CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- jenkinsCross-site Scripting in Jenkins Core5.4 Medium
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Medium
- eshtery.she7ata eshtery cmsAbsolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary...7.5 High
- mediawikiMediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to...5.3 Medium
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10...5.5 Medium
- plays.tvplays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver...9.1 Critical
- plays.tvplays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver...9.8 Critical
- joyplus-cms project joyplus-cmsjoyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save...4.8 Medium
- mediawiki, debian linux, mediawiki (syntaxhighlight extension) +2 moreParameters injection in SyntaxHighlight results in multiple vulnerabilities9.8 Critical
- mediawiki, debian linux +1 moreHaving LocalisationCache directory default to system tmp directory is insecure8.8 High
- debian diffoscope, linux +1 morediffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive9.8 Critical
- vmware vrealize automationVMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of...9.8 Critical
- vmware vrealize automationVMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM...6.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +14 more +16 moreOn F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands...7.2 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when...7.5 High
- f5 big-ip policy enforcement manager, f5 networks, inc. big-ip (pem) +1 moreOn F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under...5.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules...9.8 Critical
- mikrotik routerosAn issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate...8.1 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in...6.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured...6.4 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +9 more +11 moreOn F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +6 more +8 moreResponses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1...7.5 High
- f5 big-ip (afm, asm), big-ip advanced firewall manager, big-ip application security manager +2 moreX509 certificate verification was not correctly implemented in the IP Intelligence Subscription...5.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the...7.2 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call...9.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary...8.8 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the...7.5 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page...5.3 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data...9.8 Critical
- secutech project ris-11 firmware, ris-22 firmware, ris-33 firmware +2 moreSecutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings...8.6 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified...5.5 Medium
- student profile management system script project profile management system scriptPHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to...5.4 Medium
- ordermanagementscript online tutoring scriptCSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3.8.8 High
- car rental script project rental scriptPHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.5.4 Medium
- hot scripts clone project scripts clonePHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce...8.8 High
- image sharing script project sharing scriptPHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile...5.4 Medium
- website broker script project broker scriptPHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.5.4 Medium
- website seller script project seller scriptPHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e...8.8 High
- website seller script project seller scriptReflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search...6.1 Medium
- arista eosArista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart...7.5 High
- dlink dir-815 firmwareD-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive...7.5 High
- dlink dir-815 firmwareD-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive...9.8 Critical
- dlink dir-815 firmwareCross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2...8.8 High
- dlink dir-815 firmwareThe remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows...9.8 Critical
- unify openstage sip, openscape desk phone ip sip +1 moreCRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens...4.9 Medium
- dlink dir-815 firmwareThe remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02...9.8 Critical
- unify openstage sip, openscape desk phone ip sip +1 moreThe web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape...8.1 High
- unify openstage sip, openscape desk phone ip sip +1 moreUnify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow...7.5 High
- wordpressWordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via...8.1 High
- Show moreLoading…