CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php...7.5 High
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter...6.1 Medium
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php...7.5 High
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter...6.1 Medium
- wpscoop imageinjectThe ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php.8.8 High
- wpscoop imageinjectThe ImageInject plugin 1.15 for WordPress has XSS via the flickr_appid parameter to wp-admin...4.8 Medium
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- malwarebytes** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local...7.8 High
- opencv, debian linux +1 moreReachable Assertion in OpenCV.5.5 Medium
- opencv, debian linux +1 moreOut-of-bounds Write in OpenCV.5.5 Medium
- stalker communigate proThe "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in...5.7 Medium
- newsbee project newsbeeSQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands.9.8 Critical
- cobham sea tel 121 firmwareCobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a...9.8 Critical
- cobham sea tel 121 firmwareCobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive...7.5 High
- cobham sea tel 116 firmwarePersistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite...5.4 Medium
- navercorp whaleThe Installer in Whale allows DLL hijacking.7.8 High
- php, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x...6.1 Medium
- php, canonical ubuntu linux, debian linux +2 moregd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7...5.5 Medium
- hitrontech cve-30360 firmwareHitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers...7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before...5.5 Medium
- irssi, debian linux +1 moreIn Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer...9.8 Critical
- irssi, debian linux +1 moreWhen using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of...7.5 High
- irssi, debian linux +1 moreWhen the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a...9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreWhen using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.7.5 High
- axiosys bento4The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a...7.8 High
- entropymine imageworsenerlibimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the...5.3 Medium
- libming, debian linux +1 moreIn libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative...6.5 Medium
- shaarli project shaarliCross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows...6.1 Medium
- qtpassIt was discovered that QtPass before 1.2.1, when using the built-in password generator, generates...9.8 Critical
- xenIn Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation...6.5 Medium
- emc avamar server, integrated data protection appliance, networker +2 moreAn issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker...8.8 High
- emc avamar server, integrated data protection appliance, networker +2 moreAn issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker...8.8 High
- emc avamar server, integrated data protection appliance, networker +2 moreAn issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker...9.8 Critical
- xplicoXplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell...8.8 High
- trendnet tew-823dru firmwareTRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of...9.8 Critical
- gitlabThe groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to...6.5 Medium
- wp-dbmanager project wp-dbmanagerThe "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for...6.5 Medium
- wp-dbmanager project wp-dbmanager(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager)...7.8 High
- vmware horizon view, workstation, horizon client for windows +2 moreVMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0)...7.1 High
- vmware vrealize operations for horizon (v4h), vrealize operations for published applications (v4pa), vrealize operations for horizon +1 more +3 moreThe VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation...7.8 High
- vmware fusion, workstation +1 moreVMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control...5.5 Medium
- duolingo tinycardsThe DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which...8.1 High
- Show moreLoading…