Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

← December 2017 2018 / January February 2018 →

All Critical High Medium Low Exploited only Public exploit

1,275 results · Feed

Medium 6.1

CVE-2017-17837

Cross-site Scripting in Apache DeltaSpike

The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.…

Apache Software Foundation Apache DeltaSpike org.apache.deltaspike.modules:jsf-module-project Maven

Jan 4, 2018
Unscored —

CVE-2017-15714

The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code i…

Apache Software Foundation Apache OFBiz

Jan 4, 2018
Unscored —

CVE-2018-0780 Public exploit EPSS 59%

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0800

Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's s…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0744 Public exploit EPSS 15%

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0748 Public exploit

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 an…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0750

The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vuln…

Microsoft Windows GDI+ Windows

Jan 4, 2018
Unscored —

CVE-2018-0775 Public exploit EPSS 68%

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0778

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0769 Public exploit EPSS 79%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0781 EPSS 11%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0777 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0803

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to acce…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0758 Public exploit EPSS 81%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0768

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0773

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0788

The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP…

Microsoft Windows Adobe Type Manager Font Driver (Atmfd.dll) Windows

Jan 4, 2018
Unscored —

CVE-2018-0776 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0752 Public exploit

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0746 Public exploit

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, W…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0766

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0772 EPSS 12%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Microsoft Edge, Internet Explorer Browsers

Jan 4, 2018
Unscored —

CVE-2018-0774 Public exploit EPSS 68%

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0753

Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and…

Microsoft Windows Windows

Jan 4, 2018
Unscored —

CVE-2018-0745 Public exploit

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an info…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0741

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information d…

Microsoft Color Management Module (Icm32.dll)

Jan 4, 2018
Unscored —

CVE-2018-0767 Public exploit EPSS 65%

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0743 Public exploit

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allow…

Microsoft Windows Subsystem for Linux Linux Windows

Jan 4, 2018
Unscored —

CVE-2018-0749 Public exploit

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R…

Microsoft SMB Server

Jan 4, 2018
Unscored —

CVE-2018-0747

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 an…

Microsoft Windows kernel Windows

Jan 4, 2018
Unscored —

CVE-2018-0754

The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP…

Microsoft Windows Adobe Type Manager Font Driver (Atmfd.dll) Windows

Jan 4, 2018
Unscored —

CVE-2018-0762 EPSS 12%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Microsoft Edge, Internet Explorer Browsers

Jan 4, 2018
Unscored —

CVE-2018-0770 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0751 Public exploit

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 170…

Microsoft Windows Windows

Jan 4, 2018
Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5753 Public exploit EPSS 94%

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5754 Public exploit EPSS 67%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Unscored —

CVE-2018-0103

A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could…

Jan 4, 2018
High 7.5

CVE-2018-0114 Public exploit EPSS 43%

Cisco node-jose improper validation of JWT signature

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (J…

node-jose npm

Jan 4, 2018
Unscored —

CVE-2018-0104

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote …

Jan 4, 2018