CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- mozilla firefox, canonical ubuntu linux +1 moreThe printing process can bypass local access protections to read files available through symlinks...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreStyle editor traffic in the Developer Tools can be routed through a service worker hosted on a...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file....7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when manipulating floating "first-letter" style elements...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable"...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing,...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory...9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Critical
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...8.8 High
- microsoft office, word, microsoft corporation equation editor +1 more +3 moreEquation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft...7.8 High
- matrixsslMatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible...5.3 Medium
- axtls project axtlsaxTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of...5.3 Medium
- yiiframeworkYii Framework reflected Cross-site Scripting7.5 High
- yiiframeworkYii Framework Cross-Site Request Forgery (CSRF)8.8 High
- nlnet labs unbound, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An...5.3 Medium
- webartisan soundy background musicThe Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via...6.1 Medium
- webartisan soundy audio playlistThe Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy...6.1 Medium
- asus asuswrtAn issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in...9.8 Critical
- asus asuswrtAn issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in...9.8 Critical
- powerdns recursorImproper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow...3.7 Low
- nic knot resolverImproper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1...3.7 Low
- rubrik cdmA man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x...8.1 High
intel-microcodeUbuntuintel-microcode regressionNo score- artifex mupdfHeap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1...7.8 High
- moodleMoodle XSS Vulnerability5.4 Medium
- moodleMoodle Privilege escalation in quiz web services4.3 Medium
- moodleMoodle Setting for blocked hosts list can be bypassed with multiple A record hostnames6.5 Medium
- moodleMoodle SSRF Vulnerability6.5 Medium
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +6 more +8 moreDeserialization of Untrusted Data in jackson-databind8.1 High
- labf nfsaxeBuffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute...9.8 Critical
- pfsensepfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|'...8.8 High
- control-webpanel webpanelindex.php in CentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the id...6.1 Medium
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel through v0.9.8.12 has XSS via the `module` value...6.1 Medium
- tribalsystems zenarioSQL Injection in Zenario 7.1-7.68.8 High
- gnu libtasn1, debian linux, fedoraproject fedora +2 moreAn issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1...7.5 High
- zillya zillya\! antivirusIn Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial...7.8 High
- zillya zillya\! antivirusIn Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial...7.8 High
- zillya zillya\! antivirusIn Zillya! Antivirus 3.0.2230.0, the driver file (zef.sys) allows local users to cause a denial...7.8 High
- Show moreLoading…