CVEs published April 2, 2018
25 CVEs were published on April 2, 2018: 1 critical, 1 high.
- Published
- 25
- Critical
- 1
- High
- 1
- Medium
- 1
- Low
- 1
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Nvidia GPU Display Driver
- 7
- Linux kernel through
- 4
- McAfee ePolicy Orchestrator
- 2
- Apache Software Foundation Apache Ignite · org.apache.ignit…
- 1
- Cisco IOS XE
- 1
- McAfee True Key
- 1
- Microsoft Windows
- 1
- Talos Moxa
- 1
Critical 1
High 1
Medium, low and unrated 23
- CVE-2018-9230In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore pa
- CVE-2018-1295In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, whicApache Software Foundation Apache Ignite · org.apache.ignit…
- CVE-2018-6659SB10228 ePO Reflected Cross-Site Scripting vulnerabilityMcAfee ePolicy Orchestrator
- CVE-2018-9127Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames w
- CVE-2018-6247NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL poNvidia GPU Display Driver
- CVE-2018-6248NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software uses a sequNvidia GPU Display Driver
- CVE-2018-6249NVIDIA GPU Display Driver contains a vulnerability in kernel mode layer handler where a NULL pointer dereference may lead to denial of serviNvidia GPU Display Driver
- CVE-2018-6250NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a NULL poNvidia GPU Display Driver
- CVE-2018-6251NVIDIA Windows GPU Display Driver contains a vulnerability in the DirectX 10 Usermode driver, where a specially crafted pixel shader can cauNvidia GPU Display Driver
- CVE-2018-6252NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape where the software allows an aNvidia GPU Display Driver
- CVE-2018-6253NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cauNvidia GPU Display Driver
- CVE-2018-9183The Joom Sky JS Jobs extension before 1.2.1 for Joomla! has XSS.
- CVE-2018-0194Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commandCisco IOS XE
- CVE-2018-1038The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles Microsoft Windows
- CVE-2018-6660SB10228 ePO Directory Traversal vulnerabilityMcAfee ePolicy Orchestrator
- CVE-2018-9163A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authentic
- CVE-2018-1092The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_coLinux kernel through
- CVE-2018-1093The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service (Linux kernel through
- CVE-2018-1094The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, wLinux kernel through
- CVE-2018-1095The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which cLinux kernel through
- CVE-2018-9173Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inj
- CVE-2018-9174sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents
- CVE-2018-9175DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselect_main.php because code