CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- cisco jabber guestCross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server...6.1 Medium
- sun opensolarisCross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote...6.1 Medium
- sun opensolarisMultiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote...6.1 Medium
- sauter-controls moduweb visionCross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0...6.5 Medium
- sauter moduweb visionSauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote...9.8 Critical
- sauter moduweb visionSauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication...8.1 High
cakephpMageiaUpdated cakephp package fixes security vulnerabilityNo score- dest-unreach socatThe OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for...5.3 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin XSS Vulnerability5.4 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote...5.3 Medium
- phpmyadminphpMyAdmin Cryptographic Vulnerability7.5 High
- mit kerberos 5The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv...7.5 High
- ge snmp\/web adapter firmwareGeneral Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8...6.5 Medium
- ge ups snmp web adapter firmwareGeneral Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8...8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreStack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6)...9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreInteger overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent...9.8 Critical
- gnu glibc, canonical ubuntu linux, debian linux +6 more +8 moreThe strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context...9.1 Critical
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMultiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow...9.8 Critical
- isc bindrdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain...5.9 Medium
- fisher-price smart toy bearThe API on Fisher-Price Smart Toy Bear devices allows remote attackers to obtain sensitive...7.5 High
- python pillow, debian linux +1 morePillow Buffer overflow in ImagingLibTiffDecode6.5 Medium
- mit kerberos 5, debian linux, opensuse leap +7 more +9 moreMultiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)...6.5 Medium
- mit kerberos 5, debian linux, opensuse leap +8 more +10 moreThe xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)...5.3 Medium
- kubernetesAuthorization bypass in Openshift9.8 Critical
- kubernetesAccess Restriction Bypass in kubernetes7.7 High
- radicaleRadicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component10.0 Critical
- openstack keystone, keystonemiddleware, oracle solaris +2 moreOpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials7.5 High
- jenkins, redhat openshift +1 moreJenkins does not Verify Checksums for Plugin Files7.5 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack8.8 High
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- apache camelCamel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands9.8 Critical
- ffmpegThe jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows...6.5 Medium
- mcafee vulnerability managerMultiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation...8.8 High
- janrain php-openidexamples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the...8.8 High
- huawei e5151 firmware, e5186 firmware +1 moreHuawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and...7.5 High
- apple iphone osWebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by...5.4 Medium
- apple mac os xUntrusted search path vulnerability in OSA Scripts in Apple OS X before 10.11.3 allows attackers...7.3 High
- apple safari, iphone os +1 moreThe Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3...4.3 Medium
- apple safari, tvos, iphone os +2 more +4 moreWebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows...8.8 High
- apple safari, iphone os, watchos +2 moreWebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to...8.8 High
- apple safari, iphone os, watchos +2 moreWebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to...8.8 High
- apple safari, tvos, iphone os +2 more +4 moreWebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows...8.8 High
- apple safari, iphone os, watchos +2 moreWebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to...8.8 High
- apple tvos, iphone os, mac os x +1 more +3 moresyslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users...7.8 High
- apple tvos, iphone os, mac os x +1 more +3 moreThe kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local...7.8 High
- apple tvos, iphone os, mac os x +1 more +3 moreIOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to...7.8 High
- apple tvos, iphone os, mac os x +1 more +3 moreThe IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows...7.8 High
- apple mac os xThe IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows...7.3 High
- apple tvos, iphone os, mac os x +1 more +3 moreThe Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1...7.8 High
- Show moreLoading…