Skip to content
OpenAdvisories

Archive

30 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /30 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2018-6407 Public exploit EPSS 32%

    An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a devi…

  • Unscored —
    CVE-2018-6408

    An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstra…

  • Unscored —
    CVE-2018-6405

    In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variabl…

    imagemagick imagemagick imagemagick6 Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-6406

    The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the chil…

    oxide-qt Ubuntu
  • Unscored —
    CVE-2011-2902

    zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes …

    xpdf Debian
  • Unscored —
    CVE-2018-6194

    A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plu…

  • Unscored —
    CVE-2018-6195

    admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPr…

  • Unscored —
    CVE-2018-5441

    An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to…

  • Unscored —
    CVE-2016-6598 Public exploit EPSS 19%

    BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) o…

  • Unscored —
    CVE-2016-6599 Public exploit EPSS 12%

    BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService…

  • Unscored —
    CVE-2017-1000141

    An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability t…

  • Unscored —
    CVE-2017-1731

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Admi…

    IBM WebSphere Application Server
  • Unscored —
    CVE-2018-6376 Public exploit

    In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerabili…

  • Unscored —
    CVE-2018-6380

    In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system.

  • Unscored —
    CVE-2018-6379

    In Joomla! before 3.8.4, inadequate input filtering in the Uri class (formerly JUri) leads to an XSS vulnerability.

  • Unscored —
    CVE-2018-6377 EPSS 57%

    In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types…

  • Unscored —
    CVE-2018-6355

    /goform/setLang on iBall 300M devices with "iB-WRB302N_1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site…

  • Unscored —
    CVE-2014-4705

    Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, …

  • Unscored —
    CVE-2017-17969

    Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows …

    p7zip p7zip p7zip p7zip Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2018-6395 Public exploit

    SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action.

  • Unscored —
    CVE-2018-6398 Public exploit

    SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.

  • Unscored —
    CVE-2018-6397 Public exploit EPSS 12%

    Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

  • Unscored —
    CVE-2018-6382

    MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql param…