, 2024
CVE-2018-20106: SMB printer settings don't escape characters in passwords properly
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.
Published Mar 15, 2019 · Updated Sep 16, 2024
CVE-2018-1000118: Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Pro...
Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2018-1000006, specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.
Published Mar 7, 2018 · Updated Sep 16, 2024
CVE-2018-7716: PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn....
PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the config string from the corresponding XPC message. This string is supposed to point to an internal OpenVPN configuration file. If a new connection has not already been established, an attacker can send the XPC service a malicious XPC message with the config string pointing at an OpenVPN configuration file that he or she controls. In the configuration file, an attacker can specify a dynamic library plugin that should run for every new VPN connection. This plugin will execute code in the context of the root user.
Published Mar 5, 2018 · Updated Sep 16, 2024
CVE-2018-5503: On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specificall...
On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action.
Published Mar 22, 2018 · Updated Sep 16, 2024
CVE-2018-1301: A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an ou...
A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.
Published Mar 26, 2018 · Updated Sep 16, 2024
CVE-2018-1428: IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptog...
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139073.
Published Mar 22, 2018 · Updated Sep 16, 2024
CVE-2018-1875: IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct...
IBM InfoSphere Information Governance Catalog 11.3, 11.5, and 11.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 151639.
Published Mar 5, 2019 · Updated Sep 16, 2024
CVE-2018-1992: The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validatin...
The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.
Published Mar 21, 2019 · Updated Sep 16, 2024
CVE-2018-3561: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux ker...
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in diag_ioctl_lsm_deinit() leads to a Use After Free condition.
Published Mar 16, 2018 · Updated Sep 16, 2024
CVE-2018-7502: Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper vali...
Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges.
Published Mar 23, 2018 · Updated Sep 16, 2024
CVE-2018-5474: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could...
Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.
Published Mar 26, 2018 · Updated Sep 16, 2024
CVE-2018-7528: An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Toplin...
An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.
Published Mar 22, 2018 · Updated Sep 16, 2024