March 2018
2,306 CVEs published, +71% on February 2018 and +68% on March 2017. CISA added 0 to KEV.
2018 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2018 | January 2018: 1,715 CVEs | February 2018: 1,350 CVEs | March 2018: 2,306 CVEs | April 2018: no snapshot | May 2018: no snapshot | June 2018: 1,804 CVEs | July 2018: 2,225 CVEs | August 2018: 1,057 CVEs | September 2018: 1,209 CVEs | October 2018: 1,483 CVEs | November 2018: no snapshot | December 2018: 1,212 CVEs | 14,3619 of 12 months9/12 |
- Critical
- 19915% of the 1,339 with a CVSS score
- Added to CISA KEV
- 022 of this month's CVEs are in KEV, listed a median 1436 days after publication
- Vendors
- 5131,905 products
- Top weakness
- XSSCWE-79 · 194 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1DebianDebian Linux107151new
- 2GoogleAndroid, Chrome OS7817nonenew
- 3CanonicalUbuntu Linux, Ubuntu, Screen-resolution-extra757nonenew
- 4MicrosoftWindows 10, Windows Server 2016, Windows Server 2008740nonenew
- 5Microsoft CorporationMicrosoft Sharepoint, Windows Kernel, Chakracore, Microsoft Edge740nonenew
- 6HuaweiDP300 Firmware, TE60 Firmware, TE30 Firmware720nonenew
- 7Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux, Rubygems, Linux72111new
- 8IBMRational Doors Next Generation, Rational Collaborative Lifecycle Management, Rational Quality Manager711nonenew
- 9Huawei Technologies Co., Ltd.Dp300; Rp200; Te30; Te40; Te50; TE60, Mate 9 Pro, Dp300; Ips Module; Ngfw Module; Nip6300; Nip6600; Rp200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace Usg6300; Secospace Usg6500; Secospace Usg6600; Te30; Te40; Te50; Te60; Tp3106; Tp3206; Usg9500; Viewpoint 9030670nonenew
- 10Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»6510nonenew
- 11Red HatEnterprise Linux Server, Enterprise Linux Workstation, Enterprise Linux Desktop636nonenew
- 12CiscoIOS XE, Cisco IOS XE, IOS62417new
- 13MavenOrg.jruby:jruby-stdlib, Org.apache.syncope:syncope-core, Org.keycloak:keycloak-core404nonenew
- 14NetiqIdentity Manager, Access Manager, Imanager301nonenew
- 15Dell EmcIsilon Onefs, Scaleio, Rsa Authentication Agent For Web For Iis, Rsa Authentication Agent For Web For Apache Web Server283nonenew
- 16Qualcomm, Inc.Android For Msm, Firefox OS For Msm, Qrd Android, Snapdragon Iot, Snapdragon Mobile, Snapdragon Iot, Snapdragon Mobile, Snapdragon Automobile2811nonenew
- 17LinuxLinux Kernel220nonenew
- 18Windows Optimization Master ProjectWindows Optimization Master210nonenew
- 19LibmingLibming200nonenew
- 20PackagistDrupal/core, Drupal/drupal, Simplesamlphp/saml22071new
- 21Ао «концерн Вниинс»Ос Он «стрелец»194nonenew
- 22ApacheHTTP Server, Syncope, Xerces-c\+\+182nonenew
- 23DellEmc Isilon, Emc Scaleio, Emc Isilon Onefs183nonenew
- 24Apache Software FoundationApache HTTP Server, HTTP Server, Apache Syncope172nonenew
- 25IobitAdvanced Systemcare Ultimate150nonenew
Severity
How this month's CVEs score on CVSS; 967 have no score yet. Severity is not exploitation.
- Critical199
- High551
- Medium555
- Low34
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS194
- CWE-20Improper Input Validation165
- CWE-200Information Exposure95
- CWE-119Memory Buffer Bounds78
- CWE-125Out-of-bounds Read77
- CWE-787Out-of-bounds Write56
- CWE-287Improper Authentication46
- CWE-352CSRF46
- CWE-22Path Traversal42
- CWE-476NULL Pointer Dereference40
- CWE-89SQL Injection28
- CWE-26425
- CWE-78OS Command Injection24
- CWE-416Use After Free22
- CWE-732Incorrect Permissions22
- CWE-798Hard-coded Credentials18
- CWE-190Integer Overflow17
- CWE-362Race Condition17
- CWE-434Unrestricted File Upload17
- CWE-611XXE17
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems39221% of sector-tagged CVEs
- OSS Libraries24313% of sector-tagged CVEs
- Enterprise Software19711% of sector-tagged CVEs
- Mobile Apps1619% of sector-tagged CVEs
- Security Products1498% of sector-tagged CVEs
- Networking Infrastructure1317% of sector-tagged CVEs
- Web & CMS Plugins1247% of sector-tagged CVEs
- ICS / OT / IoT784% of sector-tagged CVEs
- 7 smaller sectors299
- Not yet classified57
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 20Improper Input Validation | 200Information Exposure | 119Memory Buffer Bounds | 125Out-of-bounds Read | 787Out-of-bounds Write | 287Improper Authentication | 352CSRF | 22Path Traversal | 476NULL Pointer Dereference |
|---|---|---|---|---|---|---|---|---|---|---|
| Debian | 6 | 7 | 1 | 10 | 13 | 14 | 2 | 1 | 3 | 14 |
| Microsoft | 13 | 3 | 9 | 2 | 16 | 1 | ||||
| Microsoft Corporation | 13 | 3 | 9 | 2 | 16 | 1 | ||||
| 19 | 12 | 23 | 16 | 4 | 3 | |||||
| Huawei | 13 | 7 | 9 | 10 | 4 | 1 | 3 | |||
| Сообщество Свободного Программного Обеспечения | 2 | 9 | 3 | 10 | 8 | 8 | 2 | 1 | 6 | |
| IBM | 18 | 2 | 20 | 1 | 2 | 3 | ||||
| Huawei Technologies Co., Ltd. | 10 | 7 | 9 | 9 | 4 | 1 | 3 | |||
| Canonical | 2 | 2 | 12 | 12 | 8 | 1 | 10 | |||
| Ооо «русбитех-астра» | 1 | 6 | 3 | 6 | 6 | 6 | 2 | 1 | 8 | |
| Cisco | 9 | 13 | 3 | 4 | 2 | 3 | 3 | |||
| Red Hat | 1 | 6 | 1 | 8 | 5 | 9 | 2 | 6 |
CVEs published in March 2018
37 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2018-0147A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands o...KEV9.8
- CVE-2018-0151A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditio...KEV9.8
- CVE-2018-0171A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in ...KEV9.8
- CVE-2018-6530OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versi...KEV9.8
- CVE-2018-7445A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gai...KEV9.8
- CVE-2018-7600Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or ...KEV9.8
- CVE-2018-0167Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated...KEV8.8
- CVE-2018-0155A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticate...KEV8.6
- CVE-2018-0158A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a rel...KEV8.6
- CVE-2018-0172A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to relo...KEV8.6
- CVE-2018-0173A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated, remo...KEV8.6
- CVE-2018-0174A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to relo...KEV8.6
- CVE-2018-0175Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent at...KEV8.0
- CVE-2018-0154A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of servic...KEV7.5
- CVE-2018-0156A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in ...KEV7.5
- CVE-2018-0159A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau...KEV7.5
- CVE-2018-2380SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" ...KEV6.6
- CVE-2018-0161A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker t...KEV6.3
- CVE-2018-6882Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attacke...KEV6.1
- CVE-2017-12319A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to...KEV5.9
- CVE-2018-0179Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting i...KEV5.9
- CVE-2018-0180Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting i...KEV5.9
- CVE-2018-6228A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm the targ...9.8
- CVE-2018-6229A SQL injection vulnerability in an Trend Micro Email Encryption Gateway 5.5 edit policy script could allow an attacker to execute SQL commands to upload and execute arbitrary code that may harm th...9.8
- CVE-2018-7756RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access...9.8
- CVE-2017-17215Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit coul...8.8
- CVE-2018-9107CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.8.8
- CVE-2018-1218In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow condition when handling certain message...7.5
- CVE-2018-1323The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map did not handle some edge cases correc...7.5
- CVE-2018-7422A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pageb...7.5
- CVE-2018-9016dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.6.1
- CVE-2018-7728An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update() functi...5.5
- CVE-2016-10716The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI.5.4
- CVE-2018-8737Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note (aka custName and custNote) sections of the Customers screen, the ...5.4
- CVE-2018-1283In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using ...5.3
- CVE-2018-7737In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability5.3
- CVE-2018-1186Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Clust...4.8