CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- jenkins findbugsXML External Entity Reference in Jenkins FindBugs Plugin8.8 High
- jenkins dryXXE vulnerability in Jenkins DRY Plugin8.8 High
- jenkins checkstyleXXE vulnerability in Jenkins Checkstyle Plugin8.8 High
- jenkins pmdXXE vulnerability in Jenkins PMD Plugin8.8 High
- dpdk, linux kernel ixgbe, intel 82576 firmware +5 more +7 moreOn multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control...8.6 High
- 5none nonecmsThe copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote...7.5 High
- 5none nonecmsDirectory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3...6.5 Medium
- silverstripeSilverStripe CSV Excel Macro Injection5.5 Medium
- monstraMonstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution...8.8 High
- atom electronRemote Code Execution in electron8.8 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...7.5 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...7.5 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute code by creating arbitrary files on...8.8 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to overwrite arbitrary files on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to overwrite arbitrary files on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute code by creating arbitrary files on...8.8 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to overwrite arbitrary files on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to overwrite files on vulnerable installations of...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to delete arbitrary files on vulnerable installations...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute code by overwriting arbitrary files on...8.8 High
- netgain systems enterprise managerThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to create arbitrary files on vulnerable installations...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to delete arbitrary files on vulnerable installations...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to disclose sensitive information on vulnerable...6.5 Medium
- netgain systems enterprise managerThis vulnerability allows remote attackers to bypass authentication on vulnerable installations...8.8 High
- google androidBuffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices...7.0 High
- subsonicSubsonic v6.1.3 has an insecure allow-access-from domain="*" Flash cross-domain policy that...6.5 Medium
- bigtreecms bigtree cmsCross-site scripting (XSS) in BigTree 4.2.19 allows any remote users to inject arbitrary web...5.4 Medium
- gnu mailman, canonical ubuntu linux, debian linux +6 more +8 moreCross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...6.1 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...6.0 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreThe reader view will display cross-origin content when CORS headers are set to prohibit the...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe screenshot images displayed in the Activity Stream page displayed when a new tab is opened is...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the "ActiveTab" permission are able to access frames hosted within the active...9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreIf an HTTP authentication prompt is triggered by a background network request from a page or...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf an existing cookie is changed to be "HttpOnly" while a document is open, the original value...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreDevelopment Tools panels of an extension are required to load URLs for the panels as relative...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen the text of a specially formatted URL is dragged to the addressbar from page content, the...6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreAn audio capture session can started under an incorrect origin from the site making the capture...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA Blob URL can violate origin attribute segregation, allowing it to be accessed from a private...4.3 Medium
- Show moreLoading…