# CVEs published 2018-01-17

6 CVEs were published on January 17, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-5764](https://cve.now/CVE-2018-5764.md): The parse\_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote (no CVSS)
- [CVE-2018-5747](https://cve.now/CVE-2018-5747.md): In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function (stream.c). (no CVSS)
- [CVE-2018-5195](https://cve.now/CVE-2018-5195.md): Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands wh (no CVSS, Hancom office Hword NEO)
- [CVE-2018-5258](https://cve.now/CVE-2018-5258.md): The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensi (no CVSS)
- [CVE-2017-16865](https://cve.now/CVE-2017-16865.md): The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a (no CVSS, Atlassian Jira)
- [CVE-2018-5721](https://cve.now/CVE-2018-5721.md): Stack-based buffer overflow in the ej\_update\_variables function in router/httpd/web.c on ASUS routers (when using software from https://gith (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.