CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- cybozu officeCybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar...5.4 Medium
- cybozu officeOpen redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to...7.4 High
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- qemu, canonical ubuntu linux +1 moreThe is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1...6.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows...5.0 Medium
- sap netweaverDirectory traversal vulnerability in the GetFileList function in the SAP Manufacturing...7.5 High
- sap netweaver, netweaver application server java +1 moreThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to...5.3 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet...6.1 Medium
- sap netweaver, netweaver application server java +1 moreSQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote...9.8 Critical
sambaUbuntusamba regressionNo score- libreoffice, canonical ubuntu linux +1 moreLibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption)...7.8 High
- libreoffice, canonical ubuntu linux +1 moreThe lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service ...7.8 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...8.1 High
- sun opensolarisMultiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5)...6.1 Medium
- zzinc keymouse firmwareCisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial...6.5 Medium
- cisco universal small cell firmwareCisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption...5.8 Medium
- ibm financial transaction managerIBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment...4.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment...4.3 Medium
- huawei mt882 firmwareGlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote...4.9 Medium
- huawei mt882 firmwareThe Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices...9.8 Critical
- apache solrImproper Neutralization of Input During Web Page Generation in Apache Solr6.1 Medium
- apache solrApache Solr Cross-site scripting Vulnerability6.1 Medium
- apache solrImproper Neutralization of Input During Web Page Generation in Apache Solr6.1 Medium
- ibm security access manager 9.0 firmware, security access manager for web 8.0 firmware +1 moreCross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1...6.1 Medium
- ibm infosphere master data management reference data managementCross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere...5.4 Medium
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...7.2 High
- ibm websphere commerceThe Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly...5.3 Medium
- ibm tivoli storage managerThe server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7...3.7 Low
- ibm emptoris contract managementCross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0...5.4 Medium
- ibm emptoris contract managementCross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.0.x...8.8 High
- ibm emptoris contract managementIBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0...7.5 High
- ibm security access manager 9.0 firmware, security access manager for web 7.0 firmware, security access manager for web 8.0 firmware +2 moreThe SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8...7.5 High
- ibm security access manager 9.0 firmware, security access manager for web 7.0 firmware, security access manager for web 8.0 firmware +2 moreIBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before...7.5 High
- ibm spss modelerIBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through...4.0 Medium
- ibm qradar security information and event managerCross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7...5.4 Medium
- ibm qradar security information and event managerThe Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated...7.4 High
- ibm qradar security information and event managerIBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH...4.4 Medium
- ibm qradar security information and event managerIBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not...5.3 Medium
- linux kernel, novell suse linux enterprise real time extension +1 moreDouble free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux...4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreThe adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not...5.5 Medium
- linux kernelThe evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5...5.5 Medium
- google chrome, debian linux, opensuse +2 moreThe Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not...8.8 High
- google chrome, debian linux, opensuse +2 moreThe opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome...4.3 Medium
- google chrome, debian linux, opensuse +2 moreThe Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab...4.3 Medium
- google chrome, debian linux, opensuse +2 moreThe Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object...8.8 High
- mozilla firefox, sil graphite2 +1 moreThe setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and...8.8 High
- netgear prosafe network management software 300Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5...8.6 High
- Show moreLoading…