CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- advantech webaccessAn Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3....7.5 High
- advantech webaccessAn Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8...7.5 High
- advantech webaccessA Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3....9.8 Critical
- advantech webaccessA Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has...9.8 Critical
- advantech webaccessA SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not...9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the...8.8 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.6.5 Medium
- k7computing antivirusIn K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of...7.8 High
- k7computing antivirusIn K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of...7.8 High
- radiantcms radiant cmsRadiant CMS vulnerable to Cross-site Scripting5.4 Medium
- fork-cms fork cmsFork CMS XSS Vulnerability5.4 Medium
- intenogroup iopsysInteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS...8.8 High
- add link to facebook project link to facebookThe "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id...5.4 Medium
- simple download monitor project download monitorThe Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka...5.4 Medium
- simple download monitor project download monitorThe Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the...5.4 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error...4.3 Medium
- ibm mq, websphere mq +1 moreIBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it...3.3 Low
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which...8.8 High
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters...3.7 Low
- debian linux, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic...5.9 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic...5.9 Medium
- opentext document sciences xpressionxDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4...7.5 High
- zohocorp desktop centralThe DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build...9.8 Critical
- apache deltaspikeCross-site Scripting in Apache DeltaSpike6.1 Medium
- apache ofbizThe BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed....9.8 Critical
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016...4.2 Medium
- microsoft edge, chakracore +1 moreMicrosoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further...5.3 Medium
- microsoft windows 7, windows 8.1, windows server 2008 +2 more +4 moreThe Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1,...7.0 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016...5.3 Medium
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of...7.5 High
- microsoft edge, internet explorer, chakracore +1 more +3 moreInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...5.3 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016...4.3 Medium
- microsoft edge, internet explorer, chakracore +1 more +3 moreInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...7.5 High
- microsoft edge, chakracore +1 moreMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1,...5.5 Medium
- Show moreLoading…