CVEs published January 15, 2018
4 CVEs were published on January 15, 2018: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 4
- CVE-2018-5328ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an att
- CVE-2018-5329ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages.
- CVE-2018-5479FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks.
- CVE-2018-5702Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows r