CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- cisco anyconnect secure mobility client, adaptive security appliance software +1 moreA vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On...6.5 Medium
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance ...8.6 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client...7.5 High
- cisco webex meetings, webex meetings server, webex business suite 31 +1 more +3 moreA vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx...9.0 Critical
- foxit, foxitsoftware foxit reader +1 moreAn exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049...6.5 Medium
- foxit, foxitsoftware foxit reader +1 moreAn exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in...8.8 High
- poscmsPOSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui...7.2 High
- poscmsPOSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member...7.2 High
- microsoft internet explorer 10, internet explorer 11, internet explorer +2 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- zend serverZend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.6.1 Medium
- huawei ar1200 firmware, ar160 firmware, ar200 firmware +3 more +5 moreHuawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200...7.5 High
- huawei berkeley-al20 firmware, berkeley-bd firmware, huawei technologies co., ltd. berkeley-al20, berkeley-bd +2 moreThe Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20...5.5 Medium
- phpmyadminphpMyAdmin CSRF vulnerability allowing arbitrary SQL execution8.8 High
- lenovo help, lenovo group ltd. help mobile android app +1 moreLenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be...7.5 High
- ibm imm2, lenovo integrated management module 2 +1 moreA stack overflow vulnerability was discovered within the web administration service in Integrated...9.8 Critical
- huawei technologies co., ltd. p9 lite, huawei p9 lite firmware +1 moreThe inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341,...5.5 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreElectronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200...7.5 High
- kaspersky password managerUnauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky...7.8 High
- belkin n750 db wi-fi dual-band n+ gigabit router (f9k1103), n750 firmware +1 moreA remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22...7.5 High
- belkin n750 db wi-fi dual-band n+ gigabit router (f9k1103), n750 firmware +1 moreA remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware...9.8 Critical
- belkin n750 db wi-fi dual-band n+ gigabit router (f9k1103), n750 firmware +1 moreA remote unauthenticated user can execute commands as root in the Belkin N750 using firmware...9.8 Critical
- belkin n750 db wi-fi dual-band n+ gigabit router (f9k1103), n750 firmware +1 moreA remote unauthenticated user can execute commands as root in the Belkin N750 using firmware...9.8 Critical
- open-auditOpen-AudIT before 2.2 has CSV Injection.6.8 Medium
- 1234n minicmsMiniCMS v1.10 has XSS via the mc-admin/conf.php site_link parameter.5.4 Medium
- thinkphpthinkphp SQL Injection via the index.php s parameter9.8 Critical
- yzmcmsAn issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add a tag via ...6.8 Medium
- yzmcmsAn issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin...6.8 Medium
- icmsdev icmsAn issue was discovered in idreamsoft iCMS V7.0. There is a CSRF vulnerability that can add a...8.8 High
- wuzhicmsAn issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can...5.4 Medium
- mushmush glastopf** DISPUTED ** Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the...8.8 High
- baijiacms project baijiacmsbaijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request.5.3 Medium
- hyper hyperstarthyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container_setup_modules and...5.3 Medium
- linux kernelThe arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel...5.5 Medium
- oracle access managerVulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent:...9.0 Critical
- oracle corporation peoplesoft enterprise hcm shared components, oracle peoplesoft enterprise human capital management shared components +1 moreVulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft...6.1 Medium
- oracle mysql clusterVulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: ndbcluster...5.0 Medium
- oracle retail integration busVulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications ...7.1 High
- oracle e-business suite, oracle corporation application object library +1 moreVulnerability in the Oracle Application Object Library component of Oracle E-Business Suite ...4.3 Medium
- oracle e-business suite, oracle corporation general ledger +1 moreVulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle e-business suite, oracle corporation general ledger +1 moreVulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle human resourcesVulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent:...9.1 Critical
- oracle human resourcesVulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent:...9.1 Critical
- oracle human resourcesVulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle human resourcesVulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle e-business suite, oracle corporation application object library +1 moreVulnerability in the Oracle Application Object Library component of Oracle E-Business Suite ...5.3 Medium
- oracle e-business suite, oracle corporation general ledger +1 moreVulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle e-business suite, oracle corporation general ledger +1 moreVulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent:...5.3 Medium
- oracle e-business suite, oracle corporation application object library +1 moreVulnerability in the Oracle Application Object Library component of Oracle E-Business Suite ...5.3 Medium
- oracle sun zfs storage appliance kit, oracle corporation sun zfs storage appliance kit (ak) software +1 moreVulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products...5.0 Medium
- oracle retail point-of-serviceVulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications ...7.1 High
- Show moreLoading…