CVEs published in February 2015
482 vulnerabilities, 66 critical, 3 exploited.
- remotesensing libtiff, debian linux +1 moreThe (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in...6.5 Medium
- fancyfon famocMultiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers...7.5 High
- siphon siphone enterprise pbxSQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute...7.5 High
- fancyfon famocMultiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote...4.3 Medium
- fork-cms fork cmsMultiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote...7.5 High
- fli4lMultiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the...4.3 Medium
- aas9 zerocmsSQL injection vulnerability in views/zero_transact_user.php in the administrative backend in...7.5 High
- mcafee data loss prevention endpointMcAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to...6.9 Medium
- k7computing anti-virus plus, k7sentry.sys, total security +1 more +3 moreK7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0...7.2 High
- bullguard bdagent.sys, internet security, online backup +1 more +3 morebdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup...7.2 High
- trendmicro tmeext.sysThe tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and...7.2 High
- avg internet security, protection +1 moreThe TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x...7.2 High
- netapp oncommand balanceNetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via...4.0 Medium
- netapp oncommand balanceNetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows...10.0 High
- linux kernelRace condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges...6.9 Medium
- attachmate reflection ftp clientDirectory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP...10.0 High
- attachmate reflection ftp clientDirectory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP...10.0 High
- attachmate reflection ftp clientThe rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote...10.0 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...7.5 High
- postgresql, debian linux +1 morePostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...9.8 Critical
- postgresql, debian linux +1 moreMultiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9...8.8 High
- postgresql, debian linux +1 moreThe to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x...8.8 High
- postgresql, debian linux +1 morePostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x...4.3 Medium
hexchatMageiaUpdated hexchat packages fix security vulnerabilityNo score- videolan vlc media playerThe GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2...7.8 High
- zarafa webapp, collaboration platform, fedoraproject fedora +2 moresenddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration...5.0 Medium
- gnu glibc, canonical ubuntu linux +1 moreThe ADDW macro in stdio-common/vfscanf.c in the GNU C Library (aka glibc or libc6) before 2.21...6.4 Medium
- linux kernel, canonical ubuntu linux +1 moreThe IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length...7.8 High
- debian linux, ntp, redhat enterprise linux desktop +2 more +4 moreThe read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X...6.8 Medium
- ntp, debian linux, redhat enterprise linux desktop +2 more +4 morentp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...5.8 Medium
- google chrome, icu-project international components for unicode +1 moreThe Regular Expressions package in International Components for Unicode (ICU) for C/C++ before...9.8 Critical
- ansible towerAnsible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and...5.0 Medium
- ansible towerAnsible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain...6.5 Medium
- m2 technologies optimalsiteCross-site scripting (XSS) vulnerability in display_dialog.php in M2 OptimalSite 0.1 and 2.4...4.3 Medium
- owncloud serverThe documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote...4.0 Medium
- owncloud, owncloud server +1 moreThe documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote...5.0 Medium
- owncloud, owncloud server +1 moreMultiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x...4.3 Medium
- owncloud, owncloud server +1 moreThe OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x...5.0 Medium
- owncloud, owncloud server +1 moreThe FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows...5.0 Medium
- owncloud serverAsset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the...5.0 Medium
- owncloud, owncloud server +1 moreThe user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before...5.0 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the import functionality in the bookmarks application...3.5 Low
- owncloud, owncloud server +1 moreThe import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x...6.8 Medium
- owncloudThe SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the...4.3 Medium
- manageengine servicedesk plusZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users...4.0 Medium
- zohocorp servicedesk plusSQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk...6.5 Medium
- cmsjunkie j-classifiedsmanagerCross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for...4.3 Medium
- Show moreLoading…