Skip to content
OpenAdvisories

Archive

4 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /4 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

26 results · Clear filters · Feed

  • Unscored —
    CVE-2017-17867 Public exploit EPSS 11%

    Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying t…

  • Unscored —
    CVE-2014-7862 Public exploit EPSS 81%

    The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote a…

  • Unscored —
    CVE-2017-14960 Public exploit

    xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL …

  • Unscored —
    CVE-2018-0780 Public exploit EPSS 59%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0744 Public exploit EPSS 15%

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0748 Public exploit

    The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 an…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0775 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0769 Public exploit EPSS 79%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0777 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0758 Public exploit EPSS 81%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0776 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0752 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0746 Public exploit

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0774 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0745 Public exploit

    The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an info…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0767 Public exploit EPSS 65%

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0743 Public exploit

    Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allow…

    Microsoft Windows Subsystem for Linux Linux Windows
  • Unscored —
    CVE-2018-0749 Public exploit

    The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R…

    Microsoft SMB Server
  • Unscored —
    CVE-2018-0770 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0751 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows Windows
  • Medium 5.6
    CVE-2017-5715 Public exploit EPSS 73%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

    Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.6
    CVE-2017-5753 Public exploit EPSS 94%

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

    Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.6
    CVE-2017-5754 Public exploit EPSS 67%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

    Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • High 7.5
    CVE-2018-0114 Public exploit EPSS 43%

    Cisco node-jose improper validation of JWT signature

    A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (J…

    node-jose npm
  • Critical 9.8
    CVE-2017-8046 Public exploit Scanner template EPSS 75%

    Remote code execution in PATCH requests in Spring Data REST

    Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

    Pivotal Pivotal Spring Data REST and Spring Boot org.springframework.data:spring-data-rest-core Maven
  • Unscored —
    CVE-2017-18019 Public exploit

    In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the…