Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2019
January

CVEs published in January 2019

1,173 vulnerabilities, 147 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

nec aterm wf1200cr firmware, aterm wg1200cr firmware, nec corporation aterm wf1200cr and aterm wg1200cr +2 moreAterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR...CVE-2018-161958.8 HighJanuary 9, 2019
nec aterm wf1200cr firmware, aterm wg1200cr firmware, nec corporation aterm wf1200cr and aterm wg1200cr +2 moreAterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR...CVE-2018-161947.2 HighJanuary 9, 2019
nec aterm wf1200cr firmware, aterm wg1200cr firmware, nec corporation aterm wf1200cr and aterm wg1200cr +2 moreCross-site scripting vulnerability in Aterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware...CVE-2018-161935.4 MediumJanuary 9, 2019
nec aterm wf1200cr firmware, aterm wg1200cr firmware, nec corporation aterm wf1200cr and aterm wg1200cr +2 moreAterm WF1200CR and Aterm WG1200CR (Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR...CVE-2018-161926.5 MediumJanuary 9, 2019
ec-cubeEC-CUBE Open redirect vulnerabilityCVE-2018-16191Fix available6.1 MediumJanuary 9, 2019
ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreSQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to...CVE-2018-161889.8 CriticalJanuary 9, 2019
ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreThe RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the...CVE-2018-161875.9 MediumJanuary 9, 2019
ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreRICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the...CVE-2018-161868.8 HighJanuary 9, 2019
ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreRICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the...CVE-2018-161857.8 HighJanuary 9, 2019
ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreRICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the...CVE-2018-161849.8 CriticalJanuary 9, 2019
panasonic corporation some pre-installed applications on panasonic pc, panasonic system interface device 0021, system interface device 0040 +2 moreAn unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on...CVE-2018-161837.8 HighJanuary 9, 2019
rakuten securities, inc. the installer of market speed, rakuten-sec market speed +1 moreUntrusted search path vulnerability in the installer of MARKET SPEED Ver.16.4 and earlier allows...CVE-2018-161827.8 HighJanuary 9, 2019
daj i-filterHTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote...CVE-2018-161816.1 MediumJanuary 9, 2019
daj i-filterCross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to...CVE-2018-161806.1 MediumJanuary 9, 2019
mizuho bank, ltd. direct app for android, mizuhobank mizuho direct application +1 moreThe Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates,...CVE-2018-161795.9 MediumJanuary 9, 2019
cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view...CVE-2018-161787.5 HighJanuary 9, 2019
ntt-west fall creators update, nippon telegraph and telephone west corporation the installer of windows10 fall creators update modify module for security measures tool +1 moreUntrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify...CVE-2018-161777.8 HighJanuary 9, 2019
jaea mapping tool, japan atomic energy agency installer of mapping tool +1 moreUntrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows...CVE-2018-161767.8 HighJanuary 9, 2019
thimpress learnpressSQL injection vulnerability in the LearnPress prior to version 3.1.0 allows attacker with...CVE-2018-161757.2 HighJanuary 9, 2019
thimpress learnpressOpen redirect vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to...CVE-2018-161746.1 MediumJanuary 9, 2019
thimpress learnpressCross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote attackers...CVE-2018-161736.1 MediumJanuary 9, 2019
cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreImproper countermeasure against clickjacking attack in client certificates management screen was...CVE-2018-161726.5 MediumJanuary 9, 2019
cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreDirectory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers...CVE-2018-161718.8 HighJanuary 9, 2019
cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreDirectory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows...CVE-2018-161708.1 HighJanuary 9, 2019
cybozu, inc. cybozu remote service, cybozu remote service manager +1 moreCybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute...CVE-2018-161698.8 HighJanuary 9, 2019
japan computer emergency response team coordination center (jpcert/cc) logontracerLogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks...CVE-2018-161689.8 CriticalJanuary 9, 2019
japan computer emergency response team coordination center (jpcert/cc) logontracerLogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via...CVE-2018-16167Public exploitEPSS 74.9%9.8 CriticalJanuary 9, 2019
japan computer emergency response team coordination center (jpcert/cc) logontracerLogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE)...CVE-2018-161668.8 HighJanuary 9, 2019
japan computer emergency response team coordination center (jpcert/cc) logontracerCross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to...CVE-2018-161656.1 MediumJanuary 9, 2019
web-dorado event calendar wd version, event calendar wd +1 moreCross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote...CVE-2018-161645.4 MediumJanuary 9, 2019
cybozu dezie, cybozu, inc. cybozu dezie +1 moreDirectory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read...CVE-2018-07059.1 CriticalJanuary 9, 2019
cybozu office, cybozu, inc. cybozu office +1 moreDirectory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to...CVE-2018-07047.5 HighJanuary 9, 2019
cybozu office, cybozu, inc. cybozu office +1 moreDirectory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to...CVE-2018-07037.5 HighJanuary 9, 2019
cybozu mailwise, cybozu, inc. cybozu mailwise +1 moreDirectory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to...CVE-2018-07027.5 HighJanuary 9, 2019
growi, inc. growiCross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject...CVE-2018-06985.4 MediumJanuary 9, 2019
epson ds-570w firmware, ds-780n firmware, ep-10va firmware +56 more +58 moreHTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware...CVE-2018-06898.8 HighJanuary 9, 2019
epson ds-570w firmware, ds-780n firmware, ep-10va firmware +56 more +58 moreOpen redirect vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions...CVE-2018-06886.1 MediumJanuary 9, 2019
panasonic bn-sdwbp3 firmware, panasonic corporation bn-sdwbp3 +1 moreBuffer overflow in BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same...CVE-2018-06786.8 MediumJanuary 9, 2019
panasonic bn-sdwbp3 firmware, panasonic corporation bn-sdwbp3 +1 moreBN-SDWBP3 firmware version 1.0.9 and earlier allows attacker with administrator rights on the...CVE-2018-06776.8 MediumJanuary 9, 2019
panasonic bn-sdwbp3 firmware, panasonic corporation bn-sdwbp3 +1 moreBN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to...CVE-2018-06768.8 HighJanuary 9, 2019
micronet corporation inplc-rtPrivilege escalation vulnerability in INplc-RT 3.08 and earlier allows an attacker with...CVE-2018-06716.7 MediumJanuary 9, 2019
micronet corporation inplc-rtINplc-RT 3.08 and earlier allows remote attackers to bypass authentication to execute an...CVE-2018-06709.8 CriticalJanuary 9, 2019
micronet corporation inplc-rtINplc-RT 3.08 and earlier allows remote attackers to bypass authentication to execute an...CVE-2018-06699.8 CriticalJanuary 9, 2019
micronet corporation inplc-rtBuffer overflow in INplc-RT 3.08 and earlier allows remote attackers to cause denial-of-service ...CVE-2018-06689.8 CriticalJanuary 9, 2019
micronet corporation installer of inplc sdk express 3.08 and earlier and installer of inplc sdk pro+ 3.08 and earlier, mnc inplc-rt sdk express, inplc sdk pro\+ +2 moreUntrusted search path vulnerability in Installer of INplc SDK Express 3.08 and earlier and...CVE-2018-06677.8 HighJanuary 9, 2019
nippon telegraph and telephone east corporation biz box router n58i, and n500, nippon telegraph and telephone west corporation biz box router n58i, n500, nvr500, and rtx810, yamaha nvr500 firmware +8 more +10 moreYamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36...CVE-2018-06666.8 MediumJanuary 9, 2019
nippon telegraph and telephone east corporation biz box router n58i, and n500, nippon telegraph and telephone west corporation biz box router n58i, n500, nvr500, and rtx810, yamaha nvr500 firmware +8 more +10 moreYamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36...CVE-2018-06656.8 MediumJanuary 9, 2019
yokogawa astplanner, trifellows, yokogawa electric corporation the license management function of yokogawa products +3 more +5 moreBuffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS...CVE-2018-06519.8 CriticalJanuary 9, 2019
nec corporation hc100rc, nec aterm hc100rc firmware +1 moreBuffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights...CVE-2018-06417.2 HighJanuary 9, 2019
nec corporation hc100rc, nec aterm hc100rc firmware +1 moreBuffer overflow in Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights...CVE-2018-06407.2 HighJanuary 9, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open