CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- discuz discuzxDiscuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.6.1 Medium
- discuz discuzxDiscuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a...6.1 Medium
- slidervilla dbox sliderThe Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders...8.8 High
- slidervilla smooth sliderThe Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php ...8.8 High
- slidervilla testimonial sliderThe Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders...8.8 High
- d-link dsl-2540u firmware, dsl-2640u firmware +1 morediag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U...8.8 High
- srbtranslatin project srbtranslatinThe SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin...4.8 Medium
- srbtranslatin project srbtranslatinThe SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin...8.8 High
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability4.8 Medium
- wpglobusWPGlobus plugin Stored XSS & CSRF security vulnerability8.8 High
- cmcm armorfly browser \& downloaderCheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older"...7.5 High
- cmcm cm browserCheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms,...7.5 High
- advantech webaccessAn Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess...7.5 High
- advantech webaccessA use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess...6.5 Medium
- seagate personal cloud firmwareSeagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c,...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...7.8 High
- shibboleth xmltooling-c, debian linux +1 moreShibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in...6.5 Medium
- google androidAn elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions:...7.8 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was...6.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was...6.5 Medium
- dragonbyte-tech vbdownloads moduleCross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte...6.1 Medium
- dragonbyte-tech forumon rpg moduleMultiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte...6.1 Medium
- dragonbyte-tech vbactivity moduleMultiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity...6.1 Medium
- dragonbyte-tech vbshout moduleMultiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte...6.1 Medium
- haudenschilt family connections cmsMultiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2...8.8 High
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm curam social program management, cram social program management +1 moreIBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross...5.4 Medium
- ibm curam social program management, cram social program management +1 moreIBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site...5.4 Medium
- ibm liberty, liberty for java for bluemix +1 moreIBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local...3.3 Low
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be...3.3 Low
- jungo windriverRace condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer...7.8 High
- parity browserParity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and...5.3 Medium
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- tp-link er5110g firmware, er5120g firmware, er5510g firmware +35 more +37 moreTP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...7.2 High
- Show moreLoading…