CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- apache activemqImproper Neutralization of Input During Web Page Generation Apache ActiveMQ6.1 Medium
linux-lts-xenialUbuntulinux-lts-xenial regressionNo scorelinuxUbuntulinux regressionNo score- apache sling xss protection api, sling xss protection api compat, apache software foundation sling +2 moreCross-site Scripting in Apache Sling XSS Protection API6.1 Medium
- discuz discuzxDiscuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as...5.4 Medium
- redmine, debian linux +1 moreRedmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and ...8.8 High
- apache geodeApache Geode OQL bind parameter vulnerability5.3 Medium
- apache geodeApache Geode OQL method invocation vulnerability7.5 High
- apache geodeApache Geode gfsh authorization vulnerability7.1 High
- flatcore flatcore-cmsflatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of ...6.1 Medium
- broadcom advanced secure gateway, symantec corporation asg, proxysg +1 more +3 moreThe Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to...6.1 Medium
- broadcom symantec proxysg, symantec corporation proxysg +1 moreThe Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console...6.1 Medium
- microsoft office 2016 for mac, office +1 moreMicrosoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to...6.5 Medium
- microsoft chakracoreChakraCore RCE Vulnerability7.5 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...7.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, microsoft corporation equation editor, microsoft office compatibility pack +1 more +3 moreEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and...7.8 High
- microsoft office, microsoft corporation equation editor, microsoft office compatibility pack +1 more +3 moreEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and...8.8 High
- microsoft access, sharepoint enterprise server +1 moreMicrosoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint...6.1 Medium
- microsoft office, microsoft corporation equation editor, microsoft office compatibility pack +1 more +3 moreEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and...8.8 High
- microsoft office, word, office compatibility pack +6 more +8 moreMicrosoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code...7.8 High
- microsoft excel, office, excel viewer +1 more +3 moreMicrosoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and...8.8 High
- microsoft office, word +1 moreMicrosoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code...8.8 High
- microsoft word, office, office compatibility pack +2 moreMicrosoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and...8.8 High
- microsoft corporation outlook, microsoft office, office compatibility pack +1 more +3 moreMicrosoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code...7.8 High
- microsoft word, office, office online server +1 more +3 moreMicrosoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to...8.8 High
- microsoft outlook, office +1 moreMicrosoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook...7.8 High
- microsoft sharepoint, sharepoint foundation, sharepoint enterprise server +2 moreMicrosoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint...8.8 High
- microsoft sharepoint server, sharepoint enterprise server +1 moreMicrosoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint...8.8 High
- microsoft .net core, .net framework, powershell core +1 more +3 moreImproper Certificate Validation in Microsoft .NET Framework components7.5 High
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP...6.5 Medium
- microsoft asp.net coreASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET...8.8 High
- microsoft .net core, .net framework, powershell core +1 more +3 moreDenial of service vulnerability exists when .NET and .NET Core improperly process XML documents7.5 High
- patsatech sagepay server gateway for woocommerceThe "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the...6.1 Medium
- sulu sulu-standardSulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within...5.4 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This...7.5 High
- intel corporation driver and support assistant, intel driver \& support assistant +1 moreSEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker...6.0 Medium
- gm shanghai onstarAn Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and...7.5 High
- rockwellautomation 1766-l32awa firmware, 1766-l32awaa firmware, 1766-l32bwa firmware +3 more +5 moreA Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400...10.0 Critical
- freedesktop xdg-user-dirs, redhat enterprise linux, red hat, inc. rhel shipped xdg-user-dirs and gnome-session +2 moreIt was found that system umask policy is not being honored when creating XDG user directories,...7.8 High
- gm shanghai onstarA Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS...5.9 Medium
- gm shanghai onstarAn Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS)...8.8 High
- finecms project finecmsrui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.6.1 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse...7.5 High
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote...9.8 Critical
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to conduct...6.1 Medium
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity...8.1 High
- Show moreLoading…