Skip to content
OpenAdvisories

Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

← December 2017 2018 / January February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

163 results · Clear filters · Feed

  • Unscored —
    CVE-2014-7221 Public exploit EPSS 11%

    TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and…

  • Unscored —
    CVE-2017-7997 Public exploit EPSS 19%

    Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2017-7998 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2018-5282 Public exploit

    Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password fi…

  • Unscored —
    CVE-2014-10069 Public exploit

    Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which…

  • Unscored —
    CVE-2017-16666 Public exploit EPSS 81%

    Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the nam…

  • Unscored —
    CVE-2017-16716 Public exploit

    A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its input…

  • Unscored —
    CVE-2017-16720 Public exploit EPSS 50%

    A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within t…

  • Unscored —
    CVE-2017-17867 Public exploit EPSS 11%

    Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying t…

  • Unscored —
    CVE-2014-7862 Public exploit EPSS 81%

    The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote a…

  • Unscored —
    CVE-2017-14960 Public exploit

    xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL …

  • Unscored —
    CVE-2018-0780 Public exploit EPSS 59%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0744 Public exploit EPSS 15%

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0748 Public exploit

    The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 an…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0775 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0769 Public exploit EPSS 79%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0777 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0758 Public exploit EPSS 81%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0776 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0752 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0746 Public exploit

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0774 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0745 Public exploit

    The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an info…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2018-0767 Public exploit EPSS 65%

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0743 Public exploit

    Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allow…

    Microsoft Windows Subsystem for Linux Linux Windows
  • Unscored —
    CVE-2018-0749 Public exploit

    The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R…

    Microsoft SMB Server
  • Unscored —
    CVE-2018-0770 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0751 Public exploit

    The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

    Microsoft Windows Windows
  • Medium 5.6
    CVE-2017-5715 Public exploit EPSS 73%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

    Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.6
    CVE-2017-5753 Public exploit EPSS 94%

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

    Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.6
    CVE-2017-5754 Public exploit EPSS 67%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

    Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • High 7.5
    CVE-2018-0114 Public exploit EPSS 43%

    Cisco node-jose improper validation of JWT signature

    A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (J…

    node-jose npm
  • Critical 9.8
    CVE-2017-8046 Public exploit Scanner template EPSS 75%

    Remote code execution in PATCH requests in Spring Data REST

    Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

    Pivotal Pivotal Spring Data REST and Spring Boot org.springframework.data:spring-data-rest-core Maven
  • Unscored —
    CVE-2017-18019 Public exploit

    In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the…

  • Critical 9.8
    CVE-2017-1000486 Exploited Public exploit Scanner template EPSS 94%

    Inadequate Encryption Strength

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    org.primefaces:primefaces Maven
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2017-1000487 Public exploit

    OS Command Injection in Plexus-utils

    Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

    plexus-utils2 plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils Debian Ubuntu Maven
  • Unscored —
    CVE-2017-1000479 Public exploit EPSS 32%

    pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged …

  • High 8.8
    CVE-2017-1000499 Public exploit

    phpMyAdmin CSRF Vulnerability

    phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

    phpmyadmin/phpmyadmin Packagist
  • Unscored —
    CVE-2017-1000432 Public exploit

    Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access

  • Unscored —
    CVE-2017-17097 Public exploit

    gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords…