CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...8.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- novosoft handy passwordA buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- red hat jboss enterprise application platform, red hat, inc. hat jboss enterprise application platform, redhat enterprise linux +2 moreIt was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
drupal/node_view_permissionsPackagistThe Node view permissions module enables the "View own content" and "View any content" permissions for each content type on the permissions page. This module has a vulnerability that allows users with…No score- lenovo enterprise network operating system, lenovo group ltd. enterprise network operating system affecting lenovo and ibm rackswitch and bladecenter products +1 moreIn Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter...7.0 High
- avantfaxAvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a...6.1 Medium
- officetrackerOffice Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.6.1 Medium
- paloaltonetworks pan-osPalo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL...5.9 Medium
- yawcamDirectory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to...7.5 High
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +5 more +7 morejackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass9.8 Critical
- paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in the Captive Portal function in Palo Alto Networks PAN...6.1 Medium
- paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before...6.1 Medium
- flexense diskbossIn Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service...7.5 High
- flexense syncbreezeIn Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of...7.5 High
- flexense disk pulseIn Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service...7.5 High
- flexense vx searchIn Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service...7.5 High
- brbackup project brbackupbrbackup exposes database password to unauthorized users7.8 High
- ciborg project ciborgCiborg gem for Ruby allows local users to write files and gain privileges via Symlink5.5 Medium
- lynx project lynxlynx doesn't properly sanitize user input and exposes database password to unauthorized users7.8 High
- kcapifony project kcapifonyKcapifony gem for Ruby places database user passwords on the command line7.8 High
- lawn-login project lawn-loginlawn-login exposes database password to unauthorized users7.8 High
- kajam project kajamkajam allows local users to obtain sensitive information by listing the process7.8 High
- lean-ruport project lean-ruportlean-ruport allows local users to obtain sensitive information by listing the process7.8 High
- point-cli project point-clipoint-cli allows local users to obtain sensitive information by listing the process7.8 High
- vladtheenterprising project vladtheenterprisingVladTheEnterprising allows local users to write to arbitrary files via a symlink attack5.5 Medium
- vladtheenterprising project vladtheenterprisingVladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file7.0 High
- gyazo project gyazoGyazo allows local users to write arbitrary files5.5 Medium
- backup-agoddard project backup-agoddard, backup checksum project checksum +1 morebackup-agoddard and backup_checksum have Information Exposure vulnerability7.8 High
- cap-strap project cap-strapCap-Strap gem for Ruby places credentials on the useradd command line7.8 High
- codders-dataset project codders-datasetcodders-dataset Process Table Local Plaintext Credential Disclosure7.8 High
drupal/stacksPackagistThis module enables content editors to create complex pages and layouts on the fly without the help from a developer, using reusable widgets. The module does not sufficiently filter values posted to i…No score- websitebakerMultiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin...6.1 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to...6.1 Medium
- ibm security access manager, security access manager firmware, security access manager for mobile +1 more +3 moreIBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct...6.1 Medium
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm security access manager, security access manager 9.0 firmware, security access manager for mobile +1 more +3 moreIBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security...4.2 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that...4.2 Medium
- red hat undertowUndertow vulnerable to Request Smuggling6.1 Medium
- redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 morePrivilege Escalation in Hibernate Validator7.0 High
- freeipa, freeipa ipa +1 moreIt was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the ...7.5 High
- Show moreLoading…