CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 15:38 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-2884 | TR Truecrypt Truecrypt Project | 3.3 | Mar 19 | The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files… |
| CVE-2018-5552 | DT Dtisqlinstaller Docutracinc | 3.3 | Mar 19 | Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper" |
| CVE-2018-0942 | IE Internet Explorer Microsoft | 2.6 | Mar 14 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… |
| CVE-2018-0919 | OF Office Microsoft | 3.3 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013… |
| CVE-2018-0878 | WI Windows Microsoft | 3.1 | Mar 14 | Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703,… |
| CVE-2017-17282 | DF Dp300 Firmware Huawei | 3.1 | Mar 9 | SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00,… |
| CVE-2016-0275 | FT Financial Transaction Manager Ibm | 3.3 | Mar 9 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for… |
| CVE-2017-17330 | AF Ar3200 Firmware Huawei | 3.3 | Mar 9 | Huawei AR3200 V200R005C32; V200R006C10; V200R006C11; V200R007C00; V200R007C01; V200R007C02; V200R008C00; V200R008C10; V200R008C20; V200R008C30; NGFW Module V500R001C00;… |
| CVE-2017-17329 | V8 Viewpoint 8660 Firmware Huawei | 3.3 | Mar 9 | Huawei ViewPoint 8660 V100R008C03 have a memory leak vulnerability |
| CVE-2017-17325 | HI Hicinema Huawei | 3.7 | Mar 9 | Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability |
| CVE-2017-17321 | EF Ensp Firmware Huawei | 3.3 | Mar 9 | Huawei eNSP software with software of versions earlier than V100R002C00B510 has a buffer overflow vulnerability |
| CVE-2017-17280 | LF Lon-al00b Firmware Huawei | 3.5 | Mar 9 | NFC (Near Field Communication) module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability |
| CVE-2017-17149 | HI Hiwallet Huawei | 3.9 | Mar 9 | Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability |
| CVE-2018-0218 | SA Secure Access Control Server Solution Engine Cisco | 3.3 | Mar 8 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access… |
| CVE-2018-0207 | SA Secure Access Control Server Solution Engine Cisco | 3.3 | Mar 8 | A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access… |
| CVE-2018-5730 | DL Debian Linux Debian | 3.8 | Mar 6 | MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a… |
| CVE-2017-8164 | EF Eva-al10 Firmware Huawei | 3.3 | Mar 5 | Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150;… |
| CVE-2017-17141 | SF S12700 Firmware Huawei | 3.7 | Mar 5 | Huawei S12700 V200R005C00; V200R006C00; V200R007C00; V200R007C01; V200R007C20; V200R008C00; V200R009C00;S1700 V200R006C10; V200R009C00;S2700 V100R006C03; V200R003C00; V200R005C00;… |
| CVE-2017-1654 | GP General Parallel File System Ibm | 3.3 | Mar 2 | IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files |
| CVE-2017-9271 | FE Fedora Fedoraproject | 3.3 | Mar 1 | The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used |
| CVE-2017-15136 | SA Satellite Redhat | 2.7 | Feb 27 | When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the hostname of a previously registered system the previously… |
| CVE-2017-18196 | LE Leptonica Leptonica | 3.3 | Feb 23 | Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass… |
| CVE-2018-1392 | FT Financial Transaction Manager Ibm | 3.1 | Feb 22 | IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specially crafted command that could obtain… |
| CVE-2018-7289 | AA Armadito Antivirus Teclib-edition | 3.3 | Feb 21 | An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2 |
| CVE-2016-0369 | FE Forms Experience Builder Ibm | 2.7 | Feb 21 | XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data |
| CVE-2016-0366 | SP Security Privileged Identity Manager Ibm | 3.7 | Feb 21 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attackers to obtain sensitive information by leveraging weak encryption |
| CVE-2016-0351 | SI Security Identity Manager Virtual Appliance Ibm | 3.7 | Feb 21 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier… |
| CVE-2016-8535 | MO Matrix Operating Environment HP | 3.5 | Feb 15 | A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found |
| CVE-2017-17302 | DF Dp300 Firmware Huawei | 3.3 | Feb 15 | Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10,… |
| CVE-2017-17294 | AF Ar120-s Firmware Huawei | 3.3 | Feb 15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S… |
| CVE-2017-17293 | AF Ar120-s Firmware Huawei | 3.3 | Feb 15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S… |
| CVE-2017-17292 | AF Ar120-s Firmware Huawei | 3.3 | Feb 15 | Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S… |
| CVE-2017-17289 | DF Dp300 Firmware Huawei | 3.3 | Feb 15 | Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60… |
| CVE-2017-15353 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50,… |
| CVE-2017-15352 | O2 Oceanstor 2800 Firmware Huawei | 3.1 | Feb 15 | Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor… |
| CVE-2017-15339 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-15338 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-15337 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-12723 | M4 Medfusion 4000 Wireless Syringe Infusion Pump Smiths-medical | 3.7 | Feb 15 | A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6 |
| CVE-2018-0853 | OF Office Microsoft | 3.3 | Feb 15 | Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability,… |
| CVE-2018-0763 | ED Edge Microsoft | 3.1 | Feb 15 | Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure… |
| CVE-2017-15709 | AC ActiveMQ Apache | 3.7 | Feb 13 | When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text |
| CVE-2018-1000030 | UL Ubuntu Linux Canonical | 3.6 | Feb 8 | Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free |
| CVE-2018-6382 | MA Mantisbt Mantisbt | 3.3 | Jan 30 | MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP address |
| CVE-2017-1000401 | JE Jenkins Jenkins | 2.2 | Jan 26 | The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g |
| CVE-2018-1000003 | RE Recursor Powerdns | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via… |
| CVE-2018-1000002 | KR Knot Resolver Nic | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data… |
| CVE-2018-0109 | WM Webex Meetings Server Cisco | 2.7 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application |
| CVE-2018-0106 | ES Elastic Services Controller Cisco | 3.3 | Jan 18 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted… |
| CVE-2018-2675 | JA Java Advanced Management Console Oracle | 3.7 | Jan 18 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server) |