Skip to content
OpenAdvisories

Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

← December 2017 2018 / January February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

1,275 results · Feed

  • Unscored —
    CVE-2018-5682

    PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not prod…

  • Unscored —
    CVE-2018-5681

    PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen.

  • Unscored —
    CVE-2018-5670

    An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_…

  • Unscored —
    CVE-2018-5653

    An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-a…

  • Unscored —
    CVE-2018-5671

    An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra…

  • Unscored —
    CVE-2018-5668

    An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-genera…

  • Unscored —
    CVE-2018-5662

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5654

    An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-a…

  • Unscored —
    CVE-2018-5665

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5658

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.…

  • Unscored —
    CVE-2018-5652

    An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_en…

  • Unscored —
    CVE-2018-5673

    An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.

  • Unscored —
    CVE-2018-5669

    An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.p…

  • Unscored —
    CVE-2018-5659

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5660

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5672

    An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_…

  • Unscored —
    CVE-2018-5664

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5657

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5667

    An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-genera…

  • Unscored —
    CVE-2018-5656

    An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax…

  • Unscored —
    CVE-2018-5651

    An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_st…

  • Unscored —
    CVE-2018-5661

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5655

    An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-a…

  • Unscored —
    CVE-2018-5663

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2018-5666

    An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/adm…

  • Unscored —
    CVE-2017-0846

    An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1,…

    Google Android Android
  • Unscored —
    CVE-2017-0855

    In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which…

    Google Android Android
  • Unscored —
    CVE-2017-13176

    In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to …

    Google Android Android
  • Unscored —
    CVE-2017-13189

    A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures. Product…

    Google Android Android
  • Unscored —
    CVE-2017-13213

    An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Andr…

    Google Android Android
  • Unscored —
    CVE-2017-13182

    In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds w…

    Google Android Android
  • Unscored —
    CVE-2017-13179

    In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due…

    Google Android Android
  • Unscored —
    CVE-2017-13190

    A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures. P…

    Google Android Android
  • Unscored —
    CVE-2017-13194

    A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…

    Google Android libvpx libvpx Android Debian Ubuntu
  • Unscored —
    CVE-2017-13200

    An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization. Product: …

    Google Android Android
  • Unscored —
    CVE-2017-13201

    An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6…

    Google Android Android
  • Unscored —
    CVE-2017-13221

    An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel.…

    Google Android Android
  • Unscored —
    CVE-2017-13222

    An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Andr…

    Google Android Android
  • Unscored —
    CVE-2017-13191

    In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error. This coul…

    Google Android Android
  • Unscored —
    CVE-2017-13184

    In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector. This cou…

    Google Android Android