Skip to content
OpenAdvisories

Archive

12 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /12 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2017-13208 Public exploit

    In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the…

    Google Android Android
  • Unscored —
    CVE-2017-13209 Public exploit

    In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on th…

    Google Android Android
  • Unscored —
    CVE-2017-13216 Public exploit

    In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This coul…

    Google Android linux-raspi2 linux-riscv Android Debian Ubuntu
  • Unscored —
    CVE-2018-5262 Public exploit EPSS 39%

    A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execut…

  • Unscored —
    CVE-2018-5315 Public exploit

    The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.

  • Unscored —
    CVE-2014-6435 Public exploit EPSS 13%

    cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication…

  • Unscored —
    CVE-2014-6437 Public exploit EPSS 16%

    Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configura…

  • Unscored —
    CVE-2014-6436 Public exploit EPSS 42%

    Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers t…

  • Unscored —
    CVE-2017-16886 Public exploit

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interac…

  • Unscored —
    CVE-2017-16887 Public exploit EPSS 37%

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interac…

  • Unscored —
    CVE-2017-16885 Public exploit EPSS 33%

    Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining informat…

  • Unscored —
    CVE-2017-17970 Public exploit

    Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2018-5347 Public exploit EPSS 54%

    Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs…