CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- netapp oncommand workflow automationNetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass...8.1 High
- netapp snapcenter serverNetApp SnapCenter Server 1.0 and 1.0P1 allows remote attackers to partially bypass authentication...7.3 High
- netapp snapdriveNetApp SnapDrive for Windows before 7.0.2P4, 7.0.3, and 7.1 before 7.1.3P1 allows remote...7.5 High
- netapp data ontapNetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute...8.8 High
- windriver vxworksInteger overflow in the _authenticate function in svc_auth.c in Wind River VxWorks 5.5 through 6...8.1 High
- ibm corporation key lifecycle manager, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary...7.2 High
- ibm tivoli key lifecycle manager, ibm corporation key lifecycle manager, ibm security key lifecycle manager +2 moreIBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which...4.0 Medium
- ibm tivoli key lifecycle manager, ibm corporation key lifecycle manager, ibm security key lifecycle manager +2 moreIBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm tivoli key lifecycle manager, ibm corporation key lifecycle manager, ibm security key lifecycle manager +2 moreIBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes...4.3 Medium
- ibm tivoli key lifecycle manager, ibm corporation key lifecycle manager, ibm security key lifecycle manager +2 moreIBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear...6.2 Medium
- ibm corporation access manager, ibm security access manager 9.0 firmware, security access manager for mobile +2 more +4 moreIBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to...5.5 Medium
- exponentcms exponent cmsMultiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to...9.8 Critical
- gradleObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a...9.8 Critical
- php-gettext project php-gettextEval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute...9.8 Critical
- gnu coreutilschroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent...6.5 Medium
- kernel util-linuxrunuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI...7.8 High
- atutorCross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2...8.8 High
- perlThe VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a...9.8 Critical
- freebsdbsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd...5.5 Medium
irssi-otrMageiaUpdated irssi-otr packages fix security vulnerabilityNo scoreirssiSUSESecurity update for irssiNo score- linux kernel, google android +1 moreRace condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel...7.8 High
tiffDebiantiff - regression updateNo score- gnome gtk-vnc, fedoraproject fedora +1 moreMultiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set...9.8 Critical
- gnome gtk-vnc, fedoraproject fedora +1 moregtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which...7.8 High
- php, canonical ubuntu linux +1 moreIn PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of...7.5 High
- linux kernel, google android +1 moreThe aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict...7.8 High
firefoxUbuntufirefox regressionNo score- pear html ajaxPEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer...9.8 Critical
- zoneminderA file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x...5.5 Medium
- zoneminderZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF ...8.8 High
- zoneminderMultiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder...6.1 Medium
- exponentcms exponent cmsAn issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be...9.8 Critical
- dotcmsXSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us...6.1 Medium
- dotcmsXSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events...6.1 Medium
- dotcmsXSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID...5.4 Medium
- dnnsoftware dotnetnukeThe installation wizard in DotNetNuke (DNN) allows privilege escalation9.8 Critical
- libgit2 project libgit2The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1...5.9 Medium
- libgit2 project libgit2The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote...7.5 High
- libgit2 project libgit2Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart...9.8 Critical
- linux kerneldrivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with...7.8 High
- linux kerneldrivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the...7.8 High
- linux kernelThe smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts...5.5 Medium
- linux kernelThe crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the...7.8 High
- linux kernelinclude/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a...5.5 Medium
- linux kernelThe vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the...5.5 Medium
- linux kernelInteger overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore...7.8 High
- linux kernelOff-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5...5.5 Medium
- linux kernelThe klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel...5.5 Medium
- linux kernelThe freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5...7.8 High
- Show moreLoading…