Skip to content
OpenAdvisories

Archive

14 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /14 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2018-5688 Public exploit

    ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in…

  • Unscored —
    CVE-2018-5700

    Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a ne…

  • Unscored —
    CVE-2017-15127

    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluou…

    linux-azure linux Linux Debian Ubuntu
  • Unscored —
    CVE-2017-15128

    A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of…

    linux-azure linux linux-oem Linux Debian Ubuntu
  • Unscored —
    CVE-2017-15126

    A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the hand…

    linux-azure linux Linux Debian Ubuntu
  • Unscored —
    CVE-2018-5697

    Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin…

  • Unscored —
    CVE-2018-5689

    Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inje…

    dotclear Ubuntu
  • Unscored —
    CVE-2018-5694

    The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 …

  • Unscored —
    CVE-2018-5691

    SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` mod…

  • Unscored —
    CVE-2018-5695

    The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-…

  • Unscored —
    CVE-2018-5690

    Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inj…

    dotclear Ubuntu
  • Unscored —
    CVE-2018-5693

    The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /v…

  • Unscored —
    CVE-2018-5698

    libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string.

    r-cran-haven Debian
  • Unscored —
    CVE-2018-5692

    Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.p…

  • Unscored —
    CVE-2018-5696

    The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the `advertiser_status` and `status_select` …

  • Unscored —
    CVE-2018-5684

    In Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c. R…

    libav Ubuntu
  • Unscored —
    CVE-2018-5687

    NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.

  • Unscored —
    CVE-2018-5685

    In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). R…

    graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5686

    In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-…

    mupdf mupdf mupdf Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-5360

    LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the Read…

    tiff tiff Debian Ubuntu