CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- ibm forms experience builderCross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows...5.4 Medium
- ibm rational appscan source, security appscan source +1 moreIBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan...9.8 Critical
- computerinsel photoline, talos computerinsel photoline +1 moreA specially crafted PCX image processed via the application can lead to an out-of-bounds write,...8.8 High
- computer-insel photoline, talos computerinsel photoline +1 moreA specially crafted TIFF image processed via the application can lead to an out-of-bounds write,...8.8 High
- computer-insel photoline, talos computerinsel photoline +1 moreA specially crafted TIFF image processed via the application can lead to an out-of-bounds write,...8.8 High
- computer-insel photoline, talos computerinsel photoline +1 moreA specially crafted TIFF image processed via the application can lead to an out-of-bounds write,...8.8 High
- convert forms project formsThe Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution...7.8 High
- linux kernelThe hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel...5.5 Medium
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter.4.8 Medium
- jungo windriverwindrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of...5.5 Medium
- jungo windriverwindrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of...5.5 Medium
- jdownloadsThe jDownloads extension before 3.2.59 for Joomla! has XSS.6.1 Medium
- redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 morepcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user...8.7 High
- cacti, debian linux +1 moreCacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the...5.4 Medium
- cacti, debian linux +1 moreCacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to...5.4 Medium
- cactiCacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on ...5.4 Medium
- cyberark password vaultThe REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows...9.8 Critical
- cyberark password vaultCyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from...5.3 Medium
- open-auditCross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers...5.4 Medium
- 99robots wp background takeover advertisementsexports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5...7.5 High
- nghttp2, debian linux, nodejs node.js +2 morenghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 High
- kaazing gateway, tenefit kaazing websocket gateway +1 moreThe HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1,...7.5 High
- ibm rational doors next generation, rational requirements composer +1 moreIBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to...5.4 Medium
- nextendweb nextend twitter connectCross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend...6.1 Medium
- redhat rhn-client-toolsrhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1...5.9 Medium
- tenefit kaazing websocket gatewayThe HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4...7.5 High
- botan project botanAn issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when...7.5 High
- microsoft wireless keyboard 850A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could...6.8 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA denial of service vulnerability exists in the way that Windows handles objects in memory, aka ...5.5 Medium
- microsoft visual studio, visual studio 2017 +1 moreAn information disclosure vulnerability exists when Visual Studio improperly discloses limited...4.3 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft sharepoint, sharepoint server, sharepoint enterprise server +2 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft officeA remote code execution vulnerability exists in Microsoft Office software when the software fails...8.8 High
- microsoft excel, excel viewer, office +1 more +3 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft excel, office, sharepoint +7 more +9 moreA remote code execution vulnerability exists when the Office graphics component improperly...8.8 High
- microsoft excel, office, office compatibility pack +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft officeA remote code execution vulnerability exists in Microsoft Office software when the software fails...8.8 High
- microsoft chakracore, edge +1 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft chakracore, edge +1 moreChakraCore RCE Vulnerability7.5 High
- microsoft internet explorer 11, internet explorer +1 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft sharepoint, sharepoint enterprise server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly...5.4 Medium
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft excel, excel rt +1 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreA remote code execution vulnerability exists when the Windows font library improperly handles...8.8 High
- microsoft windows 10, windows 10 servers, windows 8.1 +4 more +6 moreAn elevation of privilege vulnerability exists when Windows improperly handles objects in memory...7.8 High
- microsoft windows 10, windows 10 servers, windows 7 +7 more +9 moreAn elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD...7.0 High
- Show moreLoading…