CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- python pillow, python imaging project imaging, debian linux +2 morePillow buffer overflow in ImagingPcdDecode6.5 Medium
- google chrome, debian linux, novell suse package hub for suse linux enterprise +2 more +4 moreGoogle Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy...9.8 Critical
- google chrome, debian linux +1 morepi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a...6.3 Medium
- phpmyadmin, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4...5.4 Medium
- phpmyadmin, fedoraproject fedora +1 morelibraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows...5.3 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 moreCross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in...5.4 Medium
- phpmyadmin, fedoraproject fedora, opensuse leap +1 more +3 morephpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain...5.3 Medium
- didiwiki project didiwiki, debian linux +1 moreDirectory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary...7.5 High
- cisco asr 5000 series softwareThe SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR...7.5 High
- linecorp lineLINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated...5.7 Medium
- cuore ec-cube help pluginSQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote...9.1 Critical
- basercmsbaserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands...6.3 Medium
- xenVMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreXen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot...6.8 Medium
- nodejs node.js, fedoraproject fedora +1 moreThe HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x...7.5 High
- nodejs node.js, fedoraproject fedora +1 moreNode.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0...7.5 High
- beanshell, canonical ubuntu linux, debian linux +2 moreImproper Input Validation in BeanShell8.1 High
- belden hirschmann firmware, hirschmann l2b +1 moreThe password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and...5.3 Medium
- hp hp-ux ipfilterHPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows...5.9 Medium
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy...8.8 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy...8.8 High
- symantec encryption management serverSymantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users...9.1 Critical
- symantec encryption management serverSymantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root...7.8 High
- symantec encryption management serverThe LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote...7.5 High
- symantec encryption management serverThe LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote...7.5 High
- novell zenworks configuration managementThe ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4...5.3 Medium
- swann srnvw-470lcd firmware, swnvw-470cam firmware +1 moreSwann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware...5.3 Medium
- zhuhai raysharp firmwareZhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote...9.8 Critical
libxmpMageiaUpdated libxmp packages fix security vulnerabilityNo score- cacti, opensuse leap, opensuse +2 moreauth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web...8.8 High
- python pillow, debian linux +1 morePillow Buffer overflow in ImagingFliDecode6.5 Medium
- claws-mailStack-based buffer overflow in the conv_euctojis function in codeconv.c in Claws Mail 3.13.1...7.3 High
- comcast xfinity home security systemComcast XFINITY Home Security System does not properly maintain base-station communication, which...6.5 Medium
- cisco small business wireless access points firmwareCisco Small Business 500 Wireless Access Point devices with firmware 1.0.4.4 allow remote...5.3 Medium
- cisco iosCisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote...6.5 Medium
- sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1...9.8 Critical
- sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8...9.9 Critical
- citrix netscalerThe Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and...6.1 Medium
- citrix netscalerCitrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0...9.8 Critical
- sophos unified threat management softwareCross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows...6.1 Medium
- cybozu officecustomapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a...6.5 Medium
- cybozu officeCybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access...5.4 Medium
- cybozu officeMultiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0...8.8 High
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...6.1 Medium
- cybozu officecustomapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a...6.5 Medium
- cybozu officeCybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a...4.3 Medium
- cybozu officeCybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified...4.3 Medium
- cybozu officeCybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access...5.4 Medium
- cybozu officeCybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access...5.4 Medium
- Show moreLoading…