Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
January

CVEs published in January 2018

1,346 vulnerabilities, 169 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156307.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156297.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156287.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156277.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156267.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156257.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156247.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156237.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156227.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156217.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156207.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156197.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156187.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156177.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156167.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156157.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156147.2 HighJanuary 11, 2018
tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...CVE-2017-156137.2 HighJanuary 11, 2018
microsemi s350i firmwareSymmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors...CVE-2014-50708.8 HighJanuary 11, 2018
microsemi s350i firmwareDirectory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows...CVE-2014-50687.5 HighJanuary 11, 2018
redhat cloudforms management engineThe check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as...CVE-2014-00878.8 HighJanuary 11, 2018
dragonbyte-tech vbshoutCross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module...CVE-2012-6667Public exploit6.1 MediumJanuary 11, 2018
vmware fusion, workstation, workstation pro / player +2 moreVMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service...CVE-2017-49507.0 HighJanuary 11, 2018
vmware fusion, workstation, workstation pro / player +2 moreVMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when...CVE-2017-49497.0 HighJanuary 11, 2018
cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...CVE-2018-01186.1 MediumJanuary 11, 2018
gnome gcab, canonical ubuntu linux, debian linux +7 more +9 moreA stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious...CVE-2018-5345Fix available7.8 HighJanuary 11, 2018
debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles...CVE-2018-5333Public exploitFix available5.5 MediumJanuary 11, 2018
debian linux, linux kernel, canonical ubuntu linux +2 moreIn the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value...CVE-2018-5332Fix available7.8 HighJanuary 11, 2018
gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 HighJanuary 11, 2018
juniper screenosScreenOS: Etherleak vulnerability found on ScreenOS deviceCVE-2018-00144.3 MediumJanuary 10, 2018
juniper junos spaceJunos Space: Local File Inclusion VulnerabilityCVE-2018-00136.5 MediumJanuary 10, 2018
juniper junos spaceJunos Space: Local privilege escalation vulnerability in Junos SpaceCVE-2018-00127.8 HighJanuary 10, 2018
juniper junos spaceJunos Space: Reflected XSS vulnerability in Junos Space management interfaceCVE-2018-00115.4 MediumJanuary 10, 2018
juniper junos spaceA vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not...CVE-2018-00106.5 MediumJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreSRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.CVE-2018-00095.4 MediumJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreJunos OS: commit script may allow unauthenticated root login upon rebootCVE-2018-00086.2 MediumJanuary 10, 2018
juniper junosAn unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the...CVE-2018-00079.8 CriticalJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreJunos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejectsCVE-2018-00066.5 MediumJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreSecurity Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.CVE-2018-00057.4 HighJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreJunos OS: Kernel Denial of Service VulnerabilityCVE-2018-00046.5 MediumJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreJunos OS: A crafted MPLS packet may lead to a kernel crashCVE-2018-00036.5 MediumJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreMX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.CVE-2018-00028.2 HighJanuary 10, 2018
juniper junos, juniper networks junos os +1 moreJunos: Unauthenticated Remote Code Execution through J-Web interfaceCVE-2018-00019.8 CriticalJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-97127.5 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-97057.8 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-96897.8 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-158507.5 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-158487.8 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-158477.0 HighJanuary 10, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...CVE-2017-158457.8 HighJanuary 10, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open