CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- intel advisor, cryptography for intel integrated performance primitives, data analytics acceleration library +9 more +11 more Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel... 7.3 High
- tigervnc Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows... 9.8 Critical
- libdwarf project libdwarf (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow... 9.8 Critical
- tenable log correlation engine Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1... 5.4 Medium
- tenable nessus Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote... 5.4 Medium
- iceni argus An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni... 8.8 High
- iceni argus An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to... 8.8 High
- iceni argus An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts... 8.8 High
- artifex mupdf Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex... 7.8 High
- kodi Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to... 7.5 High
- libimobiledevice libplist libplist allows attackers to cause a denial of service (large memory allocation and crash) via... 7.5 High
- libimobiledevice libplist The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of... 5.5 Medium
- xen Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via... 6.5 Medium
- xen Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via... 6.5 Medium
- xen Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via... 6.5 Medium
- xen Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by... 6.5 Medium
- iceni argus An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a... 8.8 High
- iceni argus An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a... 8.8 High
- iceni argus An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow... 8.8 High
- intel ethernet controller x710 family and intel ethernet controller xl710 family, x710 series driver, xl710 series driver +2 more Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families... 6.5 Medium
- pysaml2 project pysaml2 PySAML2 XML external entity attack 9.0 Critical
- qemu, debian linux, redhat openstack +1 more +3 more The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest... 5.5 Medium
- qemu, suse linux enterprise desktop, linux enterprise server +2 more +4 more Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick... 5.5 Medium
- qemu, debian linux +1 more Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator)... 6.5 Medium
- qemu, debian linux +1 more Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator)... 6.5 Medium
- qemu, debian linux +1 more Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS... 6.0 Medium
- siemens ruggedcom network management software A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and... 8.2 High
- siemens ruggedcom network management software The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a... 8.8 High
- vim An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch... 9.8 Critical
- vim An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0... 9.8 Critical
- grails pdf plugin XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read... 5.9 Medium
- dahuasecurity camera firmware, nvr firmware, smartpss firmware +2 more The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06,... 8.1 High
- dahuasecurity camera firmware, nvr firmware, smartpss firmware +2 more An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06... 9.8 Critical
- dahuasecurity camera firmware, nvr firmware, smartpss firmware +2 more Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400... 5.9 Medium
- mikrotik routeros The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption... 5.9 Medium
- rubyzip project rubyzip, debian linux +1 more Directory traversal vulnerability in RubyZip 9.8 Critical
- w3 high resolution time api The W3C High Resolution Time API, as implemented in various web browsers, does not consider that... 3.7 Low
- allwinner a64, amd athlon ii 640 x4, e-350 +17 more +19 more Page table walks conducted by the MMU during virtual to physical address translation leave a... 7.5 High
- allwinner a64, amd athlon ii 640 x4, e-350 +17 more +19 more Page table walks conducted by the MMU during virtual to physical address translation leave a... 7.5 High
- allwinner a64, amd athlon ii 640 x4, e-350 +17 more +19 more Page table walks conducted by the MMU during virtual to physical address translation leave a... 7.5 High
- qemu The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device... 5.5 Medium
- qemu The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator)... 5.5 Medium
- microsoft edge, internet explorer, edge and internet explorer +1 more +3 more Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the... 8.1 High
-
firebirdMageia Updated firebird packages fix security vulnerability No score - linux kernel net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel... 5.5 Medium
- ichitaro JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a... 7.5 High
- ichitaro When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls),... 8.8 High
- ichitaro When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two... 8.8 High
- libdwarf project libdwarf dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash)... 5.5 Medium
- plone Chameleon in Plone allows Authentication Bypass 4.9 Medium
- Show olderLoading…