CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- gxlcms qyIn Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows...9.8 Critical
- debian linux, roundcube webmail +1 moreIn Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's...8.8 High
- etherpadEtherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server....8.1 High
- etherpadEtherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code.9.8 Critical
- etherpadEtherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an...7.5 High
- coremail xtregister.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a...5.4 Medium
- iptanus wordpress file uploadThe Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings...6.1 Medium
- ffmpegThe export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers...8.8 High
- zzcmsAn issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary...7.5 High
cfitsioMageiaUpdated cfitsio packages fix security vulnerabilitiesNo scorenmapMageiaUpdated nmap packages fix security vulnerabilityNo score- ocamlThe caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0...9.8 Critical
- s3dvt project s3dvtThe pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by...7.8 High
- s3dvt project s3dvtThe (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and...7.8 High
- wpsecurityauditlog wp security audit logCross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for...8.8 High
- fresh-media brute force login protectionCross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3...8.8 High
- oleumtech ad1 firmware, ft1 firmware +1 moreOleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information...5.9 Medium
- ics-cert moxa mxview, moxa mxview +1 moreThe private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and...7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-core7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-core5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpoints9.8 Critical
- atlassian jiraThe searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to...6.1 Medium
- atlassian jiraThe Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers...5.4 Medium
firefoxUbuntufirefox regressionNo score- cisco systems, inc. simple directmedia, debian linux, libsdl sdl image +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...7.5 High
- cisco systems, inc. simple directmedia, debian linux, libsdl sdl image +2 moreAn exploitable information vulnerability exists in the XCF image rendering functionality of...5.3 Medium
- cisco systems, inc. simple direct media, debian linux, libsdl sdl image +1 more +3 moreAn exploitable information disclosure vulnerability exists in the PCX image rendering...5.3 Medium
- gnu patch, canonical ubuntu linux, debian linux +6 more +8 moreGNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files,...7.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreA buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2...7.1 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...8.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreAn exploitable code execution vulnerability exists in the BMP image rendering functionality of...8.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreAn exploitable code execution vulnerability exists in the ICO image rendering functionality of...8.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreAn exploitable code execution vulnerability exists in the ILBM image rendering functionality of...8.8 High
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreAn exploitable code execution vulnerability exists in the ILBM image rendering functionality of...8.8 High
- foreman project foreman, redhat satellite +1 moreAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 Medium
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable access control vulnerability exists in the data, program, and function file...10.0 Critical
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable insufficient resource pool vulnerability exists in the session communication...5.3 Medium
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable denial of service vulnerability exists in the processing of snmp-set commands of...7.7 High
- talos allen bradley, rockwellautomation micrologix 1400 b firmware +1 moreAn exploitable denial of service vulnerability exists in the program download functionality of...8.6 High
- Show moreLoading…