CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- rubyonrails html sanitizerrails-html-sanitizer Cross-site Scripting vulnerability6.1 Medium
- rubyonrails html sanitizerrails-html-sanitizer Cross-site Scripting vulnerability6.1 Medium
- rubyonrails html sanitizerrails-html-sanitizer Cross-site Scripting vulnerability6.1 Medium
- ibm java sdk, websphere application server, redhat satellite +2 more +4 moreThe J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...9.1 Critical
- samsung x14j firmware, sun opensolaris, zyxel gs1900-10hp firmware +1 more +3 moreCisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2...5.3 Medium
- cisco application policy infrastructure controller enterprise moduleCross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller...6.1 Medium
- zyxel gs1900-10hp firmwareCisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to...4.3 Medium
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction...5.3 Medium
firefoxUbuntufirefox regressionNo score- dell secureworksDell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in...6.8 Medium
- huawei agile controller-campusCross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei...6.1 Medium
- libdwarf project libdwarfThe dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to...3.3 Low
- djangoproject djangoDjango Access Restrictions Bypass5.5 Medium
- atlassian bambooMultiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not...9.1 Critical
- atlassian bambooAn unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote...9.8 Critical
- apache cloudstackApache CloudStack before 4.5.2 does not properly preserve VNC passwords when migrating KVM...9.8 Critical
- apache cloudstackApache CloudStack before 4.5.2 might allow remote authenticated administrators to obtain...4.9 Medium
- atlassian bambooThe Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5...9.8 Critical
- openelecOpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it...9.8 Critical
- siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay...5.3 Medium
- siemens simatic s7-1500 cpu firmwareSiemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of...7.5 High
- oracle jdk, jre +1 moreUnspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72,...7.6 High
- ibm websphere mqThe MQXR service in WMQ Telemetry in IBM WebSphere MQ 7.1 before 7.1.0.7, 7.5 through 7.5.0.5,...4.0 Medium
- wordpressThe wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote...8.6 High
- wordpressOpen redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in...7.4 High
- jasper project jasperThe jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a...6.5 Medium
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in...8.1 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in...6.5 Medium
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreCode.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox...8.8 High
- mozilla firefox, debian linux, fedoraproject fedora +2 more +4 moreThe directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in...8.8 High
- cisco webex meetings serverMultiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meetings Server 2.5.1.5 allow...6.1 Medium
- samsung x14j firmwareSQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote...6.5 Medium
- zyxel gs1900-10hp firmware, zzinc keymouse firmware +1 moreThe Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center...5.4 Medium
- cisco application policy infrastructure controller enterprise moduleCross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller...6.1 Medium
- cisco nx-os, samsung x14j firmware, sun opensolaris +2 more +4 moreCisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h)...8.8 High
- cisco prime security manager, asa cx context-aware security software +1 moreThe RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and...8.8 High
- zyxel gs1900-10hp firmwareCisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0...7.5 High
- google androidpackages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard...6.1 Medium
- google androidThe interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl...6.1 Medium
- google androidInteger overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in...7.5 High
- google androidmedia/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G,...7.8 High
- google androidUse-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi...8.8 High
- google androidInteger overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library...6.2 Medium
- google androidThe get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows...8.4 High
- google androidThe Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and...8.4 High
- google androidThe performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before...8.4 High
- google androidThe NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice...9.8 Critical
- google androidlibstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x...9.8 Critical
- google android, apple iphone os, mac os x +2 more +4 moreThe Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and...8.8 High
- google android, apple iphone os, mac os x +2 more +4 moreThe Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and...9.8 Critical
- Show moreLoading…