CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen...8.6 High
- redbus clone script project clone scriptPHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php.6.1 Medium
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable code execution vulnerability exists in the OpenProducer functionality of Natus...10.0 Critical
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable code execution vulnerability exists in the NewProducerStream functionality of...10.0 Critical
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable code execution vulnerability exists in the SavePatientMontage functionality of...9.0 Critical
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable Denial of Service vulnerability exists in the use of a return value in the...7.5 High
- natus xltek neuroworks, natus medical incorporated natus +1 moreAn exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile...10.0 Critical
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney...6.5 Medium
- google androidAn elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions:...5.3 Medium
- google androidAn information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions:...5.3 Medium
- google androidAn elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android....5.3 Medium
- google androidAn elevation of privilege vulnerability in Qualcomm closed source components. Product: Android....7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions:...7.8 High
- google androidIn blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to...7.0 High
- sophos endpoint protectionSophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%...7.8 High
- sophos endpoint protectionSophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection...5.5 Medium
- juniper junos spaceThe MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with...9.8 Critical
- intel 2g modem firmware, intel corporation xmm71xx, intel xmm72xx, intel xmm73xx, intel xmm74xx, sofia 3g, sofia 3g-r, and sofia 3g-rw +1 moreBuffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R...8.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without...7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreThe web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the...7.3 High
- phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 moreWebvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC...7.3 High
- gitlabGitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a...6.1 Medium
- gitlabGitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a...6.1 Medium
- gleezcms gleez cmsGleez CMS Stored XSS5.4 Medium
- apache hiveIncorrect Permission Assignment for Critical Resource in Apache hive3.7 Low
- apache hiveExposure of Sensitive Information to an Unauthorized Actor in Apache hive3.7 Low
- apache hiveSQL Injection in hive-jdbc9.1 Critical
- zammadZammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related...6.1 Medium
- jenkins vsphereJenkins vSphere Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins vsphereJenkins vSphere Plugin incorrect authorization vulnerability6.3 Medium
- jenkins vsphereJenkins vSphere Plugin disables SSL/TLS certificate validation by default5.6 Medium
- jenkins reverse proxy authJenkins Reverse Proxy Auth Plugin allows attackers with local file system access to obtain a list of authorities for logged in users3.3 Low
- jenkins ansibleJenkins Ansible Plugin man in the middle vulnerability5.6 Medium
- jenkins copy to slaveJenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system6.5 Medium
- perforceJenkins Perforce Plugin exposure of sensitive information vulnerability exists6.5 Medium
- jenkins liquibase runnerLiquibase Runner Plugin allows users to load arbitrary Java code into controller JVM8.8 High
- jenkins perforceJenkins Perforce Plugin uses ineffective credentials encryption6.5 Medium
- jenkins cucumber living documentationJenkins Cucumber Living Documentation Plugin Cross-site Scripting vulnerability6.1 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin6.7 Medium
- jenkins github pull request builderJenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials7.8 High
- zzcmsAn issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl...9.8 Critical
- dsmall project dsmalldsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.6.1 Medium
- exiv2In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a...8.1 High
- exiv2In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in...6.5 Medium
- exiv2In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an...6.5 Medium
- foreman project foreman, redhat satellite +1 moreA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 High
- moodleMoodle Improper Authentication8.1 High
- moodleMoodle Unauthenticated users can trigger custom messages to admin via paypal enrol script5.3 Medium
- koji project kojiKoji hub call does not perform correct access checks9.1 Critical
- asus rt-ac1900 firmware, rt-ac2900 firmware, rt-ac3100 firmware +8 more +10 moreMain_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900...9.8 Critical
- Show moreLoading…