CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +20 more +22 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8996 firmware +3 more +5 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and...9.8 Critical
- qualcomm, inc. snapdragon mobile, qualcomm sd 845 firmware, sd 850 firmware +2 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850,...7.5 High
- qualcomm msm8909w firmware, sd 205 firmware, sd 210 firmware +10 more +12 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +7 more +9 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...7.5 High
- qualcomm mdm9607 firmware, mdm9625 firmware, mdm9635m firmware +21 more +23 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +7 more +9 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +36 more +38 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, msm8909w firmware +10 more +12 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, sd 205 firmware +9 more +11 moreIn Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon...9.8 Critical
- broadcom advanced secure gateway, symantec corporation advanced secure gateway (asg), proxysg +1 more +3 moreStored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management...4.8 Medium
- broadcom advanced secure gateway, symantec corporation advanced secure gateway (asg), proxysg +1 more +3 moreDenial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG...7.5 High
- broadcom advanced secure gateway, symantec corporation advanced secure gateway (asg), proxysg +1 more +3 moreUnrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG...6.8 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for Standard9.8 Critical
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerability9.8 Critical
- frog cms project cmsFrog CMS 0.9.5 has XSS via the name field of a new "File" or "Directory" on the admin/?/plugin...4.8 Medium
- frog cms project cmsFrog CMS 0.9.5 has XSS via the /admin/?/user/add Name or Username parameter.4.8 Medium
- opentext documentum d2In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Reflected Cross-Site Scripting...5.4 Medium
- opentext documentum d2In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stored Cross-Site Scripting Vulnerability...5.4 Medium
- openmpt libopenmpt, openmpt +1 moresoundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote...6.5 Medium
- nasm netwide assemblerNetwide Assembler (NASM) 2.14rc0 has a division-by-zero vulnerability in the expr5 function in...5.5 Medium
- ffmpeg, debian linux +1 moreThe decode_init function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote...6.5 Medium
- videodownloaderultimate video downloaderThe Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS (UXSS)...6.1 Medium
- dolibarr erp\/crmDolibarr SQL injection via type parameter in product/stats/card.php8.8 High
- dolibarr erp\/crmDolibarr Cross-Site Scripting (XSS) vulnerability5.4 Medium
- dolibarr erp\/crmDolibarr SQL injection vulnerability8.8 High
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability5.4 Medium
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c...7.8 High
- cognitect datomic, h2database h2 +1 moreImproper Input Validation in Datomic8.8 High
- linux kernel** DISPUTED ** drivers/scsi/libsas/sas_scsi_host.c in the Linux kernel before 4.16 allows local...5.5 Medium
- gnu binutilsAn issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30....5.5 Medium
- tbkvision tbk-dvr4104 firmware, tbk-dvr4216 firmware +1 moreTBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus,...9.8 Critical
- ikiwikiEditing restriction bypass for git revert6.5 Medium
- yunucmsYUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a...4.8 Medium
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 High
- arm mbed tls, debian linux +1 moreARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 High
- metinfoThe front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator.6.1 Medium
- monstraMonstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager...6.5 Medium
- monstraMonstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which...8.8 High
- coship rt3052 firmwareCoship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting -...6.1 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...5.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 does not perform necessary authorization checks for an...3.8 Low
- sap business oneSAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs,...5.4 Medium
- sap cloud platform, sap se cloud platform connector +1 moreImproper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud...6.3 Medium
- sap se business objects, sap businessobjects +1 moreImproper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI...7.3 High
- sap crystal reports server, sap se crystal reports server, oem edition +1 moreUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server,...5.3 Medium
- sap solution managerSAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a...5.4 Medium
- sap disclosure managementSAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format...4.3 Medium
- sap disclosure managementUnder certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information...5.4 Medium
- Show moreLoading…