Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2018

114 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2018-0159
    62This week

    A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Softwa

    HighCVSS 7.5KEVWeaponizedEPSS 6%

    cisco · iosMar 28, 2018

  • CVE-2018-0161
    56Plan

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst

    MediumCVSS 6.3KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2018-0167
    66This week

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software,

    HighCVSS 8.8KEVWeaponizedEPSS 3%

    cisco · iosMar 28, 2018

  • CVE-2018-0171
    99Now

    A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    cisco · iosMar 28, 2018

  • CVE-2018-0172
    66This week

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic

    HighCVSS 8.6KEVWeaponizedEPSS 7%

    cisco · iosMar 28, 2018

  • CVE-2018-0173
    66This week

    A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Versio

    HighCVSS 8.6KEVWeaponizedEPSS 7%

    cisco · iosMar 28, 2018

  • CVE-2018-0174
    66This week

    A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic

    HighCVSS 8.6KEVWeaponizedEPSS 7%

    cisco · iosMar 28, 2018

  • CVE-2018-0175
    63This week

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IO

    HighCVSS 8.0KEVWeaponizedEPSS 3%

    cisco · iosMar 28, 2018

  • CVE-2018-0179
    60This week

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attack

    MediumCVSS 5.9KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2018-0180
    60This week

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attack

    MediumCVSS 5.9KEVWeaponizedEPSS 4%

    cisco · iosMar 28, 2018

  • CVE-2018-7600
    99Now

    Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because o

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    drupal · drupalMar 29, 2018

  • CVE-2018-7171
    38Monitor

    Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories

    HighCVSS 7.5Proof of conceptEPSS 27%

    lynxtechnology · twonky serverMar 30, 2018

  • CVE-2018-9160
    62This week

    SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.

    CriticalCVSS 9.8WeaponizedEPSS 75%

    sickrage · sickrageMar 31, 2018

  • CVE-2018-9161
    56Plan

    Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account b

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    prismaindustriale · checkweigher prismawebMar 31, 2018