CVEs published April 9, 2018
14 CVEs were published on April 9, 2018: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- BUFFALO WZR-1750DHP2
- 3
- Apache Software Foundation Apache Solr · org.apache.solr:so…
- 1
- Dell EMC Avamar, Integrated Data Protection Appliance
- 1
- Glamo iRemoconWiFi App for Android
- 1
- ICS-CERT LCDS - Leão Consultoria e Desenvolvimen…
- 1
- kotti
- 1
- LXR Project LXR
- 1
- Talos Zabbix
- 1
Medium, low and unrated 14
- CVE-2018-5463A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.33ICS-CERT LCDS - Leão Consultoria e Desenvolvimen…
- CVE-2017-2826An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X.Talos Zabbix
- CVE-2018-1217Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1Dell EMC Avamar, Integrated Data Protection Appliance
- CVE-2018-6182Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST p
- CVE-2018-9864The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.
- CVE-2018-9862util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an
- CVE-2018-0545LXR version 1.0.0 to 2.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.LXR Project LXR
- CVE-2018-0553The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middGlamo iRemoconWiFi App for Android
- CVE-2018-0554Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspeBUFFALO WZR-1750DHP2
- CVE-2018-0555Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.BUFFALO WZR-1750DHP2
- CVE-2018-0556Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.BUFFALO WZR-1750DHP2
- CVE-2018-1308This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlApache Software Foundation Apache Solr · org.apache.solr:so…
- CVE-2018-9856Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via kotti
- CVE-2018-9857PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).