CVEs published in January 2018
1,346 vulnerabilities, 169 critical, 4 exploited.
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote...8.1 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to...8.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...5.5 Medium
- flexera software llc linux kernel, linux kernel +1 moreThe "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before...5.9 Medium
- flexera software llc linux kernel, linux kernel +1 moreThe "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before...5.9 Medium
- flexera software llc linux kernel, linux kernel +1 moreThe "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8...5.9 Medium
- flexera software llc linux kernel, linux kernel +1 moreThe vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local...4.7 Medium
- apache tomcatInconsistent documentation in Apache Tomcat5.3 Medium
- conceptronic cipcamptiwl firmware, cipcamptiwl web firmware +1 moreAn issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi...8.8 High
- conceptronic cipcamptiwl firmware, cipcamptiwl web firmware +1 moreAn issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated...7.5 High
- webmproject libwebmThe function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does...8.8 High
- splashing images project imagesadmin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images)...7.2 High
- splashing images project imagesA cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in...4.8 Medium
- phoenixcontact mguard centerport firmware, mguard core tx vpn firmware, mguard delta tx\/tx firmware +20 more +22 moreAn Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard...7.8 High
- bmc track-it\!BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service...9.8 Critical
- bmc track-it\!BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service ...9.8 Critical
- glyphandcog xpdf, debian linux +1 morezxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in...5.3 Medium
- maharaAn issue was discovered in Mahara before 18.10.0. It mishandled user requests that could...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected...8.8 High
- joomla joomla\!In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in...6.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an...6.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability...6.1 Medium
- joomla joomla\!In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL...9.8 Critical
- iball ib-wrb302n firmware/goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has...6.1 Medium
- huawei ar1200 firmware, ar150 firmware, ar160 firmware +18 more +20 moreMultiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700,...7.5 High
- joomlacalendars event calendarSQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in...9.8 Critical
- joomlacalendars picture calendarDirectory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php...7.5 High
- joomlacalendars visual calendarSQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a...9.8 Critical
- mantisbt** DISPUTED ** MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor...3.3 Low
smarty3Debiansmarty3 - regression updateNo score- imagemagick, canonical ubuntu linux +1 moreIn the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap,...6.5 Medium
- mozilla firefoxUnsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code...6.1 Medium
- 7-zip, 7-zip p7zip, debian linux +2 moreHeap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before...7.8 High
- sangoma freepbx** DISPUTED ** FreePBX 10.13.66-32bit and 14.0.1.24 (SNG7-PBX-64bit-1712-2) allow post...7.2 High
- disneyanimation ptex, talos walt disney animation studios ptex +1 moreAn exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture...8.8 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive...10.0 Critical
- apsis pound, debian linux +1 moreApsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability...9.8 Critical
- ffmpeg, debian linux +1 moreThe filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote...6.5 Medium
- netis-systems wf2419 firmwareA cross-site request forgery web vulnerability has been discovered on Netis WF2419 V2.2.36123...8.8 High
- wps officeThe WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not...6.5 Medium
- atlassian activity streamsSeveral rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows...5.4 Medium
- miek gieben miekg-dnsDenial of Service in miekg-dns7.5 High
- iball ib-wra150n firmwareiBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to...8.8 High
- iball ib-wra150n firmwareiBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the...9.8 Critical
- monstraMonstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and...8.8 High
- Show moreLoading…