CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- xabberAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- movimXMPP Clients User Impersonation Vulnerability in Movim Moxl5.9 Medium
- mcabberAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- jitsiAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- jappix project jappixAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- psi-plus psi\+An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- profanity project profanityAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- poezio, sleekxmpp project sleekxmpp, slixmpp project slixmpp +2 moreSleekXMPP and Slixmpp Incorrect Implementation of Message Carbons5.9 Medium
- chatsecure, zom +1 moreAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- yaxim bruno, yaxim +1 moreAn incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a...5.9 Medium
- node-serialize project node-serializeCode Execution through IIFE in node-serialize9.8 Critical
- firejail project firejailFirejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address...8.8 High
- firejail project firejailFirejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority...8.8 High
- cisco anyconnect secure mobility clientA vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client...7.8 High
- cisco adaptive security appliance softwareA vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality...8.8 High
- norwegian-air norwegian air kioskThe Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers...6.6 Medium
- gstreamer, debian linux, redhat enterprise linux desktop +5 more +7 moreThe gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in...7.5 High
- gstreamer, debian linux +1 moreThe gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins...7.5 High
- gstreamerThe gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins...5.5 Medium
- gstreamerMultiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref,...7.5 High
- gstreamerThe gst_date_time_new_from_iso8601_string function in gst/gstdatetime.c in GStreamer before 1.10...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreA BIG-IP virtual server configured with a Client SSL profile that has the non-default Session...7.5 High
- fortinet connectInsufficient verification of uploaded files allows attackers with webui administrators privileges...7.2 High
- nlnetlabs nsdNSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk...7.5 High
- knot-dns knot dnsKnot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion...8.6 High
- simplemachines simple machines forumLogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object...8.8 High
- simplemachines simple machines forumPackages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object...9.8 Critical
- jenkins build failure analyzerCross-site Scripting in Jenkins Build Failure Analyzer plugin6.1 Medium
- jenkins image galleryJenkins Image Gallery Plugin allows Path Traversal6.5 Medium
- jenkins tapJenkins TAP Plugin allows Path Traversal7.5 High
- jenkins script securityJenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection7.3 High
- jenkins extra columnsJenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)5.4 Medium
- ffmpegHeap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x...9.8 Critical
- ffmpegHeap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5,...9.8 Critical
- ffmpegHeap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1...9.8 Critical
- dotclearMultiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2...8.8 High
- dotclearCross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows...6.1 Medium
- netcommwireless hspa 3g10wve firmwareping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101...9.8 Critical
- netcommwireless hspa 3g10wve firmwareping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101...7.3 High
- viewvc, debian linux, opensuse leap +2 moreCross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC...6.1 Medium
- gstreamerThe gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer...7.5 High
- gstreamerThe gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...5.5 Medium
- gstreamerThe html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in...5.5 Medium
- gstreamerThe gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer...7.5 High
- gstreamerThe qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer...7.5 High
- gstreamerThe gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...7.5 High
- gstreamerThe gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...5.5 Medium
- mariadb, oracle mysql, debian linux +6 more +8 moreCrash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB...7.5 High
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to Crash7.5 High
- debian linux, linux kernel, redhat enterprise linux +5 more +7 moreA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...5.5 Medium
- Show moreLoading…