CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- dlink singapore starhub firmwareauthentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03...9.8 Critical
- zldnn dnnarticleThe DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web...9.8 Critical
- systematicinc sitawareSystematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g.,...5.3 Medium
- contact-form-7-to-database-extension project contact-form-7-to-database-extensionCSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension...9.6 Critical
- relevanssiCross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for...5.4 Medium
- wpsecurityauditlog wp security audit logAn issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp...5.3 Medium
- yubico pamIn check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25,...8.2 High
- ibm api connectIBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker...9.8 Critical
- ibm spectrum protect, spectrum protect snapshot, spectrum protect for space management +1 more +3 moreThe GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and...5.1 Medium
- ibm datapower gateways, datapower gateway +1 moreIBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML...7.1 High
- google androidAn information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions:...3.3 Low
- google androidAn information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions:...3.3 Low
- google androidAn elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions:...7.0 High
- google androidAn elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android....7.0 High
- ibm mobilefirst platform foundationIBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross...6.1 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a...4.0 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that...4.2 Medium
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn information disclosure vulnerability in Qualcomm closed source components. Product: Android....7.5 High
- google androidAn information disclosure vulnerability in Qualcomm closed source components. Product: Android....7.5 High
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions:...3.3 Low
- google androidA denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions:...7.5 High
- google androidAn information disclosure vulnerability in the Qualcomm IPA driver. Product: Android. Versions:...5.5 Medium
- google androidAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions:...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....7.8 High
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....9.8 Critical
- auth0 auth0.jsCross-Site Request Forgery (CSRF) in Auth08.8 High
- auth0 auth0.jsThe Auth0 authentication service before 2017-10-15 allows privilege escalation because the JWT...9.8 Critical
- microsoft exchange server, intune endpoint protection, forefront endpoint protection +6 more +8 moreA remote code execution vulnerability exists when the Microsoft Malware Protection Engine does...8.8 High
- google androidIn alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after...9.8 Critical
- Show moreLoading…