CVEs published January 5, 2018
27 CVEs were published on January 5, 2018: 0 critical, 0 high.
- Published
- 27
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Advantech WebAccess
- 5
- EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC Ne…
- 3
- VMware vRealize Operations for Horizon · VMware vRealize Op…
- 1
- VMware Workstation · VMware Fusion
- 1
- VMware Workstation · VMware Horizon Client for Windows
- 1
Medium, low and unrated 27
- CVE-2018-5252libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.
- CVE-2018-5253The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling.
- CVE-2018-5249Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via
- CVE-2018-5251In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c
- CVE-2017-18021It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwo
- CVE-2017-18022In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
- CVE-2018-5246In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
- CVE-2018-5247In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
- CVE-2018-5248In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_d
- CVE-2018-5244In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests.
- CVE-2017-15548An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; andEMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC Ne…
- CVE-2017-15549An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; andEMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC Ne…
- CVE-2017-15550An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; andEMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC Ne…
- CVE-2014-8335(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credenti
- CVE-2014-8336The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary
- CVE-2014-8540The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitrary groups by leverag
- CVE-2014-8579TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easi
- CVE-2017-16666Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP
- CVE-2017-4945VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability.VMware Workstation · VMware Fusion
- CVE-2017-4946The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability.VMware vRealize Operations for Horizon · VMware vRealize Op…
- CVE-2017-4948VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds read vulnerability in TVMware Workstation · VMware Horizon Client for Windows
- CVE-2017-16716A SQL Injection issue was discovered in WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2017-16720A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.Advantech WebAccess
- CVE-2017-16724A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2017-16728An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2017-16753An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2017-16905The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, a