CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- apache igniteApache serialization mechanism does not have a list of classes allowed for serialization/deserialization9.8 Critical
- moxa, moxa awk-3131a firmware +1 moreAn exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless...10.0 Critical
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver,...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...8.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...8.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...8.8 High
- joomsky js jobsThe Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.5.4 Medium
- cisco ios xeMultiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated,...7.8 High
- mcafee true keyTS102801 True Key DLL Side-Loading vulnerability7.5 High
- mcafee epolicy orchestrator (epo), epolicy orchestrator +1 moreSB10228 ePO Directory Traversal vulnerability6.2 Medium
- microsoft windows, windows 7, windows server 2008 +2 moreThe Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of...7.8 High
- zohocorp manageengine recovery manager plusA stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus...5.4 Medium
- dedecmsDedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to...9.8 Critical
- dedecmssys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the...9.8 Critical
- get-simple getsimple cmsCross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in...6.1 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL...8.8 High
- beep project beep, debian linux +1 moreJohnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local...7.0 High
- iptanus wordpress file uploadThe Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.5.4 Medium
- libmingThe pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for...6.5 Medium
- axis m1033-w firmwareAn issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't...7.5 High
- axis m1033-w firmware** DISPUTED ** An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1...7.5 High
- axis p1354 firmware** DISPUTED ** An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1...7.5 High
- zyxel ac3000 firmwareThe Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to...6.8 Medium
- duckduckgoIn the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather...4.3 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 28.0.0.161 and earlier have an exploitable type confusion...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free...8.8 High
- dvd-x-player dvd x playerDVD X Player Standard 5.5.3.9 has a Buffer Overflow via a crafted .plf file, a related issue to...7.8 High
- linux kernelThe ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does...5.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not...5.5 Medium
- linux kernelThe ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15...5.5 Medium
- linux kernelThe ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case...5.5 Medium
- eyrie remctl, debian linux +1 moreremctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the...7.2 High