CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- netgear prosafe network management software 300Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11...9.6 Critical
- tollgrade smartgrid lighthouse sensor management systemCross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management...6.1 Medium
- tollgrade smartgrid lighthouse sensor management systemTollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0...8.8 High
- tollgrade smartgrid lighthouse sensor management systemTollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0...5.3 Medium
- tollgrade smartgrid lighthouse sensor management systemCross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor...8.8 High
- google chrome, debian linux, opensuse +2 moreInteger underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in...8.8 High
- google chrome, debian linux, opensuse +2 moreThe DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame...8.8 High
- ffmpeg, opensuse leap +1 morelibavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr...8.8 High
- ffmpeglibswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values,...8.8 High
- ffmpeglibavcodec/pngenc.c in FFmpeg before 2.8.5 uses incorrect line sizes in certain row calculations,...8.8 High
- hp continuous delivery automationHP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary...9.8 Critical
- cisco sparkThe REST interface in Cisco Spark 2015-06 allows remote attackers to cause a denial of service ...5.3 Medium
- cisco sparkThe REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive...4.3 Medium
- cisco sparkThe REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access...7.5 High
- cisco prime collaborationThe CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS...6.7 Medium
- cisco email security appliance firmewareThe proxy engine in Cisco Advanced Malware Protection (AMP), when used with Email Security...7.5 High
- emc documentum xcpEMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users...5.4 Medium
- emc documentum xcpEMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users...6.5 Medium
- ffmpeg, canonical ubuntu linux +1 morelibavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows...8.8 High
- ffmpeg, canonical ubuntu linux, debian linux +2 moreInteger overflow in the asf_write_packet function in libavformat/asfenc.c in FFmpeg before 2.8.5...8.8 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreThe htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial...6.5 Medium
- cisco adaptive security appliance softwareBuffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8...9.8 Critical
eglibcDebianeglibc - regression updateNo score- mozilla firefoxMozilla Firefox before 44.0.2 does not properly restrict the interaction between Service Workers...8.8 High
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...7.5 High
- postgresql, canonical ubuntu linux, debian linux +2 morePostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x...8.8 High
- adobe experience managerAdobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an...7.5 High
- adobe dispatcher, experience manager +1 moreDispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly...7.5 High
- adobe experience manager, apache sling +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets Post7.5 High
- adobe experience managerCross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote...6.1 Medium
- adobe bridge cc, photoshop cc +1 moreAdobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2...9.8 Critical
- adobe bridge cc, photoshop cc +1 moreAdobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2...9.8 Critical
- adobe bridge cc, photoshop cc +1 moreAdobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2...9.8 Critical
- adobe connectAdobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified...5.3 Medium
- adobe connectAdobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted...9.8 Critical
- adobe connectCross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote...8.8 High
- ipswitch moveit dmzIpswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts...5.3 Medium
- ipswitch moveit mobileCross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote...6.1 Medium
- ipswitch moveit mobileMultiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962...8.8 High
- ipswitch moveit dmzThe MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages...4.3 Medium
- ipswitch moveit dmz, moveit mobile +1 moreThe "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2...6.5 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to execute arbitrary code or cause a denial of service ...8.8 High
- microsoft edgeMicrosoft Edge mishandles exceptions during window-message dispatch operations, which allows...4.3 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...8.8 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...8.8 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...8.8 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...8.8 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...8.8 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary...8.8 High
- Show moreLoading…