CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- red hat resteasyDeserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider8.1 High
- jenkins script securityExposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin6.5 Medium
- ravpower filehub firmwareAn issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted...9.8 Critical
- eihitech professional local directory scriptSQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php...9.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter.4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.4.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter.4.8 Medium
- phpfreechatphpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a...7.5 High
- impulseadventure jpegsnoopImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode...7.5 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access...7.5 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker...8.8 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network...5.3 Medium
- sugarcrmMultiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track...9.8 Critical
- kingsoftstore kingsoft wps officeThe WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0...5.5 Medium
- netis-systems wf2419 firmwareNetis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control...5.4 Medium
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys) allows local users to...7.8 High
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to...7.8 High
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to...7.8 High
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to...7.8 High
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to...7.8 High
- maxpcsecure anti virusIn Max Secure Anti Virus 19.0.3.019,, the driver file (SDActMon.sys) allows local users to cause...7.8 High
- escanav anti-virusIn eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a...7.8 High
- escanav anti-virusIn eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a...7.8 High
- escanav anti-virusIn eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a...7.8 High
- vbulletinvBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.6.1 Medium
- advantech webaccess\/scadaA Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8...5.3 Medium
- advantech webaccess\/scadaA SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817...5.3 Medium
- emc rsa authentication managerThe Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a...4.3 Medium
- redhat libvirt, debian linux, redhat enterprise linux desktop +5 more +7 moreqemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption)...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 Critical
- dovecot, canonical ubuntu linux, debian linux +2 moreA flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results...7.5 High
- red hat, inc. undertow as shipped in jboss eap 7.1.0.ga, redhat jboss enterprise application platform +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow7.5 High
- red hat wildfly, redhat jboss enterprise application platform, jboss wildfly application server +2 moreImproper Input Validation in org.wildfly:wildfly-undertow5.5 Medium
- jenkinsCross-Site Request Forgery in Jenkins8.1 High
- jenkinsRace Condition in Jenkins8.1 High
- jenkins ec2Arbitrary shell command execution in Jenkins EC2 Plugin8.8 High
squidMageiaUpdated squid packages fix security vulnerabilitiesNo score- vehicle sales management system project sales management systemSoyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL...9.8 Critical
- routers2 project routers2A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET...4.7 Medium
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers...5.5 Medium
- artifex mujsThe js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because...5.5 Medium
- netis-systems wf2419 firmwareNetis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.5.4 Medium
- artifex mujsjsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary...5.5 Medium
- reservo image hostingReservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search...6.1 Medium
- siemens desigo pxc00-e.d v4.10, desigo pxc00-e.d v5.00, desigo pxc00-e.d v5.10 +46 more +48 moreA vulnerability has been identified in Desigo Automation Controllers Products and Desigo Operator...9.8 Critical
- tinderFixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to...9.1 Critical
- tinderUnencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to...9.1 Critical
- progress whatsup goldAn issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL...9.8 Critical
- progress whatsup goldAn issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients...9.8 Critical
- ravpower filehub firmwareRAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP...7.5 High
- Show moreLoading…