CVEs published in February 2017
955 vulnerabilities, 110 critical, 2 exploited.
- plonePlone vulnerable to unauthorized disclosure of site content5.3 Medium
- plonePlone vulnerable to privilege escalation in WebDAV7.3 High
- ibm jazz for service management, dashboard application services hub +1 moreIBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery...8.8 High
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object...3.1 Low
- ibm tivoli storage managerIBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator...7.2 High
- tnef project tnef, debian linux +1 moreAn issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the...7.8 High
- tnef project tnef, debian linux +1 moreAn issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the...7.8 High
- tnef project tnef, debian linux +1 moreAn issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap...7.8 High
- tnef project tnef, debian linux +1 moreAn issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src...7.8 High
- radare radare2The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to...5.5 Medium
- artifex afpl ghostscriptMultiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the...7.8 High
- gnu libibertyThe d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial...5.5 Medium
- paypal merchant-sdk-phpPayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability6.1 Medium
- wolfsslIn versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key...5.5 Medium
- bilboplanetMultiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to...6.1 Medium
- tcpdf project tcpdftcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.7.5 High
- ibm rational rhapsody design managerIBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External...8.1 High
- ibm rational doors next generation, rational requirements composer +1 moreIBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- hcl software inotesIBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to...6.1 Medium
- dlink websmart dgs-1510 series firmwareD-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and...7.5 High
- dlink websmart dgs-1510 series firmwareD-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and...9.8 Critical
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9....7.8 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9....5.5 Medium
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9....7.8 High
- linux kernelThe tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote...7.5 High
- disksavvy enterpriseBuffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers...9.8 Critical
- netgear dgn2200 firmware, wireless router dgn2200 +1 moreping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated...9.8 Critical
imagemagickUbuntuimagemagick regressionNo score- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring...6.5 Medium
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue...6.5 Medium
- ibm websphere mqUnder non-standard configurations, IBM WebSphere MQ might send password data in clear text over...5.9 Medium
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper...6.5 Medium
- opentext documentum d2OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute...9.8 Critical
- opentext documentum content serverOpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL...8.8 High
- gpgtools libmacgpgThe installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before...7.8 High
- curlcurl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks...4.3 Medium
- dell sonicwall secure remote access serverThe SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote...9.8 Critical
- dell sonicwall secure remote access serverThe SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote...9.8 Critical
- dell sonicwall secure remote access serverThe SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote...9.8 Critical
- cisco secure firewall management centerA vulnerability in the web framework of Cisco Firepower Management Center could allow an...5.4 Medium
- cisco prime collaboration assuranceA vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance...6.1 Medium
- cisco prime collaboration assuranceA vulnerability in exporting functions of the user interface for Cisco Prime Collaboration...4.3 Medium
- cisco prime collaboration assuranceA vulnerability in the file download functions for Cisco Prime Collaboration Assurance could...4.3 Medium
- Show moreLoading…