Skip to content
OpenAdvisories

Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

1,275 results · Feed

  • Unscored —

    The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to in…

  • Unscored —

    In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure fu…

  • Unscored —

    In Libav through 12.2, there is an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attack…

  • Unscored —

    A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Securi…

  • Unscored —

    A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an auth…

  • Unscored —

    A vulnerability in the web management GUI of the Cisco D9800 Network Transport Receiver could allow an authenticated, r…

  • Unscored —

    A vulnerability in the Policy and Charging Rules Function (PCRF) of the Cisco Policy Suite (CPS) could allow an unauthe…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthentica…

  • Unscored —

    A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to r…

  • Unscored —

    A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote…

  • Unscored —

    A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, loca…

  • Unscored —

    A vulnerability in the application server of the Cisco Unified Customer Voice Portal (CVP) could allow an unauthenticat…

  • Unscored —

    A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote att…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data a…

  • Unscored —

    A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a r…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data…

  • Unscored —

    A vulnerability in the Profile Editor of the Cisco AnyConnect Secure Mobility Client could allow an unauthenticated, lo…

  • Unscored —

    A vulnerability in management interface access control list (ACL) configuration of Cisco NX-OS System Software could al…

  • Unscored —

    A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Ci…

    iOS
  • Unscored —

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to collect customer file…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote suppo…

  • Unscored —

    A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authent…

  • Unscored —

    A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to …

  • Unscored —

    A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authen…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power …

  • Unscored —

    A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, …

  • Unscored —

    A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, …

  • Unscored —

    Vulnerability in the Oracle Financial Services Price Creation and Discovery component of Oracle Financial Services Appl…

  • Unscored —

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: U…

  • Unscored —

    Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Ser…

  • Unscored —

    Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supp…

  • Unscored —

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS). Supported ver…

  • Unscored —

    Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Se…

  • Unscored —

    Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: U…

  • Unscored —

    Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payment…

  • Unscored —

    Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications (sub…

  • Unscored —

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versi…

  • Unscored —

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported v…