CVEs published in January 2018

1,346 vulnerabilities, 169 critical, 4 exploited.

• pulsesecure desktop linux client The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3... CVE-2018-6374 6.5 MediumJanuary 31, 2018
• ccn-lite A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a... CVE-2018-6480 8.8 HighJanuary 31, 2018
• seasofsolutions ip camera firmware An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a... CVE-2018-6479 Public exploit 7.5 HighJanuary 31, 2018
• cisco ios xr A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco... CVE-2018-0136 8.6 HighJanuary 31, 2018
• haystacksoftware arq The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to... CVE-2017-16945 Public exploit 7.8 HighJanuary 31, 2018
• haystacksoftware arq The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary... CVE-2017-16928 Public exploit 7.8 HighJanuary 31, 2018
• asus asuswrt Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4... CVE-2017-15656 8.8 HighJanuary 31, 2018
• asus asuswrt Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0... CVE-2017-15655 9.6 CriticalJanuary 31, 2018
• asus asuswrt Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380... CVE-2017-15654 8.3 HighJanuary 31, 2018
• asus asuswrt Improper administrator IP validation after his login in the HTTPd server in all current versions ... CVE-2017-15653 8.8 HighJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege... CVE-2018-6476 9.8 CriticalJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking,... CVE-2018-6475 7.8 HighJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local... CVE-2018-6474 7.8 HighJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local... CVE-2018-6473 7.8 HighJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local... CVE-2018-6472 7.8 HighJanuary 31, 2018
• superantispyware In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local... CVE-2018-6471 7.8 HighJanuary 31, 2018
• wp-property-hive propertyhive The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes... CVE-2018-6465 6.1 MediumJanuary 31, 2018
• mycolorway simditor Simditor XSS Vulnerability CVE-2018-6464 6.1 MediumJanuary 31, 2018
• tracker-software pdf-xchange viewer, viewer ax sdk +1 more Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to... CVE-2018-6462 7.8 HighJanuary 31, 2018
• 7-zip, 7-zip p7zip, debian linux +2 more Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18... CVE-2018-5996 Fix available 7.8 HighJanuary 31, 2018
• iolo system shield In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an... CVE-2018-5701 Public exploit EPSS 18.5% 9.8 CriticalJanuary 31, 2018
• eventum project eventum htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute... CVE-2014-1632 Public exploit EPSS 10.5% 8.1 HighJanuary 31, 2018
• eventum project eventum Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to ... CVE-2014-1631 Public exploit 7.5 HighJanuary 31, 2018
• anchorfree hotspot shield Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server... CVE-2018-6460 Public exploit EPSS 11.0% 7.5 HighJanuary 31, 2018
• nsclient nsclient\+\+ Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged... CVE-2018-6384 7.8 HighJanuary 31, 2018
• cisecurity cis-cat pro dashboard In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able... CVE-2017-8916 7.8 HighJanuary 31, 2018
• ibm datapower gateways, datapower gateway +1 more IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle... CVE-2017-1773 4.0 MediumJanuary 31, 2018
• hcl software bigfix remote control IBM Remote Control v9 could allow a local user to use the component to replace files to which he... CVE-2017-1233 6.7 MediumJanuary 31, 2018
• atlassian crowd The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd... CVE-2017-16858 6.8 MediumJanuary 31, 2018
• apache tomcat native, debian linux +1 more When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... CVE-2017-15698 Fix available 5.9 MediumJanuary 31, 2018
• opendaylight, opendaylight openflow +1 more OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil... CVE-2017-1000411 7.5 HighJanuary 31, 2018
• linux kernel In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbuslib.c in the Linux kernel... CVE-2018-6412 Fix available 7.5 HighJanuary 31, 2018
• google chrome Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6119 Fix available 6.5 MediumJanuary 31, 2018
• google chrome Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119... CVE-2018-6055 Fix available 8.8 HighJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to... CVE-2018-6054 Fix available 8.8 HighJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a... CVE-2018-6053 Fix available 3.3 LowJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64... CVE-2018-6052 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the... CVE-2018-6051 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6050 Fix available 6.5 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a... CVE-2018-6049 Fix available 6.5 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6048 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6047 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6046 Fix available 6.1 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a... CVE-2018-6045 Fix available 6.5 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119... CVE-2018-6043 Fix available 8.8 HighJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6042 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6041 Fix available 4.3 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6040 Fix available 6.5 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote... CVE-2018-6039 Fix available 6.1 MediumJanuary 31, 2018
• google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker... CVE-2018-6038 Fix available 6.5 MediumJanuary 31, 2018
• Show olderLoading…