CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)....4.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...4.8 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance...4.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...4.3 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Stored Procedure)....6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...3.7 Low
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS)....6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)....7.1 High
- red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 moreIn systemd prior to 234 a race condition exists between .mount and .automount units such that...5.9 Medium
- cobham seatel 121 firmwareCobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive...5.3 Medium
- uclouvain openjpegIn OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function...6.5 Medium
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a...9.8 Critical
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated...7.5 High
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as...9.8 Critical
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.9.8 Critical
- pulsesecure pulse connect secure, pulse policy secure +1 moreA stack-based Buffer Overflow Vulnerability exists in the web server in Pulse Secure Pulse...9.8 Critical
- pulsesecure pulse connect secureA cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect...4.8 Medium
- sugarcrmphprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key...6.1 Medium
- malwarefox anti-malwareIn Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a...7.8 High
- malwarefox anti-malwareIn Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a...7.8 High
- bizlogicdev xnamiBizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI.6.1 Medium
- zyxel p-660hw v3 firmwareZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (router unreachable...7.5 High
- synocor zimbra collaboration suiteCross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0...5.4 Medium
- k7computing antivirus, endpoint, internet security +2 more +4 moreIn K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not...5.5 Medium
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific...7.0 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreIn K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users...5.5 Medium
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific...7.0 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations,...7.8 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific...7.0 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations,...7.8 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific...7.0 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations,...7.8 High
- k7computing antivirus, endpoint, internet security +2 more +4 moreK7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations,...7.8 High
- ibm rational team concert, rational collaborative lifecycle management, rational doors next generation +5 more +7 moreXML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7...6.5 Medium
- ibm db2IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow...6.5 Medium
- ibm algo risk applicationIBM Algorithmics One-Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated...5.4 Medium
- ibm rational engineering lifecycle managerCross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before...5.4 Medium
- ibm rational engineering lifecycle managerCross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before...5.4 Medium
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1 and 4.0 before...4.3 Medium
- ibm rational engineering lifecycle managerCross-site scripting (XSS) vulnerability in Jazz Foundation in IBM Rational Engineering Lifecycle...5.4 Medium
- libdwarf project libdwarfUse-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow...6.5 Medium
- jqueryjQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors...6.1 Medium
- torrentflux project torrentfluxMultiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers...6.1 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- octopus deployAn issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions...8.8 High
- Show moreLoading…