CVEs published January 17, 2018
6 CVEs were published on January 17, 2018: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Atlassian Jira
- 1
- Hancom office Hword NEO
- 1
Medium, low and unrated 6
- CVE-2018-5764The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote
- CVE-2018-5747In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function (stream.c).
- CVE-2018-5195Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands whHancom office Hword NEO
- CVE-2018-5258The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensi
- CVE-2017-16865The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via aAtlassian Jira
- CVE-2018-5721Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS routers (when using software from https://gith