CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- watchguard ap100 firmware, ap102 firmware, ap200 firmware +2 more An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9... 7.8 High
- watchguard ap100 firmware, ap102 firmware, ap200 firmware +2 more An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9... 9.8 Critical
- imagely nextgen gallery Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS)... 4.8 Medium
- bigtreecms bigtree cms BigTree before 4.2.22 has XSS in the Users management page via the name or company field. 5.4 Medium
- cloud foundry garden-runc, cloudfoundry cf-deployment +1 more Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for... 6.5 Medium
- dell emc smis, emc solutions enabler virtual appliance, emc unisphere +14 more +16 more In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions... 9.8 Critical
- bigtreecms bigtree cms site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload... 9.8 Critical
-
ankiMageia Updated anki package fixes security vulnerability No score - redhat openshift, red hat atomic-openshift +1 more A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An... 8.8 High
- norton core, symantec corporation norton core, symantec norton core firmware +2 more The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a... 8.0 High
- magnicomp sysinfo An issue was discovered in MagniComp SysInfo before 10-H82 if setuid root (the default). This... 7.8 High
- open-emr openemr interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to... 8.8 High
- open-emr openemr interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to... 6.5 Medium
- open-emr openemr Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow... 6.1 Medium
- frogcms project frogcms Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field. 4.8 Medium
- delta electronics pmsoft Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities... 7.8 High
- milestonesys xprotect, siemens siveillance vms +1 more The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+,... 8.1 High
- philips intellivue mx40 patient worn monitor, intellivue mx40 firmware +1 more Certain 802.11 network management messages have been determined to invoke wireless access point... 6.5 Medium
- philips intellivue mx40 patient worn monitor, intellivue mx40 firmware +1 more Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40... 6.5 Medium
- huawei alp-al00b firmware, bla-al00b firmware, huawei technologies co., ltd. alp-al00b, bla-al00b +2 more RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA... 4.4 Medium
- ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.2 is vulnerable to cross-site scripting. This vulnerability... 5.4 Medium
- ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.2 is impacted by generated LoopBack APIs for a Model using... 6.5 Medium
- huawei technologies co., ltd. e5771h-937, huawei e5771h-937 firmware +1 more Huawei MBB (Mobile Broadband) products E5771h-937 with the versions before E5771h-937TCPU... 6.5 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 more Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40... 3.7 Low
- qnap qts Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build... 6.1 Medium
- blackboard learn Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any... 6.1 Medium
- octopus deploy In Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against... 7.5 High
- nagios xi An issue was discovered in Nagios XI 5.4.13. There is XSS exploitable via CSRF in (1) the... 5.4 Medium
- nagios xi An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal... 6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 more The Linux Kernel version 3.18 contains a dangerous feature vulnerability in... 5.5 Medium
- etherpad lite Etherpad Lite before 1.6.4 is exploitable for admin access. 9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 more The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd)... 5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 more The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor... 5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x... 8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x... 7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1... 6.1 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x... 7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 more An issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x... 4.7 Medium
- wavpack, debian linux +1 more An issue was discovered in WavPack 5.1.0 and earlier for W64 input. Out-of-bounds writes can... 5.5 Medium
- wavpack, debian linux +1 more An issue was discovered in WavPack 5.1.0 and earlier for DSDiff input. Out-of-bounds writes can... 5.5 Medium
- wavpack, debian linux +1 more An issue was discovered in WavPack 5.1.0 and earlier for WAV input. Out-of-bounds writes can... 5.5 Medium
- wavpack, debian linux +1 more An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a... 7.8 High
- wavpack, debian linux +1 more An issue was discovered in WavPack 5.1.0 and earlier. The WAV parser component contains a... 7.8 High
- easycms project easycms EasyCMS 1.3 is prone to Stored XSS when posting an article; four fields are affected: title,... 5.4 Medium
- uetoken useless ethereum token The transferFrom function of a smart contract implementation for Useless Ethereum Token (UET), an... 7.5 High
- seagate personal cloud firmware Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in... 7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker... 6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 more A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote... 6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117... 6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 more Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66... 6.5 Medium
- Show olderLoading…