CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- google androidIn the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after...7.0 High
- google androidIn the sendFormatChange function of ACodec, there is a possible integer overflow which could lead...7.8 High
- google androidIn the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to...7.8 High
- google androidIn the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use...7.8 High
- google androidIn the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible...9.8 Critical
- google androidIn the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx...9.8 Critical
- google androidIn several functions of libhevc, NEON registers are not preserved. This could lead to remote code...9.8 Critical
- google androidIn the parseURL function of URLStreamHandler, there is improper input validation of the host...8.8 High
- google androidIn MPEG4Extractor.cpp, there are several places where functions return early without cleaning up...7.5 High
- google androidAn information disclosure vulnerability in the Android framework (clipboardservice). Product:...7.5 High
- long range zip project range zipIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the...5.5 Medium
- skyboxsecurity skybox platformAn issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in ...7.5 High
- skyboxsecurity skybox platformAn issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview...9.8 Critical
- skyboxsecurity skybox platformAn issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting...5.4 Medium
- skyboxsecurity skybox platformAn issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting...5.4 Medium
- skyboxsecurity skybox platformAn issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution...9.8 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAn Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx...9.8 Critical
- phoenixcontact fl switch 3004t-fx firmware, fl switch 3004t-fx st firmware, fl switch 3005 firmware +26 more +28 moreAn Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx...5.3 Medium
- we-con levistudio hmi editor firmwareAn issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially...7.8 High
- we-con levistudio hmi editor firmwareAn issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially...7.8 High
- ics-cert moxa mxview, moxa mxview +1 moreAn issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation...7.8 High
- automattic jetpackThe Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.6.1 Medium
- automattic jetpackThe Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.6.1 Medium
- wp events calendar project events calendarThe Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id...9.8 Critical
- flexense diskbossA stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated...9.8 Critical
- sophos sfosAn NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before...6.1 Medium
- muvikoscript muvikoMultiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary...9.8 Critical
- fiberhome lm53q1 firmwareThe portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web...9.8 Critical
- fiberhome lm53q1 firmwareThe portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web...8.8 High
- fiberhome lm53q1 firmwareImproper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended...9.8 Critical
- ibm security identity managerCross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual...5.4 Medium
- ibm security identity managerCross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual...8.8 High
- ibm security identity manager virtual applianceIBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS...9.8 Critical
- ibm security identity manager virtual applianceIBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS...7.8 High
- ibm security identity manager virtual applianceIBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS...8.8 High
- jolla sailfish osJolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger...7.5 High
- yodobashiThe Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL...5.9 Medium
- etherpadnode/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to...7.5 High
- cupsThe browsing feature in the server in CUPS does not filter ANSI escape sequences from shared...8.8 High
- google androidThe backup mechanism in the adb tool in Android might allow attackers to inject additional...7.8 High
- aztech adsl dsl5018en \(1t1r\) firmware, dsl705e firmware, dsl705eu firmware +2 moreAztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain...9.8 Critical
- aztech adsl dsl5018en \(1t1r\) firmware, dsl705e firmware, dsl705eu firmware +2 moreAztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which...9.8 Critical
- aztech adsl dsl5018en \(1t1r\) firmware, dsl705e firmware, dsl705eu firmware +2 morecgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not...7.5 High
- google androidNVIDIA driver contains an integer overflow vulnerability which could cause a use after free and...7.8 High
- lhaplus project lhaplusImproper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead...3.3 Low
- atlassian jiraThe issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to...6.1 Medium
- atlassian jiraThe IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers...4.3 Medium
- atlassian jira, jira server +1 moreThe printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from...6.1 Medium
- libtiff, opensuse leap, suse linux enterprise desktop +2 more +4 more** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to...7.5 High
- discuz discuzxDiscuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the...9.8 Critical
- Show moreLoading…