CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- blender, debian linux +1 moreAn exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender...8.8 High
- corel coreldrawAn out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 ...8.8 High
- invincea x, sophos invincea-x +1 moreAn exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of...7.8 High
- invincea dell protected workspace, sophos invincea dell protected workspace +1 moreMultiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected...7.8 High
- corel photo-paint, coreldraw photo paint x8 +1 moreAn of bound write / memory corruption vulnerability exists in the GIF parsing functionality of...8.8 High
- artifex mupdfAn exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part...8.6 High
- antenna house antennahouse, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the DHFSummary functionality of...8.3 High
- antenna house antennahouse, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of...8.3 High
- antenna house antennahouse, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of...8.3 High
- siemens openpcs 7 v7.1 and earlier, openpcs 7 v8.0, openpcs 7 v8.1 +33 more +35 moreA vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 ...7.5 High
- huawei appgalleryHuawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An...8.8 High
- huawei appgalleryHuawei AppGallery versions before 8.0.4.301 has a whitelist mechanism bypass vulnerability. An...4.3 Medium
- philips dosewise, dosewise portal +1 moreThe backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069...9.1 Critical
- philips dosewise, dosewise portal +1 moreThe Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login...8.8 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +42 more +44 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...5.3 Medium
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +43 more +45 moreHuawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10,...5.3 Medium
- ibm rational doors next generation, rational engineering lifecycle manager, rational quality manager +4 more +6 moreIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle...4.3 Medium
- ibm rational doors next generation, rational engineering lifecycle manager, rational quality manager +4 more +6 moreIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle...4.3 Medium
- ibm rational doors next generation, rational engineering lifecycle manager, rational quality manager +4 more +6 moreIBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle...6.5 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote...6.1 Medium
- lrzsz project lrzsz, debian linux, suse linux enterprise debuginfo +2 more +4 morelrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect...7.1 High
- ffmpegThe svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers...6.5 Medium
- phpipamapp/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the...6.1 Medium
- momentum axel 720p firmwareMomentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account,...7.4 High
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...5.5 Medium
- frogcms project frogcmsFrog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.4.8 Medium
- frogcms project frogcmsFrog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout.4.8 Medium
- frogcms project frogcmsFrog CMS 0.9.5 has XSS via the admin/?/snippet/edit snippet[name] parameter, aka Edit Snippet.4.8 Medium
- frogcms project frogcmsFrog CMS 0.9.5 has XSS via the admin/?/page/edit page[keywords] parameter, aka Edit Page Metadata.4.8 Medium
- nasm netwide assemblerNetwide Assembler (NASM) 2.14rc0 has an endless while loop in the assemble_file function of asm...5.5 Medium
- wuzhicmsWUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m...5.4 Medium
- wuzhicmsindex.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common...8.8 High
- wuzhicmsA vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote...6.1 Medium
- responsive cookie consent project cookie consentThe Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading...5.4 Medium
- simplemachines simple machines forumThe MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15...9.8 Critical
linux-toolsDebianlinux-tools - security updateNo score- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4...5.5 Medium
- foxitsoftware foxit reader, phantompdf +1 moreA use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to...8.8 High
- saltstack saltSaltStack Salt allows compromised salt-minions to impersonate the salt-master9.8 Critical
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability8.1 High
- openstack puppet-tripleo, redhat openstack +1 morepuppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the...7.1 High
- foxitsoftware foxit reader, phantompdf +1 moreA use-after-free in Foxit Reader before 9.1 and PhantomPDF before 9.1 allows remote attackers to...7.8 High
- cmsmadesimple cms made simpleIn CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the...5.3 Medium
- Show moreLoading…