Skip to content
OpenAdvisories

Archive

24 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /24 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • High 7.5
    CVE-2018-6184 Scanner template

    Directory traversal vulnerability in Next.js

    ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.

    next npm
  • Unscored —
    CVE-2018-5979 Public exploit EPSS 19%

    SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

  • Unscored —
    CVE-2018-5985 Public exploit EPSS 19%

    SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

  • Unscored —
    CVE-2018-5978 Public exploit

    SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.

  • Unscored —
    CVE-2018-5988 Public exploit EPSS 19%

    SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

  • Unscored —
    CVE-2018-5986 Public exploit

    SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.

  • Unscored —
    CVE-2018-5972 Public exploit EPSS 19%

    SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listi…

  • Unscored —
    CVE-2018-5969 Public exploit

    Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demon…

  • Unscored —
    CVE-2018-5976 Public exploit

    Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by mod…

  • Unscored —
    CVE-2018-5984 Public exploit

    SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the catego…

  • Unscored —
    CVE-2018-5977 Public exploit

    SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= …

  • Unscored —
    CVE-2017-18075

    crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access t…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu