CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- linux kernelThe nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8...6.5 Medium
- linux kernelThe load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4...8.4 High
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...7.5 High
- linux kernelThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not...4.3 Medium
- sendquick avera sms gateway firmware, entera sms gateway firmware +1 moreAn issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could...6.2 Medium
- sendquick avera sms gateway firmware, entera sms gateway firmware +1 moreAn issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application...7.5 High
- sendquick avera sms gateway firmware, entera sms gateway firmware +1 moreAn issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command...9.8 Critical
- sanadata sanacmsCross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote...6.1 Medium
- splunkSplunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3...6.5 Medium
- plonePlone XSS in Zope ZMI6.1 Medium
- php-gettext project php-gettext, fedoraproject fedora, opensuse leap +1 more +3 moreThe plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote...9.8 Critical
- forgerock racf connectorUnspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and...8.1 High
- unisys mcp-firmwareUnisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4...6.8 Medium
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...7.5 High
- alinto sogoMemory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory...6.5 Medium
- artifex mujs, fedoraproject fedora +1 moreInteger overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before...7.5 High
- webmproject libwebp, fedoraproject fedora +1 moreMultiple integer overflows in libwebp allows attackers to have unspecified impact via unknown...3.3 Low
- gnome librsvgThe rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote...5.5 Medium
- libavformat project libavformatThe avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer,...5.5 Medium
- debian linux, mini-xml project mini-xml +1 moreThe mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote...5.5 Medium
- debian linux, mini-xml project mini-xml +1 moreThe mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote...5.5 Medium
- cisco ios xeA vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers...6.8 Medium
- cisco secure firewall threat defenseA vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower...5.3 Medium
- cisco ios xeA vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series...6.5 Medium
- cisco email security appliance firmwareA vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS...5.8 Medium
- cisco secure firewall management centerA vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote...5.8 Medium
- cisco industrial ethernet 2000 series firmwareA vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco...6.8 Medium
- cisco prime service catalogA vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated,...5.4 Medium
- cisco secure firewall management centerA vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC)...5.8 Medium
- cisco secure firewall threat defenseA vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation...5.3 Medium
- emc smarts network configuration managerEMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x,...9.8 Critical
- emc smarts network configuration managerEMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x,...9.8 Critical
- emc documentum eroomEMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom...9.8 Critical
- emc documentum d2EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability...6.3 Medium
- emc documentum d2EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site...6.1 Medium
- emc isilon onefsEMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10...7.2 High
- dell bsafe crypto-jEMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A...3.7 Low
- dell emc data domain osEMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions...6.7 Medium
- dell bsafe crypto-jAn issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper...7.5 High
- dell emc data protection advisorEMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6...7.5 High
- dell recoverpoint for virtual machines, emc recoverpoint +1 moreEMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions...6.7 Medium
- dell recoverpoint for virtual machines, emc recoverpoint +1 moreEMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions...4.4 Medium
- rsa web threat detectionEMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat...6.1 Medium
- emc powerpath virtual applianceEMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2...6.4 Medium
- kitfox svg salamander, debian linux +1 moreServer Side Request Forgery in svgSalamander7.4 High
- webkitJavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read)...5.5 Medium
- ibm aixIBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail...7.8 High
- ibm corporation key lifecycle manager, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive...5.9 Medium
- ibm corporation key lifecycle manager, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which...8.8 High
- ibm corporation key lifecycle manager, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized...5.3 Medium
- Show moreLoading…