CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- google androidIn M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop...5.5 Medium
- google androidIn MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after...7.8 High
- google androidIn ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing...7.8 High
- google androidIn CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due...7.8 High
- google androidIn getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect...5.5 Medium
- google androidIn the getHost() function of UriTest.java, there is the possibility of incorrect web origin...9.8 Critical
- google androidIn avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing...9.8 Critical
- fiberhome vdsl2 modem hg 150-ub firmwareFiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent...9.8 Critical
- fiberhome vdsl2 modem hg 150-ub firmwareFiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin"...9.8 Critical
- avatar uploader uploader, drupal avatar uploader +1 moreVulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or...7.5 High
- wolfcms wolf cmsCross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to...6.5 Medium
- wolfcms wolf cmsOpen redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3...4.8 Medium
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...7.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...7.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...7.5 High
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability8.2 High
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability8.2 High
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Target influence via framing vulnerability6.1 Medium
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability6.4 Medium
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability8.8 High
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability3.5 Low
- atlassian application linksThe OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0...7.2 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.5, the TCP dissector could crash. This was addressed in epan/dissectors...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed...7.5 High
- yahei php proberproberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.6.1 Medium
- iscripts easycreateiScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.5.4 Medium
- iscripts easycreateiScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.5.4 Medium
- iscripts sonicbbiScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.6.1 Medium
- jasper project jasperJasPer 2.0.14 allows denial of service via a reachable assertion in the function...6.5 Medium
- xmlsoft libxml2, debian linux +1 moreThe xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote...5.3 Medium
- brave browserBrave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource...6.5 Medium
- brave browserBrave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a...7.5 High
- gxlcms qyThe upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows...9.8 Critical
- brilliantts fuze card ble firmware, fuze card mcu firmware +1 moreAn attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0...6.1 Medium
- debian linux, linux kernel +1 moreThe __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local...5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 moreA information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android....7.1 High
- d-link dsl-3782 firmwareDiagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer...8.8 High
- ncmpc project ncmpc, canonical ubuntu linux, debian linux +2 morencmpc through 0.29 is prone to a NULL pointer dereference flaw. If a user uses the chat screen...7.5 High
- unisys stealth svgThe Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2...7.5 High
- mcafee anti-virus plus, endpoint security, host intrusion prevention +11 more +13 moreSB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability5.0 Medium
- mcafee network security management (nsm), network security manager +1 moreSB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability8.3 High
- ibm tivoli directory serverThe web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1...7.8 High
- intel corporation remote keyboard, intel remote keyboard mobile app +1 moreEscalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to...7.8 High
- intel corporation remote keyboard, intel remote keyboard mobile app +1 moreEscalation of privilege in all versions of the Intel Remote Keyboard allows a network attacker to...9.8 Critical
- intel corporation remote keyboard, intel remote keyboard mobile app +1 moreEscalation of privilege in all versions of the Intel Remote Keyboard allows an authorized local...7.8 High
- intel atom c2308, atom c2316, atom c2338 +306 more +308 moreConfiguration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker...6.0 Medium
phpMageiaUpdated php packages fix security vulnerabilityNo score- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...5.9 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from...7.8 High
- Show moreLoading…