Эксплуатируемые и новые серьёзные CVE: январь 2018 г.

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attacker

• Без аутентификации
• Обход аутентификации

oturia · smart google code inserter1 янв. 2018 г.

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to exe

• Без аутентификации
• SQL-инъекция

oturia · smart google code inserter1 янв. 2018 г.

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attac

• Без аутентификации
• Ошибки памяти

linux · linux kernel3 янв. 2018 г.

pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrar

• RCE без входа
• CSRF

netgate · pfsense3 янв. 2018 г.

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

• RCE без входа
• Слабая криптография

primetek · primefaces3 янв. 2018 г.

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1

• Без аутентификации

vmware · spring boot4 янв. 2018 г.

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens u

• Без аутентификации
• Слабая криптография

cisco · node-jose4 янв. 2018 г.

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information

intel · atom c4 янв. 2018 г.

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at

intel · atom c4 янв. 2018 г.

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information

• Утечка информации

intel · atom c4 янв. 2018 г.

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 an

• Локальное повышение привилегий

microsoft · windows 104 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · chakracore4 янв. 2018 г.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

• RCE без входа
• Ошибки памяти

microsoft · chakracore4 янв. 2018 г.

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further c

• Без аутентификации
• Ошибки памяти

microsoft · chakracore4 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

• RCE без входа
• Ошибки памяти

microsoft · chakracore4 янв. 2018 г.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to fur

• Без аутентификации
• Ошибки памяти

microsoft · edge4 янв. 2018 г.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

• RCE без входа
• Ошибки памяти

microsoft · chakracore4 янв. 2018 г.

The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create ad

• Без аутентификации

zohocorp · desktop central4 янв. 2018 г.

Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field

• RCE

intenogroup · iopsys4 янв. 2018 г.

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.

• Без аутентификации
• Обход пути

advantech · webaccess5 янв. 2018 г.

Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP

• RCE
• Обход аутентификации
• Инъекция команд

xplico · xplico5 янв. 2018 г.

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) b

• Ошибки памяти
• Отказ в обслуживании

teamspeak · teamspeak38 янв. 2018 г.

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by

• Отказ в обслуживании

teamspeak · teamspeak38 янв. 2018 г.

Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn

• RCE без входа
• SQL-инъекция

gespage · gespage8 янв. 2018 г.

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerabili

• RCE

microsoft · office9 янв. 2018 г.

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka

• RCE без входа
• Ошибки памяти

microsoft · office9 янв. 2018 г.

Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email m

• RCE

microsoft · office9 янв. 2018 г.

Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execut

• RCE без входа

microsoft · office9 янв. 2018 г.

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects a

• RCE без входа

microsoft · office9 янв. 2018 г.

Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

• RCE без входа

microsoft · excel9 янв. 2018 г.

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF conte

• RCE
• Ошибки памяти

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

• RCE без входа
• Ошибки памяти

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

• RCE без входа

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execut

• RCE
• Ошибки памяти

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office9 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE
• Ошибки памяти

microsoft · office9 янв. 2018 г.

IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by u

• Нарушение контроля доступа (IDOR)

ibm · qradar security information and event manager10 янв. 2018 г.

In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability.

• Без аутентификации
• Отказ в обслуживании

flexense · disk pulse10 янв. 2018 г.

FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix

• RCE без входа
• Десериализация

fasterxml · jackson-databind10 янв. 2018 г.

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid

• Ошибки памяти
• Отказ в обслуживании

linux · linux kernel11 янв. 2018 г.

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.p

• RCE без входа
• Инъекция команд

seagate · personal cloud firmware11 янв. 2018 г.

diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticat

• RCE
• Инъекция команд

d-link · dsl-2540u firmware12 янв. 2018 г.

cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote

• Без аутентификации
• Обход аутентификации
• Отказ в обслуживании

aztech · adsl dsl5018en \(1t1r\) firmware12 янв. 2018 г.

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authenticati

• RCE без входа
• Обход аутентификации

aztech · adsl dsl5018en \(1t1r\) firmware12 янв. 2018 г.

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via

• Без аутентификации
• Утечка информации

aztech · adsl dsl5018en \(1t1r\) firmware12 янв. 2018 г.

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Us

• Без аутентификации

fiberhome · lm53q1 firmware12 янв. 2018 г.

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.

• Без аутентификации

fiberhome · lm53q1 firmware12 янв. 2018 г.

A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in t

• RCE без входа
• Ошибки памяти

flexense · diskboss12 янв. 2018 г.

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows r

• RCE без входа

transmissionbt · transmission15 янв. 2018 г.

gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before

• Отказ в обслуживании

php · php16 янв. 2018 г.

An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.

• Без аутентификации
• XSS

php · php16 янв. 2018 г.

MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.

• Без аутентификации
• Загрузка файлов

barni · master ip camera01 firmware16 янв. 2018 г.

MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by t

• Без аутентификации
• Утечка информации

barni · master ip camera01 firmware16 янв. 2018 г.

Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant).

oracle · oss support tools17 янв. 2018 г.

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security).

• Без аутентификации

oracle · hospitality simphony17 янв. 2018 г.

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standar

• Без аутентификации
• Десериализация

apache · groovy18 янв. 2018 г.

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType o

• Без аутентификации
• XSS

jquery · jquery18 янв. 2018 г.

A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.

• RCE без входа
• Инъекция команд

commvault · commvault19 янв. 2018 г.

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command

• RCE без входа
• Инъекция команд

trendmicro · smart protection server19 янв. 2018 г.

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command

• RCE без входа

trendmicro · smart protection server19 янв. 2018 г.

An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker

• Без аутентификации

trendmicro · smart protection server19 янв. 2018 г.

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conne

• RCE без входа

netiq · access manager19 янв. 2018 г.

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-se

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

openbsd · openssh21 янв. 2018 г.

An issue was discovered in GitStack through 2.3.10.

• Без аутентификации

smartmobilesoftware · gitstack21 янв. 2018 г.

pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php gr

• RCE
• Инъекция команд

pfsense · pfsense22 янв. 2018 г.

Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.

• RCE без входа
• Ошибки памяти

labf · nfsaxe22 янв. 2018 г.

Moodle 3.x has Server Side Request Forgery in the filepicker.

• SSRF

moodle · moodle22 янв. 2018 г.

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

• Без аутентификации

asus · asuswrt22 янв. 2018 г.

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

• Без аутентификации
• Нарушение контроля доступа (IDOR)

asus · asuswrt22 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE

microsoft · office22 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office22 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office22 янв. 2018 г.

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

• RCE без входа

microsoft · office22 янв. 2018 г.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7

• RCE без входа
• Обход пути

netgain-systems · enterprise manager22 янв. 2018 г.

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterp

• Обход пути

netgain-systems · enterprise manager22 янв. 2018 г.

Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (l

• RCE
• Загрузка файлов

monstra · monstra23 янв. 2018 г.

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.

• RCE без входа

hp · j9v82a firmware23 янв. 2018 г.

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access becaus

• Без аутентификации
• Ошибки памяти

flexense · sysgauge23 янв. 2018 г.

SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.

• Без аутентификации
• SQL-инъекция

quickad project · quickad24 янв. 2018 г.

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

• Без аутентификации
• SQL-инъекция

wchat project · wchat24 янв. 2018 г.

SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

• Без аутентификации
• SQL-инъекция

livecrm · livecrm saas cloud24 янв. 2018 г.

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

• Без аутентификации
• SQL-инъекция

flexible poll project · flexible poll24 янв. 2018 г.

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze E

• Без аутентификации
• Ошибки памяти

flexense · dupscout24 янв. 2018 г.

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.

• Без аутентификации
• Утечка информации

ravpower · filehub firmware24 янв. 2018 г.

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, speci

• RCE без входа
• Инъекция команд

atom · electron24 янв. 2018 г.

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

• XSS

netis-systems · wf2419 firmware25 янв. 2018 г.

SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php

• Без аутентификации
• SQL-инъекция

eihitech · professional local directory script25 янв. 2018 г.

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056.

• RCE без входа
• Обход пути
• Загрузка файлов

ravpower · filehub firmware25 янв. 2018 г.

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

• RCE без входа
• Ошибки памяти

clamav · clamav26 янв. 2018 г.

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

• RCE без входа
• Ошибки памяти

clamav · clamav26 янв. 2018 г.

In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.

• RCE без входа
• Загрузка файлов

perfexcrm · perfex crm26 янв. 2018 г.