CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- smartmobilesoftware gitstackAn issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently...9.8 Critical
- dasannetworks h640x firmwareBuffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146...9.8 Critical
- directadminJBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows...9.8 Critical
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moresshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- jdennis keycloak-httpd-client-installkeycloak-httpd-client-install Insecure Secrets7.8 High
- jdennis keycloak-httpd-client-installkeycloak-httpd-client-install symlink attack vulnerability5.5 Medium
- red hat, inc. spice-vdagent, debian linux +1 morespice-vdagent up to and including 0.17.0 does not properly escape save directory before passing...7.8 High
- micro focus netiq access manager, netiq access manager +1 moreIn NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO...9.8 Critical
- talos tinysvcmdnsAn exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version...7.5 High
- mariadb, percona xtradb cluster, fedoraproject fedora +2 moresql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB...8.8 High
- parity ethereum client, talos parity +1 moreAn exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC...7.5 High
- ethereum virtual machine, talos cpp-ethereum +1 moreAn exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum...8.2 High
- ethereum cpp-ethereumAn exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC...7.5 High
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's...4.0 Medium
- talos cpp-ethereum, ethereum aleth +1 moreAn exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp...6.8 Medium
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum...4.0 Medium
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's...4.0 Medium
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp...6.8 Medium
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's...4.0 Medium
- ethereum cpp-ethereumAn exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's...4.0 Medium
- delayed job web project job web, talos delayed job web rails gem +1 moredelayed_job_web Cross-site Scripting vulnerability6.1 Medium
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreAn improper access control vulnerability in Trend Micro Smart Protection Server (Standalone)...9.8 Critical
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server ...6.1 Medium
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could...8.1 High
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could...9.8 Critical
- trend micro mobile security (enterprise), trendmicro mobile security +1 moreAn uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security ...7.5 High
- rails admin project adminrails_admin ruby gem XSS6.1 Medium
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreA session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server ...8.8 High
- yandex browser, yandex n.v. browser for desktop +1 moreYandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an...7.8 High
- yandex browser, yandex n.v. browser for android +1 moreRace condition issue in Yandex Browser for Android before 17.4.0.16 allowed a remote attacker to...7.5 High
- yandex browserYandex Browser before 16.9.0 allows remote attackers to spoof the address bar via window.open.7.5 High
- commvaultA Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before...9.8 Critical
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-main6.5 Medium
- oxid-esales eshopOXID eShop user impersonation vulnerability7.5 High
- oxid-esales eshopOXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5...5.4 Medium
- ibm curam social program management, cram social program management +1 moreIBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could...5.0 Medium
- f5 big-ip advanced firewall manager, big-ip afm +1 moreX509 certificate verification was not correctly implemented in the early access "user id" feature...4.8 Medium
- ibm integration busIBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to...5.6 Medium
- long range zip project range zip, debian linux +1 moreIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the...5.5 Medium
- podofo project podofoIn PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve...5.5 Medium
- uclouvain openjpeg, canonical ubuntu linux, debian linux +2 moreIn OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the...6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function...6.5 Medium
- jqueryDenial of Service in jquery7.5 High
- jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 moreCross-Site Scripting (XSS) in jquery6.1 Medium
- jqueryCross-Site Scripting in jquery6.1 Medium
- wordpressWordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js...6.1 Medium
- google androidIn Samsung Gear products, Bluetooth link key is updated to the different key which is same with...5.7 Medium
- python-markdown2 project python-markdown2markdown2 is vulnerable to cross-site scripting6.1 Medium
- apache guacamoleApache Guacamole Race Condition vulnerability8.1 High
- moxa softnvr-ia live viewAn Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version...7.2 High
- Show moreLoading…