CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- red hat, inc. 389-ds-base, fedoraproject 389 directory server +1 moreIt was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle...8.1 High
- flexense diskpulse, disksavvy, dupscout +1 more +3 moreA buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14,...9.8 Critical
- ovirt ovirt-hosted-engine-setupAn information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's...7.8 High
- ibm business process managerIBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an...8.8 High
- apache hadoopExposure of Sensitive Information in Hadoop9.8 Critical
- freesshdFreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch...7.8 High
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the...5.5 Medium
- zeit next.jsDirectory traversal vulnerability in Next.js7.5 High
- flexible poll project pollSQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.9.8 Critical
- easycarscriptSQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.9.8 Critical
- livecrm saas cloudSQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login...9.8 Critical
- tumder project tumderSQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the...9.8 Critical
- wchat project wchatSQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User...9.8 Critical
- zechat project zechatSQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.9.8 Critical
- getaffiligator affiligatorSQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=...9.8 Critical
- rsvp invitation online project invitation onlineCross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php,...8.8 High
- quickad project quickadSQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat...9.8 Critical
- photography cms project cmsCross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax...8.8 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is...4.7 Medium
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the...7.5 High
- haxx curl, canonical ubuntu linux, debian linux +11 more +13 morelibcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When...9.8 Critical
- haxx libcurl, canonical ubuntu linux, debian linux +2 morelibcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2...9.1 Critical
- linux kernel, canonical ubuntu linux +1 morecrypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local...7.8 High
- apache nifiApache NiFi XSS issue in context path handling9.8 Critical
- apache nifiApache NiFi host header poisoning issue7.5 High
- symantec reporterSymantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive...9.8 Critical
- minecraft servers list lite project servers list lite, premium minecraft servers list project minecraft servers list +1 moreinstall.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers...9.8 Critical
- flexense sysgaugeThe server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the...8.1 High
- qemu, debian linux +1 moreThe cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest...4.4 Medium
- fairsketch rise ultimate project managerSQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to...9.8 Critical
- hp laserjet enterprise printers, hp pagewide enterprise printers, hp laserjet managed printers, hp officejet enterprise printers, a2w75a firmware, a2w76a firmware +171 more +173 moreInsufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP...9.8 Critical
- hp 110 firmware, 310 firmware, 315 firmware +20 more +22 moreHP has identified a potential security vulnerability before IG_11_00_00.10 for DesignJet T790,...7.8 High
- hp jetadvantage security managerPotential security vulnerabilities have been identified with HP JetAdvantage Security Manager...6.1 Medium
- hp jetadvantage security managerPotential security vulnerabilities have been identified with HP JetAdvantage Security Manager...6.1 Medium
- hp support assistantThe vulnerability allows attacker to extract binaries into protected file system locations in HP...5.5 Medium
- hp 2a68a firmware, 2a69a firmware, 2a70a firmware +86 more +88 moreHP has identified a potential security vulnerability with HP Enterprise LaserJet Printers and...6.1 Medium
- hp web jetadminA potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This...7.5 High
- hp d3q15a firmware, d3q15b firmware, d3q15d firmware +36 more +38 moreA potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet...9.8 Critical
- hp thinproA potential security vulnerability has been identified with the command line shell of the HP...7.8 High
- dnsmasqA vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78....7.5 High
- powerdns recursorAn issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and...5.9 Medium
- powerdns recursorWhen api-config-dir is set to a non-empty value, which is not the case by default, the API in...5.3 Medium
- powerdns recursorA cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0...6.1 Medium
- powerdns authoritativeAn issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4...7.1 High
- powerdns, powerdns recursor +1 moreAn issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up...5.9 Medium
- jenkins pipeline nodes and processesIncorrect permission checks in Pipeline: Nodes and Processes plugin4.8 Medium
- jenkins translation assistanceCSRF vulnerability in Jenkins Translation Assistance plugin8.8 High
- jenkins releaseCSRF vulnerability in Jenkins Release plugin8.8 High
- jenkins warningsXXE vulnerability Jenkins Warnings Plugin8.8 High
- Show moreLoading…