CVEs published January 4, 2018
66 CVEs were published on January 4, 2018: 0 critical, 1 high.
- Published
- 66
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Microsoft Edge
- 16
- IBM Security Key Lifecycle Manager
- 6
- Microsoft Windows kernel
- 6
- Intel Most Modern Operating Systems
- 2
- Microsoft Edge, Internet Explorer
- 2
- Microsoft Windows
- 2
- Microsoft Windows Adobe Type Manager Font Driver
- 2
- Apache Software Foundation Apache DeltaSpike · org.apache.d…
- 1
- Apache Software Foundation Apache OFBiz
- 1
- Cisco WebEx Advanced Recording Format Player
- 1
High 1
Medium, low and unrated 65
- CVE-2017-17867Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field
- CVE-2018-5215Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter.forkcms/forkcms
- CVE-2018-5216Radiant CMS 1.1.4 has XSS via crafted Markdown input in the part_body_content parameter to an admin/pages/*/edit resource.radiant
- CVE-2018-5217In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
- CVE-2018-5218In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
- CVE-2018-5219In K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
- CVE-2018-5220In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
- CVE-2018-5212The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit
- CVE-2018-5213The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action
- CVE-2018-5214The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.
- CVE-2014-7862The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create ad
- CVE-2017-14960xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.
- CVE-2017-1664IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypIBM Security Key Lifecycle Manager
- CVE-2017-1665IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypIBM Security Key Lifecycle Manager
- CVE-2017-1669IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters.IBM Security Key Lifecycle Manager
- CVE-2017-1672IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious IBM Security Key Lifecycle Manager
- CVE-2017-1673IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting.IBM Security Key Lifecycle Manager
- CVE-2017-1699IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates.IBM MQ
- CVE-2017-1727IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 discloses sensitive information in error messages that could aid an attacker in further aIBM Security Key Lifecycle Manager
- CVE-2017-15714The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed.Apache Software Foundation Apache OFBiz
- CVE-2017-17837The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling.Apache Software Foundation Apache DeltaSpike · org.apache.d…
- CVE-2018-0741The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerabiliMicrosoft Color Management Module
- CVE-2018-0743Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of priMicrosoft Windows Subsystem for Linux
- CVE-2018-0744The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 anMicrosoft Windows kernel
- CVE-2018-0745The Windows kernel in Windows 10 version 1703.Microsoft Windows kernel
- CVE-2018-0746The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 anMicrosoft Windows kernel
- CVE-2018-0747The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 GoldMicrosoft Windows kernel
- CVE-2018-0748The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 GoldMicrosoft Windows kernel
- CVE-2018-0749The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows ServerMicrosoft SMB Server
- CVE-2018-0750The Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the Microsoft Windows GDI
- CVE-2018-0751The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 201Microsoft Windows
- CVE-2018-0752The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 201Microsoft Windows kernel
- CVE-2018-0753Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, versMicrosoft Windows
- CVE-2018-0754The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, WindowsMicrosoft Windows Adobe Type Manager Font Driver
- CVE-2018-0758Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0762Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, anMicrosoft Edge, Internet Explorer
- CVE-2018-0766Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to furMicrosoft Edge
- CVE-2018-0767Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further cMicrosoft Edge
- CVE-2018-0768Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting Microsoft Edge
- CVE-2018-0769Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0770Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0772Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, anMicrosoft Edge, Internet Explorer
- CVE-2018-0773Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting Microsoft Edge
- CVE-2018-0774Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting Microsoft Edge
- CVE-2018-0775Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting Microsoft Edge
- CVE-2018-0776Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0777Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0778Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting Microsoft Edge
- CVE-2018-0780Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to furMicrosoft Edge
- CVE-2018-0781Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conteMicrosoft Edge
- CVE-2018-0788The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and WinMicrosoft Windows Adobe Type Manager Font Driver
- CVE-2018-0800Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further compromise the user's system, due to how theMicrosoft Edge
- CVE-2018-0803Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to access information from oMicrosoft Edge
- CVE-2017-5715Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informationIntel Microprocessors with Speculative Execution
- CVE-2017-5753Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an atIntel Most Modern Operating Systems
- CVE-2017-5754Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informationIntel Most Modern Operating Systems
- CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80Dell EMC VNX2 versions prior to Operating Environment for F…
- CVE-2017-18020On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootload
- CVE-2017-8046Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1Pivotal Spring Data REST and Spring Boot · org.springframew…
- CVE-2018-0103A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local attackCisco WebEx Network Recording Player
- CVE-2018-0104A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute aCisco WebEx Advanced Recording Format Player
- CVE-2018-0114A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens uNode-jose Library · node-jose
- CVE-2018-1190An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bPivotal Cloud Foundry products: all versions prior to cf-re…
- CVE-2018-5210On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE
- CVE-2017-18019In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled inpu