CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- netiq identity manager, idm - identity applications +1 moreIDM 4.6 Identity Applications information leakage4.8 Medium
- netiq identity reportingNetIQ Identity Reporting XSS exposure2.8 Low
- compo composr cmsComposr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3...4.8 Medium
- ibm security qradar siem, qradar security information and event manager +1 moreIBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead...8.8 High
- ibm security qradar siem, qradar incident forensics, qradar network insights +3 more +5 moreIBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm security qradar siem, qradar incident forensics, qradar network insights +1 more +3 moreIBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the...6.5 Medium
- ibm security qradar siem, qradar security information and event manager +1 moreIBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send...6.3 Medium
- ibm security qradar siem, qradar security information and event manager +1 moreIBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely...5.6 Medium
- genixcmsGeniXCMS Cross-site scripting (XSS) vulnerability4.8 Medium
- hz-soft security guardAn issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe,...7.8 High
- cdc microbetraceCenters for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute...7.8 High
- cdc microbetraceCenters for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute...7.8 High
- 1234n minicmsmc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.2.7 Low
- 1234n minicmsmc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the...2.7 Low
- hongcms project hongcmsAn issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content...4.8 Medium
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 morebark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.7.5 High
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 moremapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of...8.8 High
- wuzhicmsAn issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php...4.8 Medium
- mcafee tunnelbearTunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through...9.8 Critical
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreProcessing specially crafted .pm3 files in Advantech WebAccess HMI Designer 2.1.7.32 and prior...7.8 High
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreDouble free vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior caused by...7.8 High
- advantech webaccess hmi designer, ics-cert advantech webaccess hmi designer +1 moreHeap-based buffer overflow vulnerabilities in Advantech WebAccess HMI Designer 2.1.7.32 and prior...7.8 High
- netapp oncommand unified manager for linux, oncommand unified manager +1 moreNetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire...7.8 High
- atlassian sourcetree, sourcetree windows +1 moreThere was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository...8.8 High
- apache tikaorg.apache.tika:tika-parsers has an Infinite Loop vulnerability5.5 Medium
- apache tikaModerate severity vulnerability that affects org.apache.tika:tika-core5.5 Medium
- apache tikaCommand injection in org.apache.tika:tika-core8.1 High
- flac, debian linux, fedoraproject fedora +2 moreAn error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC...5.5 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...6.1 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...6.1 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...6.5 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...6.1 Medium
- wso2 identity serverWSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged...5.4 Medium
- ibm integrated management module firmwareIntegrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x...6.5 Medium
- ibm integrated management module firmwareThe TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1...7.4 High
- ibm security key lifecycle managerThe installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials...4.1 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is XSS in invitation...5.4 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper...5.4 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper...5.3 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. Enumeration of users is...5.3 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS on the...5.4 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is anonymous...6.1 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. An attacker can exploit...5.3 Medium
- vaultize enterprise file sharingAn issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is Stored XSS via the...5.4 Medium
drupal/jsonapiPackagistThis module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The module doesn't provide CSRF protection when processing authenticat…No scoredrupal/drd_agentPackagistThis module enables you to monitor and manage any number of remote Drupal sites and aggregate useful information for administrators in a central dashboard. The modules (DRD and DRD Agent) encrypt the…No score- tinywebgallery wordpress flash uploaderThe WordPress Flash Uploader plugin before 3.1.3 for WordPress allows remote attackers to execute...9.8 Critical
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross...5.4 Medium
- ibm jazz reporting serviceIBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross...5.4 Medium
- abbott laboratories accent and anthem, abbott accent firmware, accent mri firmware +2 more +4 moreAbbott Laboratories Accent and Anthem pacemakers manufactured prior to Aug 28, 2017 transmit...6.5 Medium
- Show moreLoading…