# CVEs published 2018-01-24

52 CVEs were published on January 24, 2018: 1 critical, 0 high. Days are UTC.

- [CVE-2017-1000502](https://cve.now/CVE-2017-1000502.md): Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell… (no CVSS, org.jenkins-ci.plugins:ec2)
- [CVE-2017-1000503](https://cve.now/CVE-2017-1000503.md): A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands… (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2017-1000504](https://cve.now/CVE-2017-1000504.md): A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands… (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2018-1000006](https://cve.now/CVE-2018-1000006.md): GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler… (no CVSS, electron)
- [CVE-2018-1047](https://cve.now/CVE-2018-1047.md): A flaw was found in Wildfly 9.x. (no CVSS, Red Hat Wildfly · org.wildfly:wildfly-undertow)
- [CVE-2018-1048](https://cve.now/CVE-2018-1048.md): It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW\_ENCODED\_SLASH option and thus… (no CVSS, Red Hat undertow as shipped in Jboss EAP 7.1.0.GA · org.jbo…)
- [CVE-2017-1000474](https://cve.now/CVE-2017-1000474.md): Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php… (no CVSS)
- [CVE-2018-1000005](https://cve.now/CVE-2018-1000005.md): libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. (no CVSS)
- [CVE-2018-1000007](https://cve.now/CVE-2018-1000007.md): libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. (no CVSS)
- [CVE-2018-5759](https://cve.now/CVE-2018-5759.md): jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to… (no CVSS)
- [CVE-2018-6190](https://cve.now/CVE-2018-6190.md): Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page. (no CVSS)
- [CVE-2018-6191](https://cve.now/CVE-2018-6191.md): The js\_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. (no CVSS)
- [CVE-2018-6192](https://cve.now/CVE-2018-6192.md): In Artifex MuPDF 1.12.0, the pdf\_read\_new\_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2018-6193](https://cve.now/CVE-2018-6193.md): A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to… (no CVSS)
- [CVE-2018-5705](https://cve.now/CVE-2018-5705.md): Reservo Image Hosting 1.6 is vulnerable to XSS attacks. (no CVSS)
- [CVE-2018-4834](https://cve.now/CVE-2018-4834.md): A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions \< V4.10.111), Desigo PXC00-E.D V5.00 (All versions \<… (CVSS 9.8, Siemens Desigo PXC00-E.D · Siemens Desigo PXC00/64/128-U +9)
- [CVE-2017-12176](https://cve.now/CVE-2017-12176.md): xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12177](https://cve.now/CVE-2017-12177.md): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12178](https://cve.now/CVE-2017-12178.md): xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12179](https://cve.now/CVE-2017-12179.md): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12180](https://cve.now/CVE-2017-12180.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12181](https://cve.now/CVE-2017-12181.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12182](https://cve.now/CVE-2017-12182.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12183](https://cve.now/CVE-2017-12183.md): xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12184](https://cve.now/CVE-2017-12184.md): xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12185](https://cve.now/CVE-2017-12185.md): xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to… (no CVSS)
- [CVE-2017-12186](https://cve.now/CVE-2017-12186.md): xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12187](https://cve.now/CVE-2017-12187.md): xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or… (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-13696](https://cve.now/CVE-2017-13696.md): A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze… (no CVSS)
- [CVE-2017-15135](https://cve.now/CVE-2017-15135.md): It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations… (no CVSS, Red Hat 389-ds-base)
- [CVE-2018-5319](https://cve.now/CVE-2018-5319.md): RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request. (no CVSS)
- [CVE-2018-5777](https://cve.now/CVE-2018-5777.md): An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). (no CVSS)
- [CVE-2018-5778](https://cve.now/CVE-2018-5778.md): An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). (no CVSS)
- [CVE-2018-6017](https://cve.now/CVE-2018-6017.md): Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by… (no CVSS)
- [CVE-2018-6018](https://cve.now/CVE-2018-6018.md): Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by… (no CVSS)
- [CVE-2017-1000475](https://cve.now/CVE-2017-1000475.md): FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges. (no CVSS)
- [CVE-2017-15718](https://cve.now/CVE-2017-15718.md): The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN… (no CVSS, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2017-1769](https://cve.now/CVE-2017-1769.md): IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… (no CVSS, IBM Business Process Manager)
- [CVE-2018-1000018](https://cve.now/CVE-2018-1000018.md): An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file. (no CVSS)
- [CVE-2017-18075](https://cve.now/CVE-2017-18075.md): crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF\_ALG-based… (no CVSS)
- [CVE-2018-5969](https://cve.now/CVE-2018-5969.md): Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax\_new\_admin.php, as demonstrated by adding… (no CVSS)
- [CVE-2018-5972](https://cve.now/CVE-2018-5972.md): SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI. (no CVSS)
- [CVE-2018-5976](https://cve.now/CVE-2018-5976.md): Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin… (no CVSS)
- [CVE-2018-5977](https://cve.now/CVE-2018-5977.md): SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price\_type=range&price= request. (no CVSS)
- [CVE-2018-5978](https://cve.now/CVE-2018-5978.md): SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field. (no CVSS)
- [CVE-2018-5979](https://cve.now/CVE-2018-5979.md): SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field. (no CVSS)
- [CVE-2018-5984](https://cve.now/CVE-2018-5984.md): SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH\_INFO to the category/ URI. (no CVSS)
- [CVE-2018-5985](https://cve.now/CVE-2018-5985.md): SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company\_id= request. (no CVSS)
- [CVE-2018-5986](https://cve.now/CVE-2018-5986.md): SQL Injection exists in Easy Car Script 2014 via the s\_order or s\_row parameter to site\_search.php. (no CVSS)
- [CVE-2018-5988](https://cve.now/CVE-2018-5988.md): SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile\_preview.php or index.php. (no CVSS)
- [CVE-2018-6184](https://cve.now/CVE-2018-6184.md): ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /\_next request namespace. (no CVSS, next)
- [CVE-2018-6187](https://cve.now/CVE-2018-6187.md): In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do\_pdf\_save\_document function in the pdf/pdf-write.c… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.