CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute...7.8 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that...5.4 Medium
- matrixsslMatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate...5.9 Medium
- barcodewiz barcode activex controlMultiple buffer overflows in BarCodeWiz BarCode before 6.7 ActiveX control (BarcodeWiz.DLL) allow...8.8 High
- phpsugar php melodyPHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with...9.8 Critical
- google chrome, qt, opensuse leap +2 moreThe Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt...8.8 High
- ffmpegInteger underflow in the mov_read_default function in libavformat/mov.c in FFmpeg before 2.4.6...5.5 Medium
- sap netweaver, business application software integrated solution +1 moreSAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7...8.8 High
- sap hanaA remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP...5.3 Medium
- sap solution managerIn SAP Solution Manager 7.20, the role SAP_BPO_CONFIG gives the Business Process Operations (BPO)...8.8 High
- sap kernel, sap se startup service +1 moreSAP Startup Service, SAP KERNEL 7.45, 7.49, and 7.52, is missing an authentication check for...7.5 High
- wpshopmart tabs responsiveThe tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin...5.4 Medium
- tonjoostudio easy custom auto excerptThe Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options...5.4 Medium
- media from ftp project from ftpIn the "Media from FTP" plugin before 9.85 for WordPress, Directory Traversal exists via the...6.5 Medium
- podofo project podofoIn PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject:...5.5 Medium
- podofo project podofoPoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write...7.8 High
- innotube itguard managercgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute...9.8 Critical
gdk-pixbufDebiangdk-pixbuf - regression updateNo score- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...4.7 Medium
- qemuVNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to...7.5 High
- stackideas easydiscussThe StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.5.4 Medium
- magentoMagento Cross-Site Request Forgery (CSRF)6.5 Medium
- apache sling jcr contentloader, apache software foundation sling +1 moreApache Sling JCR ContentLoader XmlReader Arbitrary File Load7.5 High
- gespageMultiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote...6.1 Medium
- gespageMultiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute...9.8 Critical
- progress sitefinitySitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass...9.8 Critical
- teamspeak teamspeak3Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause...6.5 Medium
- teamspeak teamspeak3TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of...6.5 Medium
- clipboard project clipboardclipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a...5.5 Medium
- huawei s2300 firmware, s2700 firmware, s3300 firmware +9 more +11 moreMultiple Huawei Campus switches allow remote attackers to enumerate usernames via vectors...5.9 Medium
- freenasFreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root...9.8 Critical
- microsemi s350i firmwareSQL injection vulnerability in the checkPassword function in Symmetricom s350i 2.70.15 allows...9.8 Critical
- microsemi s350i firmwareCross-site scripting (XSS) vulnerability in Symmetricom s350i 2.70.15 allows remote attackers to...6.1 Medium
- ajax upload for gravity forms project upload for gravity formsUnrestricted file upload vulnerability in the Gravity Upload Ajax plugin 1.1 and earlier for...9.8 Critical
- ldaptive, ldaptive vt-ldap +1 moreImproper Certificate Validation in vt-ldap5.9 Medium
- arubanetworks clearpassAruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0...7.1 High
- redhat openshift(1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package...7.8 High
- photos in wifi project in wifiThe Photos in Wifi application 1.0.1 for iOS has directory traversal via the ext parameter to...7.5 High
- kentico xperience** DISPUTED ** Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName,...7.8 High
- sonicwall sonicosSonicWall SonicOS on Network Security Appliance (NSA) 2017 Q4 devices has XSS via the CFS Custom...5.4 Medium
- sonicwall sonicosSonicWall SonicOS on Network Security Appliance (NSA) 2016 Q4 devices has XSS via the Configure...5.4 Medium
- discuz discuzxDiscuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion...8.8 High
- pg oral-b appIn the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralbapp) application 5.0.0 for Android,...7.5 High
- podofo project podofoIn PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection...5.5 Medium
- podofo project podofoIn PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream...5.5 Medium
- libming, debian linux +1 moreIn libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the...6.5 Medium
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter...6.1 Medium
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter...6.1 Medium
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php...7.5 High
- gd rating system project rating systemThe GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php...7.5 High
- Show moreLoading…