CVEs published January 27, 2018
7 CVEs were published on January 27, 2018: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- brace-expansion
- 1
Medium, low and unrated 7
- CVE-2018-6358The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attac
- CVE-2018-6359The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a
- CVE-2018-6357The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via th
- CVE-2018-6352In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp.
- CVE-2018-6353The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering
- CVE-2018-6354templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter.
- CVE-2017-18077index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expandbrace-expansion