Skip to content
OpenAdvisories

Archive

24 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /24 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • High 8.8
    CVE-2018-1000006 Public exploit EPSS 89%

    Remote Code Execution in electron

    GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitra…

    electron npm
  • Medium 5.5
    CVE-2018-1047 Public exploit

    Improper Input Validation in org.wildfly:wildfly-undertow

    A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

    Red Hat wildfly undertow org.wildfly:wildfly-undertow Ubuntu Maven
  • Unscored —
    CVE-2017-1000474 Public exploit

    Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/ve…

  • Unscored —
    CVE-2018-6190 Public exploit

    Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.

  • Unscored —
    CVE-2018-6193 Public exploit

    A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=grap…

  • Unscored —
    CVE-2018-6191 Public exploit

    The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent …

  • Unscored —
    CVE-2018-5759 Public exploit

    jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows r…

  • Unscored —
    CVE-2018-5705 Public exploit

    Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to …

  • Unscored —
    CVE-2018-5319 Public exploit EPSS 12%

    RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.

  • Unscored —
    CVE-2017-13696 Public exploit EPSS 79%

    A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise …

  • Unscored —
    CVE-2017-1000475 Public exploit

    FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated…

  • Unscored —
    CVE-2018-5979 Public exploit EPSS 19%

    SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

  • Unscored —
    CVE-2018-5985 Public exploit EPSS 19%

    SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

  • Unscored —
    CVE-2018-5978 Public exploit

    SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.

  • Unscored —
    CVE-2018-5988 Public exploit EPSS 19%

    SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

  • Unscored —
    CVE-2018-5986 Public exploit

    SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.

  • Unscored —
    CVE-2018-5972 Public exploit EPSS 19%

    SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listi…

  • Unscored —
    CVE-2018-5969 Public exploit

    Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demon…

  • Unscored —
    CVE-2018-5976 Public exploit

    Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by mod…

  • Unscored —
    CVE-2018-5984 Public exploit

    SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the catego…

  • Unscored —
    CVE-2018-5977 Public exploit

    SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= …