CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- mit kerberosAn issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. The pre-defined function ...6.5 Medium
- mit kerberosAn issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry-...7.5 High
- openocd open on-chip debugger, debian linux +1 moreOpen On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data...9.6 Critical
- linux kernelThe tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11...9.8 Critical
- w3eden download managerThe download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a...6.1 Medium
ca-certificatesDebianca-certificates - security updateNo score- linux kernelIn the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability...5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crash7.5 High
- zlib-ng minizip-ngDirectory traversal vulnerability in the do_extract_currentfile function in miniunz.c in...5.5 Medium
- beims contractorweb.netZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on ...8.8 High
- beims contractorweb.netZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged...9.8 Critical
- foxsash imghostingFoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The...6.1 Medium
- magicwinmail winmail serverWinmail Server through 6.2 allows remote code execution by authenticated users who leverage...8.8 High
- iliasILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes...6.1 Medium
libgdMageia,phpMageia +1 moreUpdated php & libgd packages fix security vulnerabilitiesNo scorelibgdMageia,phpMageia +1 moreUpdated php & libgd packages fix security vulnerabilitiesNo score- linux kernel, redhat enterprise linux, enterprise mrg +2 moreA flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel...5.5 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreA flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel...5.5 Medium
- linux kernelA use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue...8.1 High
- wizardmac readstatlibreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated...7.8 High
- icyphoenixIcy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the...7.2 High
- ijoomla ad agencyThe iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the `advertiser_status...9.8 Critical
- wpjobboardThe WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to...7.2 High
- fop2 flash operator panelThe callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash...8.8 High
- linuxmagic magicspamThe LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover...3.3 Low
- piwigoPiwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display`...6.1 Medium
- sonicwall global management system, analyzer +1 moreSonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `...5.4 Medium
- dotclearCross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote...5.4 Medium
- dotclearCross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote...5.4 Medium
- newsbee project newsbeeNewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.4.8 Medium
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the...5.5 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage...6.5 Medium
- libavIn Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function...8.8 High
- graphicsmagick, libtiff +1 moreLibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer...8.8 High
- transmissionbt transmission, debian linux +1 moreTransmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header...8.8 High
- prestashopPrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which...5.3 Medium
- prestashopPrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen.5.4 Medium
- booking calendar project calendarAn issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp...8.8 High
- booking calendar project calendarAn issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp...4.8 Medium
- booking calendar project calendarAn issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp...4.8 Medium
- booking calendar project calendarAn issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp...4.8 Medium
- read and understood project and understoodAn issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp...8.8 High
- read and understood project and understoodAn issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the...4.8 Medium
- read and understood project and understoodAn issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- responsive coming soon page project coming soon pageAn issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS...4.8 Medium
- Show moreLoading…