CVEs published January 12, 2018
118 CVEs were published on January 12, 2018: 0 critical, 0 high.
- Published
- 118
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 118
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Google Android
- 51
- wpglobus/wpglobus
- 7
- Atlassian Jira
- 3
- Advantech WebAccess
- 2
- PHOENIX CONTACT FL SWITCH
- 2
- WECON Technology Co., Ltd. LeviStudio HMI Editor
- 2
- Moxa MXview
- 1
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 1
- Schezo Lhaplus
- 1
Medium, low and unrated 118
- CVE-2017-0846An information disclosure vulnerability in the Android framework (clipboardservice).Google Android
- CVE-2017-0855In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memoryGoogle Android
- CVE-2017-13176In the parseURL function of URLStreamHandler, there is improper input validation of the host field.Google Android
- CVE-2017-13177In several functions of libhevc, NEON registers are not preserved.Google Android
- CVE-2017-13178In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocatiGoogle Android
- CVE-2017-13179In the ihevcd_allocate_static_bufs and ihevcd_create functions of SoftHEVC, there is a possible out-of-bounds write due to a use after free.Google Android
- CVE-2017-13180In the onQueueFilled function of SoftAVCDec, there is a possible out-of-bounds write due to a use after free if a bad header causes the decoGoogle Android
- CVE-2017-13181In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer.Google Android
- CVE-2017-13182In the sendFormatChange function of ACodec, there is a possible integer overflow which could lead to an out-of-bounds write.Google Android
- CVE-2017-13183In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user freGoogle Android
- CVE-2017-13184In the enableVSyncInjections function of SurfaceFlinger, there is a possible use after free of mVSyncInjector.Google Android
- CVE-2017-13185An information disclosure vulnerability in the Android media framework (libhevc).Google Android
- CVE-2017-13186A vulnerability in the Android media framework (libavc) related to incorrect use of mmco parameters.Google Android
- CVE-2017-13187An information disclosure vulnerability in the Android media framework (libhevc).Google Android
- CVE-2017-13188An information disclosure vulnerability in the Android media framework (aac).Google Android
- CVE-2017-13189A vulnerability in the Android media framework (libavc) related to handling dec_hdl memory allocation failures.Google Android
- CVE-2017-13190A vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory allocation failures.Google Android
- CVE-2017-13191In the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete frame error.Google Android
- CVE-2017-13192In the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero after the first slice could result in an inGoogle Android
- CVE-2017-13193In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed iGoogle Android
- CVE-2017-13194A vulnerability in the Android media framework (libvpx) related to odd frame width.Google Android
- CVE-2017-13195In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be negative which could lead to negative indexes Google Android
- CVE-2017-13196In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks.Google Android
- CVE-2017-13197In the ihevcd_parse_slice.c function, slave threads are not joined if there is an error.Google Android
- CVE-2017-13198A vulnerability in the Android media framework (ex) related to composition of frames lacking a color map.Google Android
- CVE-2017-13199In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on.Google Android
- CVE-2017-13200An information disclosure vulnerability in the Android media framework (av) related to id3 unsynchronization.Google Android
- CVE-2017-13201An information disclosure vulnerability in the Android media framework (mediadrm).Google Android
- CVE-2017-13202An information disclosure vulnerability in the Android media framework (libeffects).Google Android
- CVE-2017-13203An information disclosure vulnerability in the Android media framework (libavc).Google Android
- CVE-2017-13204An information disclosure vulnerability in the Android media framework (libavc).Google Android
- CVE-2017-13205An information disclosure vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-13206An information disclosure vulnerability in the Android media framework (aacdec).Google Android
- CVE-2017-13207An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer).Google Android
- CVE-2017-13208In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response.Google Android
- CVE-2017-13209In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller wGoogle Android
- CVE-2017-13210In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small.Google Android
- CVE-2017-13211In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results areGoogle Android
- CVE-2017-13212An elevation of privilege vulnerability in the Android system (systemui).Google Android
- CVE-2017-13213An elevation of privilege vulnerability in the Broadcom bcmdhd driver.Google Android
- CVE-2017-13214In the hardware HEVC decoder, some media files could cause a page fault.Google Android
- CVE-2017-13215A elevation of privilege vulnerability in the Upstream kernel skcipher.Google Android
- CVE-2017-13216In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma.Google Android
- CVE-2017-13217In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated.Google Android
- CVE-2017-13218Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-13219A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller.Google Android
- CVE-2017-13220An elevation of privilege vulnerability in the Upstream kernel bluez.Google Android
- CVE-2017-13221An elevation of privilege vulnerability in the Upstream kernel wifi driver.Google Android
- CVE-2017-13222An information disclosure vulnerability in the Upstream kernel kernel.Google Android
- CVE-2017-13225In libMtkOmxVdec.so there is a possible heap buffer overflow.Google Android
- CVE-2017-13226An elevation of privilege vulnerability in the MediaTek mtk.Google Android
- CVE-2015-9246An issue was discovered in Skybox Platform before 7.5.201.
- CVE-2015-9247An issue was discovered in Skybox Platform before 7.5.401.
- CVE-2015-9248An issue was discovered in Skybox Platform before 7.5.201.
- CVE-2015-9249An issue was discovered in Skybox Platform before 7.5.201.
- CVE-2015-9250An issue was discovered in Skybox Platform before 7.5.201.
- CVE-2018-5650In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the unzip_match function in runzip.c.
- CVE-2017-14030An issue was discovered in Moxa MXview v2.8 and prior.Moxa MXview
- CVE-2017-16737An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior.WECON Technology Co., Ltd. LeviStudio HMI Editor
- CVE-2017-16739An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior.WECON Technology Co., Ltd. LeviStudio HMI Editor
- CVE-2017-16741An Information Exposure issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1.0PHOENIX CONTACT FL SWITCH
- CVE-2017-16743An Improper Authorization issue was discovered in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products running firmware Version 1PHOENIX CONTACT FL SWITCH
- CVE-2017-18027In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers
- CVE-2017-18028In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote a
- CVE-2017-18029In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attacker
- CVE-2016-10705The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.
- CVE-2016-10706The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.
- CVE-2014-3471Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU in
- CVE-2014-6435cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote
- CVE-2014-6436Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authenticati
- CVE-2014-6437Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via
- CVE-2014-7952The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by
- CVE-2014-8166The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attacke
- CVE-2015-2298node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an im
- CVE-2015-2981The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attack
- CVE-2015-3888Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel:
- CVE-2016-0324IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users
- CVE-2016-0327IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain admini
- CVE-2016-0332IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed l
- CVE-2016-0335Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0
- CVE-2016-0336Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-
- CVE-2017-16885Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Us
- CVE-2017-16886The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.
- CVE-2017-16887The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.
- CVE-2017-17970Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to
- CVE-2017-18014An NC-25986 issue was discovered in the Logging subsystem of Sophos XG Firewall with SFOS before 17.0.3 MR3.
- CVE-2018-5262A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in t
- CVE-2018-5315The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.
- CVE-2017-0869NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege eGoogle Android
- CVE-2017-14594The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackeAtlassian Jira
- CVE-2017-16862The IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers to modify the "incoming mail" whitelist settAtlassian Jira
- CVE-2017-16864The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross Atlassian Jira
- CVE-2017-2158Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted froSchezo Lhaplus
- CVE-2018-5344In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of s
- CVE-2018-5357ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.
- CVE-2018-5358ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersIntern
- CVE-2018-5361The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php.wpglobus/wpglobus
- CVE-2018-5362The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][page] parameter to wp-admin/options.php.wpglobus/wpglobus
- CVE-2018-5363The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (orwpglobus/wpglobus
- CVE-2018-5364The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/optionwpglobus/wpglobus
- CVE-2018-5365The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/optionswpglobus/wpglobus
- CVE-2018-5366The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.wpglobus/wpglobus
- CVE-2018-5367The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post] parameter to wp-admin/options.php.wpglobus/wpglobus
- CVE-2018-5368The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php.
- CVE-2018-5369The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a lang_identificat
- CVE-2018-5371diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticat
- CVE-2018-5372The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
- CVE-2018-5373The Smooth Slider plugin through 2.8.6 for WordPress has SQL Injection via smooth-slider.php (trid parameter).
- CVE-2018-5374The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
- CVE-2018-5375Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.
- CVE-2018-5376Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.
- CVE-2018-5377Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
- CVE-2017-16732A use-after-free issue was discovered in Advantech WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2017-16736An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3.Advantech WebAccess
- CVE-2018-5326Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass.
- CVE-2018-5327Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy
- CVE-2018-5347Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.p
- CVE-2018-5345A stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious attackers to cause a crash or, potentially, exec