CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- moxa edr-810 firmwareAn issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform...7.5 High
- honeywell experion process knowledge systemAn issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion...3.7 Low
- ecava integraxorAn issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server...9.8 Critical
- siemens eta4 firmware, eta2 firmware +1 moreAn issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM...7.5 High
- schneider-electric powerlogic pm8ecc firmwareAn issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older....9.8 Critical
- schneider-electric ion8650, ion8800, ion5000 +3 more +5 moreAn issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX...9.8 Critical
- visonic powerlink2 firmwareAn issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware...5.3 Medium
- visonic powerlink2 firmwareAn issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware...6.1 Medium
- schneider-electric ion8650, ion8800, ion5000 +3 more +5 moreAn issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX...8.8 High
- delta electronics ispsoft, pmsoft, wplsoft +2 moreAn issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft,...7.8 High
- ca technologies unified infrastructure managementAn issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The...8.6 High
- delta electronics ispsoft, pmsoft, wplsoft +2 moreAn issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft,...7.8 High
- omnimetrix omniviewAn issue was discovered in OmniMetrix OmniView, Version 1.2. Insufficient password requirements...7.5 High
- fatek automation fv designer, automation pm designer +1 moreAn issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV...7.5 High
- fatek automation fv designer, automation pm designer +1 moreAn issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV...8.8 High
- omnimetrix omniviewAn issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application...7.5 High
- locusenergy lgate firmwareAn issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101,...8.6 High
- adcon telemetry a850 telemetry gateway base station firmwareAn issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface...6.1 Medium
- sauter-controls novaweb web hmiAn issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism...7.2 High
- bubblewrap project bubblewrapBubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain...7.0 High
- exponentcms exponent cmsinstall/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via...9.8 Critical
- froxlorFroxlor guessable password reset token9.8 Critical
- samsung mobileSamsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of...7.5 High
- samsung mobileSamsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service...5.5 Medium
- puppet enterprise, marionette collective +1 moreMCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers...9.8 Critical
- puppet enterprise, puppetlabs puppet enterprise +1 moreThe Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not...5.3 Medium
- freedesktop polkit, redhat enterprise linux +1 morepkexec, when used with --user nonpriv, allows local users to escape to the parent session via a...7.8 High
- gosa project gosaCross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa...6.1 Medium
- intel epo, mcafee epolicy orchestrator +1 moreCross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1...5.4 Medium
- intel mcafee agent, mcafee agent +1 moreUnvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee...5.9 Medium
- fortinet fortimanager, fortimanager firmware +1 moreAn improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and...7.4 High
- canonical ubuntu linux, debian linux +1 moreIt was discovered that a programming error in the processing of HTTPS requests in the Apache...7.5 High
- canonical ubuntu linux, debian linux, libjpeg-turbo +1 more +3 moreThe cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer...8.8 High
- openenergymonitor emoncmsAn issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient...6.1 Medium
- caddy project caddyAn issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to...6.1 Medium
- netresearch contexts wurflAn issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due...6.1 Medium
- ionizecms ionizeAn issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient...6.1 Medium
- phalconeye project phalconeyeAn issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to...6.1 Medium
- calibre-ebook calibreThe E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a...5.5 Medium
- nitro pro, gonitro nitro pdf pro +1 moreA remote out of bound write / memory corruption vulnerability exists in the PDF parsing...8.8 High
- nitro pro, gonitro nitro pdf pro +1 moreA potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro...8.8 High
- nitro pro, gonitro nitro pdf pro +1 moreA remote out of bound write / memory corruption vulnerability exists in the PDF parsing...8.8 High
- serialize-to-js project serialize-to-jsCode Execution Through IIFE in serialize-to-js9.8 Critical
- poodll moodle-filter poodllAn issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability...6.1 Medium
- wp mail project mailAn issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter...6.1 Medium
- sivann it items databaseAn issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to...6.1 Medium
- fastspot bigtree-form-builderAn issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability...6.1 Medium
mysql-5.5Debianmysql-5.5 - version number correctionNo score- vimvim before patch 8.0.0322 does not properly validate values for tree length when handling a spell...9.8 Critical
- conversejs converse.jsUser Impersonation in converse.js5.9 Medium
- Show moreLoading…