CVEs published in February 2016
402 vulnerabilities, 46 critical, 4 exploited.
- qnap sinage stationQNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and...7.5 High
- qnap signage stationUnrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote...8.8 High
- squid-cache squidhttp.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data...7.5 High
- squid-cache squidThe Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not...7.5 High
- squid-cache squidSquid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects,...7.5 High
vlcMageiaUpdated vlc packages fix security vulnerabilitiesNo score- cisco secure firewall management centerThe device login page in Cisco FirePOWER Management Center 5.3 through 6.0.0.1 allows remote...5.3 Medium
- cisco application control engine softwareThe Device Manager GUI in Cisco Application Control Engine (ACE) 4710 A5 before A5(3.1) allows...8.8 High
- phpStack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x...9.8 Critical
- fedoraproject fedora, samsung x14j firmware +1 moreMultiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri...9.8 Critical
opensslUbuntuopenssl updateNo scoreglib-networkingUbuntuglib-networking updateNo scoregnutls26Ubuntugnutls26 updateNo scoreca-certificatesUbuntuca-certificates updateNo score- flexera installshieldUntrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users...7.8 High
- cisco nx-osCisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a...9.8 Critical
- flexerasoftware flexnet publisherMultiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before...9.8 Critical
- linux kernelThe Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a...5.5 Medium
- linux kernelsound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access,...6.2 Medium
- linux kernelsound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or...6.2 Medium
- linux kernelsound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not...5.1 Medium
- linux kernelsound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows...5.1 Medium
- linux kernelThe snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not...5.1 Medium
- linux kernelRace condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel...5.1 Medium
- linux kernelThe snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel...6.2 Medium
- websvn, debian linux +1 moreCross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to...6.1 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache Tomcat6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Access Control in Apache Tomcat8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in Apache Tomcat8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat4.3 Medium
- fedoraproject 389 directory server, redhat enterprise linux, enterprise linux desktop +3 more +5 moreslapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3...7.5 High
- is my json valid project my json validRegular Expression Denial of Service in is-my-json-valid7.5 High
- log-chat project log-chatCross-site scripting (XSS) vulnerability in log_chat.cgi in Script* Log-Chat before 2.0 allows...6.1 Medium
- qemuMultiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2...7.1 High
- libssh2, debian linux, fedoraproject fedora +1 more +3 moreThe diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets...5.9 Medium
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman...5.9 Medium
- google sketchup, sap 3d visual enterprise viewer +1 moreMultiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers...8.8 High
- digium asterisk, certified asterisk, fedoraproject fedora +2 morechan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and...5.9 Medium
- digium asterisk, certified asterisk +1 moreAsterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified...6.5 Medium
- moodleMoodle improper access control4.3 Medium
- moodleThe Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to...4.3 Medium
- moodlemod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups...4.3 Medium
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the...7.8 High
- linux kernel, canonical ubuntu core, ubuntu linux +1 more +3 moreThe overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX...7.8 High
- openssl, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...9.8 Critical
- ibm tivoli storage flashcopy manager for vmware, tivoli storage manager for virtual environments data protection for vmware +1 moreThe Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual...10.0 Critical
- advantech vesp211-232 firmware, vesp211-eu firmware +1 moreThe web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211...9.8 Critical
- Show moreLoading…