CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- ibm sterling b2b integrator, sterling file gateway +1 moreThe ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File...8.1 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote...5.3 Medium
- google androidThe Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device...8.8 High
- ibm power hmc, power hardware management console +1 moreIBM Power Hardware Management Console cross-site scripting4.3
- asus rt-ac1200 firmware, rt-ac1750 firmware, rt-ac2900 firmware +10 more +12 moreASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware...9.8 Critical
- ibm security identity manager, tivoli identity manager +1 moreIBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6...5.9 Medium
- ibm security identity manager, tivoli identity manager +1 moreIBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6...7.8 High
- ibm security identity manager, tivoli identity manager +1 moreIBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6...5.3 Medium
- ibm security identity manager, tivoli identity manager +1 moreIBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6...5.9 Medium
- ibm infosphere biginsightsIBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server...6.5 Medium
- wpitchoune psensor, debian linux +1 moreThe create_response function in server/server.c in Psensor before 1.1.4 allows Directory...7.5 High
- baijiacms project baijiacmsbaijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an...8.8 High
- check point software technologies ltd. eclipse, eclipse ide +1 moreEclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an...7.5 High
- apache fineractWithin the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0...8.1 High
- apache fineractApache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different...8.1 High
- apache fineractIn Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a...9.8 Critical
- apache fineractIn Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the...8.8 High
- icmsdev icmsiCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a...5.4 Medium
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any...6.5 Medium
- awstatsA Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where...5.3 Medium
- vmware horizon daasVMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may...8.8 High
- ec-cube co.,ltd. ec-cubeSession fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3...8.1 High
- ncomputing vspace proAn issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10...7.5 High
- bacnet protocol stack project protocol stackbvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow...9.8 Critical
- debian linux, libsdl sdl image, sam lantinga and mattias engdegård simple directmedia layer +1 more +3 moreA double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2....7.5 High
- cisco webex connect imA vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to...6.1 Medium
- cisco identity services engineA vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow...6.7 Medium
- cisco starosA vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR)...5.3 Medium
- cisco firepower, firepower threat defense +1 moreA vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could...5.9 Medium
- cisco digital network architecture centerA vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center...4.3 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager could allow an...6.5 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager could allow an...4.3 Medium
- cisco mate liveA vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote...5.3 Medium
- cisco mate collectorA vulnerability in the web-based management interface of Cisco MATE Collector could allow an...8.8 High
- cisco ios xeA vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers...4.3 Medium
- cisco asr 5000 series softwareA vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network...5.8 Medium
- cisco industrial ethernet switches, ios +1 moreA vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could...8.8 High
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.3 Medium
- cisco adaptive security appliance softwareA vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets...6.1 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.8 Medium
- cisco adaptive security appliance softwareA vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance...6.1 Medium
- cisco ios xrA vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an...7.4 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreMultiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive...8.6 High
- cisco starosA vulnerability in the egress packet processing functionality of the Cisco StarOS operating...7.5 High
- cisco ucs director, unified computing system director +1 moreA vulnerability in the role-based resource checking functionality of the Cisco Unified Computing...9.9 Critical
- cisco amp for endpoints, advanced malware protection for endpoints +1 moreA vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection ...5.8 Medium
- cisco secure firewall management centerA vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the...8.6 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security...8.6 High
- cisco adaptive security appliance software, secure firewall threat defense +1 moreA vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense...8.6 High
- Show moreLoading…