CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 High
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F...8.8 High
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char...8.8 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules...5.3 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard...4.9 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard...2.7 Low
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard...6.5 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to...8.8 High
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard...6.5 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard...7.2 High
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file rename" operation in the admin dashboard...6.5 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard...7.2 High
- sitecore sitecore.netAn issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The ...7.5 High
- web-dorado form makerThe WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.7.8 High
- baijiacms project baijiacmsAn issue was discovered in index.php in baijiacms V4 v4_1_4_20170105. CSRF allows adding an...8.8 High
- linuxfoundation opendaylightThe odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive...5.3 Medium
- brookinsconsulting collected information exportBrookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not...9.8 Critical
- enlightenmentEnlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the...7.8 High
- enlightenmentAn unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain...7.8 High
- ibm rational focal pointIBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash...5.3 Medium
- paypalThe WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to...8.1 High
- paypalWebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man...7.4 High
- ibm spss modelerIBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access...5.4 Medium
- ibm endpoint manager for remote control, tivoli remote control +1 moreIBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store...8.8 High
- ibm mobile foundation, worklight +1 moreIBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0...5.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an...8.8 High
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a...9.8 Critical
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain...5.6 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of...6.5 Medium
- adobe campaignIBM Campaign 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 contains excessive details on the client side...4.3 Medium
- b3log symphonyb3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files...9.8 Critical
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google Guava5.9 Medium
- we-con levistudio hmi editor, levistudiou, pi studio hmi project programmer +2 moreA buffer overflow can be triggered in LeviStudio HMI Editor, Version 1.10 part of Wecon...5.3 Medium
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument...8.8 High
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack...8.8 High
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted OpenDocument...8.8 High
- hyland perceptive document filtersIn Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, a crafted DOCX...8.8 High
- fortinet forticlient, forticlient for windows, forticlient sslvpn client +2 more +4 moreUsers' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows...7.5 High
- virtuemartAn XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the...5.4 Medium
- spidercontrol microbrowser, scada microbrowser +1 moreIn SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an...7.8 High
- ovirt, unspecified ovirt-engine, redhat enterprise virtualization +2 moreovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to...7.7 High
- d-link dir-615 firmwareD-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host...7.2 High
- dilicmsAn issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability...4.8 Medium
- cosmocms cosmoCosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on...9.8 Critical
- apache uima-as, uimaducc, uimafit +2 more +4 moreImproper Restriction of XML External Entity Reference in Apache uimaj6.5 Medium
- openstack puppet-swift, redhat openstack +1 morepuppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat...6.5 Medium
- edimax ic-3140w firmware, ic-5150w firmware, ic-6220dc firmware +2 moreAn issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC...8.8 High
- Show moreLoading…