CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- cisco intrusion prevention system device managerA vulnerability in the web-based management interface of the Cisco Intrusion Prevention System...5.3 Medium
- cisco secure access control systemA vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow...7.5 High
- cisco secure access control systemA vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow...6.1 Medium
- cisco secure access control systemAn XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access...4.3 Medium
- cisco secure access control systemA vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated,...6.1 Medium
- cisco meeting serverAn HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server ...8.1 High
- cisco unified communications managerA vulnerability in the web framework Cisco Unified Communications Manager could allow an...4.3 Medium
- cisco identity services engine softwareA vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an...8.8 High
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager could allow an...6.1 Medium
- cisco meeting serverA vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an...7.5 High
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...6.1 Medium
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...6.1 Medium
- cisco web security appliance, email security appliance firmware +1 moreA vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS...5.8 Medium
- cisco unified communications managerA vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an...6.1 Medium
- siemens simatic logonSiemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a...9.0 Critical
tomcat8Debiantomcat8 - regression updateNo scoretomcat7Debiantomcat7 - regression updateNo scoretomcat7Debiantomcat7 - regression updateNo score- munin-monitoring munin, debian linux +1 moreMunin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have...9.8 Critical
- apache openoffice, debian linux, redhat enterprise linux desktop +5 more +7 moreBy exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could...5.5 Medium
- qemu, qemu qemu:, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC...5.4 Medium
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is...5.5 Medium
- debian linux, linux util-linux, redhat enterprise linux desktop +4 more +6 moreA race condition was found in util-linux before 2.32.1 in the way su handled the management of...5.5 Medium
- linux kernelInteger overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the...7.8 High
- aerospike database serverAn exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle...9.8 Critical
- aerospike database serverAn exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing...9.8 Critical
- aerospike database serverAn exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike...7.5 High
- digisol dg-hr1400 firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG...8.8 High
- dell vce vision intelligent operationsThe "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a...7.5 High
- dell vce vision intelligent operationsThe System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement...6.7 Medium
- mail-masta project mail-mastaA SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress....7.2 High
- mail-masta project mail-mastaA SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress....7.2 High
- mail-masta project mail-mastaA SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress....7.2 High
- mail-masta project mail-mastaA SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress....9.8 Critical
- faststone maxviewFastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service ...5.5 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...5.3 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...5.3 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...9.8 Critical
- metalgenix genixcmsCSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The...9.8 Critical
- gomlab gom playerGOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption)...7.8 High
- trendmicro interscan web security virtual applianceMultiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet...5.4 Medium
- trendmicro interscan web security virtual appliancePrivilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in...8.8 High
- trendmicro interscan web security virtual applianceSensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro...7.8 High
- trendmicro interscan web security virtual applianceRemote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web...9.9 Critical
- zyxel nwa3560-n firmware, usg50 firmware +1 moreZyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moregdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008...5.5 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreF5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account...5.3 Medium
- netpbmA memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG...3.3 Low
- netpbmA null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted...3.3 Low
- Show moreLoading…