CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- abbott accent firmware, accent mri firmware, accent st firmware +5 more +7 moreAbbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the...6.5 Medium
- abbott accent firmware, accent mri firmware, accent st firmware +5 more +7 moreThe authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017...8.8 High
- gluster glusterfsglusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option...8.0 High
- gitlabGitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to...6.5 Medium
- smartmeshAn integer overflow in the transferProxy function of a smart contract implementation for...7.5 High
- dedecmsA file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2,...9.8 Critical
- easycmsEasyCMS 1.3 has XSS via the s POST parameter (aka a search box value) in an index.php?s=/index...6.1 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreconcat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...6.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreprocess_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of...5.5 Medium
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature...4.8 Medium
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. The content-management feature has Stored XSS via the...4.8 Medium
- user project userUser Plugin for October CSS Allows XSS6.1 Medium
- catapultthemes cookie consentA persistent cross-site scripting vulnerability has been identified in the web interface of the...5.4 Medium
- phpliteadminAn issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '=='...9.8 Critical
- kde ktexteditorAn issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary...7.8 High
gcc-4.9-backportDebiangcc-4.9-backport - security updateNo score- drupal core, drupal, debian linux +2 moreDrupal core - Highly critical - Remote Code Execution - SA-CORE-2018-0049.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreIn Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of...8.8 High
- sybase adaptive server enterpriseThe Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass...7.5 High
- ahnlab v3 internet securityBuffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local...7.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the Image loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the thumbnail functionality of the Blender open-source...7.5 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the animation playing functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the animation playing functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the bmp loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the DPX loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the DPX loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the IRIS loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the PNG loading functionality of the Blender open...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the TIFF loading functionality of the Blender open...8.8 High
- ezb systems ultraisoA buffer overflow vulnerability exists in the ISO parsing functionality of EZB Systems UltraISO 9...8.8 High
- foscam c1 firmware, indoor ip camera +1 moreAn exploitable command injection vulnerability exists in the web management interface used by the...8.8 High
- foscam c1 firmware, indoor ip camera +1 moreAn exploitable command injection vulnerability exists in the web management interface used by the...8.8 High
- kakadu software sdk, kakadusoftware kakadu sdk +1 moreA code execution vulnerability exists in the kdu_buffered_expand function of the Kakadu SDK 7.9....8.8 High
- kakadu software sdk, kakadusoftware kakadu sdk +1 moreA code execution vulnerability exists in the Kakadu SDK 7.9's parsing of compressed JPEG 2000...8.8 High
- corel photo-paint, coreldraw photo paint x8 +1 moreA remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO...8.8 High
- corel photo-paint, coreldraw photo paint x8 +1 moreA remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO...8.8 High
- dell, dell precision optimizer +1 moreAn exploitable dll hijacking vulnerability exists in the poaService.exe service component of the...7.8 High
- computerinsel photolineAn memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the way that the Blender open-source 3d creation suite...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the way that the Blender open-source 3d creation suite...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the way that the Blender open-source 3d creation suite...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the way that the Blender open-source 3d creation suite...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the...8.8 High
- geekman tinysvcmdnsAn exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18....10.0 Critical
- blender, debian linux +1 moreAn exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of...8.8 High
- blender, debian linux +1 moreAn exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the...8.8 High
- Show moreLoading…