CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- microsoft windows, windows 10, windows 8.1 +3 more +5 moreWindows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709,...5.9 Medium
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreThe Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold,...7.8 High
- microsoft windows, windows 10, windows 8.1 +3 more +5 moreThe Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold,...7.1 High
- microsoft windows 7, windows server 2008, microsoft corporation windows gdi +2 moreThe Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1,...4.7 Medium
- microsoft windows 10, windows 8.1, windows server 2012 +3 more +5 moreThe Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,...4.7 Medium
- microsoft windows 10, microsoft corporation windows kernel, microsoft windows server 2016 +2 moreThe Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server,...4.7 Medium
- microsoft windows 10, windows 8.1, windows server 2012 +3 more +5 moreThe Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,...7.0 High
- microsoft windows 10, microsoft corporation windows subsystem for linux, microsoft windows server 2016 +2 moreWindows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows...7.0 High
- microsoft windows 7, windows server 2008, microsoft corporation color management module (icm32.dll) +2 moreThe Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1...5.3 Medium
- samsung mobileOn Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a...8.1 High
- cloudfoundry cf-release, pivotal uaa, uaa bosh +2 morePivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint6.1 Medium
- cisco node-joseCisco node-jose improper validation of JWT signature7.5 High
- cisco webex business suite, webex meetings, webex meetings server +1 more +3 moreA vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files...9.6 Critical
- cisco webex network recording player, webex business suite, webex meetings +1 more +3 moreA Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording...7.8 High
- pivotal software spring data rest, vmware spring boot, pivotal spring data rest and spring boot +2 moreRemote code execution in PATCH requests in Spring Data REST9.8 Critical
- samsung mobileOn Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers...8.4 High
- dell emc vnx1 firmware, emc vnx2 firmware +1 moreIn Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions...6.1 Medium
- k7computing total securityIn K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not...7.1 High
- gnu coreutilsCVE-2017-18018 does not affect BellSoft software4.7 Medium
- arm cortex-a, intel atom c, atom e +207 more +209 moreCVE-2017-5754 does not affect BellSoft software5.6 Medium
- arm cortex-a12 firmware, cortex-a15 firmware, cortex-a17 firmware +306 more +308 moreCVE-2017-5753 does not affect BellSoft software5.6 Medium
- arm cortex-a, canonical ubuntu linux, debian linux +218 more +220 moreImportant: kernel security, bug fix, and enhancement update5.6 Medium
apportUbuntuapport regressionNo score- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/eventlist.php cast parameter.4.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/movieedit.php moviename parameter.4.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.4.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.4.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.4.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has CSRF via admin/movieedit.php.6.8 Medium
- advanced real estate script project real estate scriptOnline Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.4.8 Medium
- codehaus-plexus plexus-utils, debian linux +1 moreOS Command Injection in Plexus-utils9.8 Critical
- primetek primefaces, primefaces application +1 moreInadequate Encryption Strength9.8 Critical
- nylas mail lives project mailNylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to...7.8 High
- plonePlone Open Redirect6.1 Medium
- linux-dash project linux-dashLinux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the...7.8 High
- pocoproject poco, debian linux +1 moreThe ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8...6.5 Medium
- embedthis goaheadEmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI...9.8 Critical
- Show moreLoading…