CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- apache poiDenial of Service in Apache POI7.5 High
- jenkinsCross-Site Request Forgery in Jenkins8.8 High
- jenkinsDeserialization of Untrusted Data in Jenkins6.5 Medium
- jenkinsImproper Authentication in Jenkins8.8 High
- jenkins, oracle communications cloud native core automated test suite +1 moreDeserialization of Untrusted Data in Jenkins9.8 Critical
- ibm content navigatorIBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack...8.2 High
- vmware airwatch, airwatch console +1 moreVMware AirWatch Console (9.2.x before 9.2.2 and 9.1.x before 9.1.5) contains a Cross Site Request...8.8 High
- vmware vrealize automation, vsphere integrated containers +1 moreVMware Realize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3)...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive...5.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos...4.0 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a...7.8 High
- asus dsl-ac51 firmware, dsl-ac52u firmware, dsl-ac55u firmware +13 more +15 moreMultiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL...6.5 Medium
- asus dsl-ac51 firmware, dsl-ac52u firmware, dsl-ac55u firmware +13 more +15 moreASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1...9.8 Critical
- fortinet fortiosA Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and...6.1 Medium
- vastal i-tech buddy zone facebook cloneSQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im...9.8 Critical
- datacomponents tsitebuilderSQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or ...9.8 Critical
- multilanguage real estate mlm script project real estate mlm scriptSQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list...9.8 Critical
- taskrabbit clone project cloneSQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.9.8 Critical
- joomlatag jtag members directoryArbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the...7.5 High
- joomsky js support ticketCSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject...8.8 High
- dodocool dc38 firmwareAn issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465...8.8 High
- systemd project systemd, debian linux, opensuse leap +2 moresystemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on...7.8 High
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13...6.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a...7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 moreThe Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22...7.5 High
- linux kernel, canonical ubuntu linux +1 moredrivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial...7.8 High
- mpv, debian linux +1 morempv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site,...8.8 High
- libming, debian linux +1 moreThe decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after...8.8 High
- libming, debian linux +1 moreThe printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap...8.8 High
- acurax social media widgetThe acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin...8.8 High
- formspreetemplates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next...6.1 Medium
- electrumThe Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code...7.8 High
- podofo project podofoIn PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function...5.5 Medium
- brace expansion project expansionReDoS in brace-expansion7.5 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...8.8 High
- apple tv, safari, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...8.8 High
- apple tv, icloud, itunes +5 more +7 moreAn issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10...8.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...6.1 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to...6.8 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of...5.4 Medium
- ibm engineering requirements management doors, rational doors +1 moreIBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive...4.3 Medium
- ibm cognos tm1IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm tealeaf customer experienceIBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse...6.5 Medium
- ibm tealeaf customer experienceIBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote...9.8 Critical
- ibm tealeaf customer experienceIBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual...8.1 High
- Show moreLoading…