Skip to content
OpenAdvisories

Archive

29 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /29 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Unscored —
    CVE-2018-0101 Public exploit EPSS 87%

    A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Soft…

  • Unscored —
    CVE-2018-6383 Public exploit EPSS 13%

    Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but…

  • Unscored —
    CVE-2018-6388 Public exploit

    iBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices allow remote authenticated users to execute arbitrary OS command…

  • Critical 9.8
    CVE-2017-1000353 Exploited Public exploit EPSS 100%

    Deserialization of Untrusted Data in Jenkins

    Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the…

    org.jenkins-ci.main:jenkins-core Maven
    KEV Oct 2, 2025
  • Unscored —
    CVE-2018-6008 Public exploit Scanner template EPSS 37%

    Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file paramete…

  • Unscored —
    CVE-2018-6363 Public exploit

    SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

  • Unscored —
    CVE-2018-6365 Public exploit

    SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.

  • Unscored —
    CVE-2018-6364 Public exploit

    SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.

  • Unscored —
    CVE-2018-6007 Public exploit

    CSRF exists in the JS Support Ticket 1.1.0 component for Joomla! and allows attackers to inject HTML or edit a ticket.

  • Unscored —
    CVE-2018-6367 Public exploit

    SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id param…

  • Unscored —
    CVE-2018-5720 Public exploit

    An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A …

  • Unscored —
    CVE-2017-18078 Public exploit

    systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the…

    systemd systemd Debian Ubuntu