# CVEs published 2018-01-24

52 CVEs were published on January 24, 2018: 1 critical, 0 high. Days are UTC.

- [CVE-2017-1000502](https://cve.now/CVE-2017-1000502.md): Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands (no CVSS, org.jenkins-ci.plugins:ec2)
- [CVE-2017-1000503](https://cve.now/CVE-2017-1000503.md): A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands durin (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2017-1000504](https://cve.now/CVE-2017-1000504.md): A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2018-1000006](https://cve.now/CVE-2018-1000006.md): GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, speci (no CVSS, electron)
- [CVE-2018-1047](https://cve.now/CVE-2018-1047.md): A flaw was found in Wildfly 9.x. (no CVSS, Red Hat Wildfly · org.wildfly:wildfly-undertow)
- [CVE-2018-1048](https://cve.now/CVE-2018-1048.md): It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW\_ENCODED\_SLASH option and thus allo (no CVSS, Red Hat undertow as shipped in Jboss EAP 7.1.0.GA · org.jbo…)
- [CVE-2017-1000474](https://cve.now/CVE-2017-1000474.md): Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/prof (no CVSS)
- [CVE-2018-1000005](https://cve.now/CVE-2018-1000005.md): libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. (no CVSS)
- [CVE-2018-1000007](https://cve.now/CVE-2018-1000007.md): libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. (no CVSS)
- [CVE-2018-5759](https://cve.now/CVE-2018-5759.md): jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to ca (no CVSS)
- [CVE-2018-6190](https://cve.now/CVE-2018-6190.md): Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page. (no CVSS)
- [CVE-2018-6191](https://cve.now/CVE-2018-6191.md): The js\_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. (no CVSS)
- [CVE-2018-6192](https://cve.now/CVE-2018-6192.md): In Artifex MuPDF 1.12.0, the pdf\_read\_new\_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation (no CVSS)
- [CVE-2018-6193](https://cve.now/CVE-2018-6193.md): A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/r (no CVSS)
- [CVE-2018-5705](https://cve.now/CVE-2018-5705.md): Reservo Image Hosting 1.6 is vulnerable to XSS attacks. (no CVSS)
- [CVE-2018-4834](https://cve.now/CVE-2018-4834.md): A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions \< V4.10.111), Desigo PXC00-E.D V5.00 (All versions \< V5.0.171), (CVSS 9.8, Siemens Desigo PXC00-E.D · Siemens Desigo PXC00/64/128-U +9)
- [CVE-2017-12176](https://cve.now/CVE-2017-12176.md): xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12177](https://cve.now/CVE-2017-12177.md): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X ser (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12178](https://cve.now/CVE-2017-12178.md): xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server t (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12179](https://cve.now/CVE-2017-12179.md): xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12180](https://cve.now/CVE-2017-12180.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to cra (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12181](https://cve.now/CVE-2017-12181.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12182](https://cve.now/CVE-2017-12182.md): xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12183](https://cve.now/CVE-2017-12183.md): xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or po (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12184](https://cve.now/CVE-2017-12184.md): xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12185](https://cve.now/CVE-2017-12185.md): xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to c (no CVSS)
- [CVE-2017-12186](https://cve.now/CVE-2017-12186.md): xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash o (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-12187](https://cve.now/CVE-2017-12187.md): xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or po (no CVSS, The X.Org Foundation xorg-x11-server)
- [CVE-2017-13696](https://cve.now/CVE-2017-13696.md): A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze E (no CVSS)
- [CVE-2017-15135](https://cve.now/CVE-2017-15135.md): It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly (no CVSS, Red Hat 389-ds-base)
- [CVE-2018-5319](https://cve.now/CVE-2018-5319.md): RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request. (no CVSS)
- [CVE-2018-5777](https://cve.now/CVE-2018-5777.md): An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). (no CVSS)
- [CVE-2018-5778](https://cve.now/CVE-2018-5778.md): An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). (no CVSS)
- [CVE-2018-6017](https://cve.now/CVE-2018-6017.md): Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by s (no CVSS)
- [CVE-2018-6018](https://cve.now/CVE-2018-6018.md): Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffi (no CVSS)
- [CVE-2017-1000475](https://cve.now/CVE-2017-1000475.md): FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges. (no CVSS)
- [CVE-2017-15718](https://cve.now/CVE-2017-15718.md): The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Ap (no CVSS, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2017-1769](https://cve.now/CVE-2017-1769.md): IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthor (no CVSS, IBM Business Process Manager)
- [CVE-2018-1000018](https://cve.now/CVE-2018-1000018.md): An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file. (no CVSS)
- [CVE-2017-18075](https://cve.now/CVE-2017-18075.md): crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF\_ALG-based AEAD (no CVSS)
- [CVE-2018-5969](https://cve.now/CVE-2018-5969.md): Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax\_new\_admin.php, as demonstrated by adding an (no CVSS)
- [CVE-2018-5972](https://cve.now/CVE-2018-5972.md): SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI. (no CVSS)
- [CVE-2018-5976](https://cve.now/CVE-2018-5976.md): Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin pass (no CVSS)
- [CVE-2018-5977](https://cve.now/CVE-2018-5977.md): SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price\_type=range&price= request. (no CVSS)
- [CVE-2018-5978](https://cve.now/CVE-2018-5978.md): SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field. (no CVSS)
- [CVE-2018-5979](https://cve.now/CVE-2018-5979.md): SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field. (no CVSS)
- [CVE-2018-5984](https://cve.now/CVE-2018-5984.md): SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH\_INFO to the category/ URI. (no CVSS)
- [CVE-2018-5985](https://cve.now/CVE-2018-5985.md): SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company\_id= request. (no CVSS)
- [CVE-2018-5986](https://cve.now/CVE-2018-5986.md): SQL Injection exists in Easy Car Script 2014 via the s\_order or s\_row parameter to site\_search.php. (no CVSS)
- [CVE-2018-5988](https://cve.now/CVE-2018-5988.md): SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile\_preview.php or index.php. (no CVSS)
- [CVE-2018-6184](https://cve.now/CVE-2018-6184.md): ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /\_next request namespace. (no CVSS, next)
- [CVE-2018-6187](https://cve.now/CVE-2018-6187.md): In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do\_pdf\_save\_document function in the pdf/pdf-write.c fil (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.