CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- icegram email subscribers \& newslettersAn issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for...7.5 High
- perfexcrm perfex crmIn Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.9.8 Critical
- wondercms** DISPUTED ** WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses...7.5 High
- wondercms** DISPUTED ** In WonderCMS 2.3.1, the application's input fields accept arbitrary user input...6.1 Medium
- wondercmsIn WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to...8.8 High
- clamav, debian linux +1 moreClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...7.5 High
- clamav, debian linux +1 moreClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...9.8 Critical
- clamav, debian linux +1 moreClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...5.5 Medium
- clamav, debian linux +1 moreClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...9.8 Critical
- clamav, debian linux +1 moreClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an...7.8 High
- clamav, debian linux +1 moreThe ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow...7.5 High
- clamav, debian linux +1 moreThe ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow...7.5 High
- sophos puremessageCross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows...6.1 Medium
- ibm bladecenter hs22 firmware, bladecenter hs23 firmware, bladecenter hs23e firmware +35 more +37 moreAn unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on...7.5 High
- omniauth, debian linux +1 moreOmniauth allows POST parameters to be stored in session7.5 High
- nippon telegraph and telephone east corporation flet's virus clear easy setup & application tool, flet's virus clear v6 easy setup & application tool, ntt-east flet\'s virus clear easy setup \& application tool +1 more +3 moreUntrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11...7.8 High
- nootka project nootkaNootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified...9.8 Critical
- groupsessionOpen redirect vulnerability in GroupSession version 4.7.0 and earlier allows an attacker to...6.1 Medium
linux-azureUbuntu,linux-gcpUbuntu,linux-hweUbuntu +1 more +3 morelinux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilityNo score- gnu binutilsThe elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd),...7.8 High
- netiq access manager, micro focus netiq access manager, administrative console +1 moreA Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console...9.8 Critical
- atlassian sourcetree, sourcetree for windows +1 moreSourcetree for Windows had several argument and command injection bugs in Mercurial and Git...8.8 High
- atlassian sourcetree, sourcetree for macos +1 moreSourcetree for macOS had several argument and command injection bugs in Mercurial and Git...8.8 High
- jenkins delivery pipelineJenkins Delivery Pipeline Plugin Cross-site Scripting vulnerability6.1 Medium
- jenkins speaks\!Arbitrary code execution vulnerability in Jenkins Speaks! Plugin8.8 High
- jenkins swarmJenkins Swarm Plugin Client vulnerable to man-in-the-middle attacks5.9 Medium
- jenkinsImproper Input Validation in Jenkins2.2 Low
- jenkinsMissing Authorization in Jenkins4.3 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jenkins mavenMitM on Jenkins Maven Plugin5.9 Medium
- jenkinsImproper Certificate Validation in Jenkins5.9 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins4.3 Medium
- jenkinsImproper Input Validation in Jenkins7.5 High
- jenkinsOS Command Injection in Jenkins8.8 High
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins4.8 Medium
- jenkinsImproper Input Validation in Jenkins7.3 High
- jenkins multijobJenkins Multijob plugin did not check permissions in the Resume Build action4.3 Medium
- jenkins global-build-statsCross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats plugin6.1 Medium
- jenkins dependency graph viewerJenkins Dependency Graph Viewer plugin vulnerable to missing permission checks4.3 Medium
- jenkins build-publisherJenkins Build-Publisher plugin has Insufficiently Protected Credentials7.8 High
- jenkins active choicesCross-site Scripting in Jenkins Active Choices plugin5.4 Medium
- lenovo fingerprint manager proSensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows...5.5 Medium
- biscom secure file transferBiscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId...8.1 High
- libming, debian linux +1 moreThe outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable...8.8 High
- wbce cmsCross-site scripting (XSS) in WBCE CMS 1.3.1 allows remote authenticated administrators to inject...4.8 Medium
- nrec pcs-9611 firmwareAn Improper Input Validation issue was discovered in Nari PCS-9611 relay. An improper input...9.8 Critical
graphicsmagickMageiaUpdated graphicsmagick packages fix security vulnerabilitiesNo score- apache nifiDenial of service via deserialization attack in nifi5.0 Medium
- Show moreLoading…