CVEs published January 4, 2018
66 CVEs were published on January 4, 2018: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 66
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Microsoft Edge
- 16
- IBM Security Key Lifecycle Manager
- 6
- Microsoft Windows kernel
- 6
- Intel Most Modern Operating Systems
- 2
- Microsoft Edge, Internet Explorer
- 2
- Microsoft Windows
- 2
- Microsoft Windows Adobe Type Manager Font Driver
- 2
- Apache Software Foundation Apache DeltaSpike · org.apache.d…
- 1
- Apache Software Foundation Apache OFBiz
- 1
- Cisco WebEx Advanced Recording Format Player
- 1
High 1
Medium, low and unrated 65
- CVE-2017-17867Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger…
- CVE-2018-5215Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.forkcms/forkcms
- CVE-2018-5216Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.radiant
- CVE-2018-5217In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have…
- CVE-2018-5218In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have…
- CVE-2018-5219In K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have…
- CVE-2018-5220In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have…
- CVE-2018-5212The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an…
- CVE-2018-5213The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit…
- CVE-2018-5214The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.
- CVE-2014-7862The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create…
- CVE-2017-14960xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.
- CVE-2017-1664IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to…IBM Security Key Lifecycle Manager
- CVE-2017-1665IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to…IBM Security Key Lifecycle Manager
- CVE-2017-1669IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters.IBM Security Key Lifecycle Manager
- CVE-2017-1672IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute…IBM Security Key Lifecycle Manager
- CVE-2017-1673IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting.IBM Security Key Lifecycle Manager
- CVE-2017-1699IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates.IBM MQ
- CVE-2017-1727IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further…IBM Security Key Lifecycle Manager
- CVE-2017-15714The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed.Apache Software Foundation Apache OFBiz
- CVE-2017-17837The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling.Apache Software Foundation Apache DeltaSpike · org.apache.d…
- CVE-2018-0741The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure…Microsoft Color Management Module
- CVE-2018-0743Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of…Microsoft Windows Subsystem for Linux
- CVE-2018-0744The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016…Microsoft Windows kernel
- CVE-2018-0745The Windows kernel in Windows 10 version 1703.Microsoft Windows kernel
Show all 65 entriesShow fewer entries
- CVE-2018-0746The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016…Microsoft Windows kernel
- CVE-2018-0747The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10…Microsoft Windows kernel
- CVE-2018-0748The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10…Microsoft Windows kernel
- CVE-2018-0749The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows…Microsoft SMB Server
- CVE-2018-0750The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to…Microsoft Windows GDI
- CVE-2018-0751The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server…Microsoft Windows
- CVE-2018-0752The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server…Microsoft Windows kernel
- CVE-2018-0753Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server…Microsoft Windows
- CVE-2018-0754The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1…Microsoft Windows Adobe Type Manager Font Driver
- CVE-2018-0758Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0762Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…Microsoft Edge, Internet Explorer
- CVE-2018-0766Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to…Microsoft Edge
- CVE-2018-0767Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further…Microsoft Edge
- CVE-2018-0768Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the…Microsoft Edge
- CVE-2018-0769Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0770Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0772Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…Microsoft Edge, Internet Explorer
- CVE-2018-0773Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the…Microsoft Edge
- CVE-2018-0774Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the…Microsoft Edge
- CVE-2018-0775Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the…Microsoft Edge
- CVE-2018-0776Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0777Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0778Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the…Microsoft Edge
- CVE-2018-0780Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to…Microsoft Edge
- CVE-2018-0781Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2018-0788The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and…Microsoft Windows Adobe Type Manager Font Driver
- CVE-2018-0800Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how…Microsoft Edge
- CVE-2018-0803Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from…Microsoft Edge
- CVE-2017-5715Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of…Intel Microprocessors with Speculative Execution
- CVE-2017-5753Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an…Intel Most Modern Operating Systems
- CVE-2017-5754Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of…Intel Most Modern Operating Systems
- CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File…Dell EMC VNX2 versions prior to Operating Environment for F…
- CVE-2017-18020On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the…
- CVE-2017-8046Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay…Pivotal Spring Data REST and Spring Boot · org.springframew…
- CVE-2018-0103A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local…Cisco WebEx Network Recording Player
- CVE-2018-0104A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute…Cisco WebEx Advanced Recording Format Player
- CVE-2018-0114A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens…Node-jose Library · node-jose
- CVE-2018-1190An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA…Pivotal Cloud Foundry products: all versions prior to cf-re…
- CVE-2018-5210On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary…
- CVE-2017-18019In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled…