CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- microsoft windows 7, windows 8, nomachine +1 more +3 more An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS... 7.8 High
- blackcat-cms blackcat cms Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote... 7.5 High
- vestacp control panel Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary... 8.8 High
- gnu binutils The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor ... 5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 more dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils... 5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 more The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as... 5.5 Medium
- bonitasoft bonita bpm portal Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers... 6.1 Medium
- apache openmeetings Apache OpenMeetings may allow authenticated attacker to deny service for privileged users 6.5 Medium
- activepdf toolkit The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is... 9.8 Critical
- ibm tririga application platform IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1... 5.3 Medium
- ibm bigfix platform Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5... 8.8 High
- ibm bigfix platform IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users... 8.8 High
- entrepreneur job portal script project job portal script PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category... 4.8 Medium
- parallels remote application server In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a... 7.5 High
- wireshark In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, ui/failure_message.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-pcp.c has a memory leak. 7.5 High
- wireshark In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-h223.c has a memory leak. 7.5 High
- wireshark In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-multipart.c has a memory... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/oids.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-giop.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-smb2.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak. 7.5 High
- wireshark In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-isup.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-tn3270.c has a memory leak. 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the ADB dissector could crash with a heap-based... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the Kerberos dissector could crash. This was... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the IEEE 802.15.4 dissector could crash. This... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the MP4 dissector could crash. This was... 7.5 High
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the LWAPP dissector could crash. This was... 7.5 High
- [unknown] cloudforms A flaw was found in the CloudForms account configuration when using VMware. By default, a shared... 7.4 High
- ffmpeg, debian linux +1 more The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote... 6.5 Medium
- limesurvey, debian linux +1 more LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application... 9.1 Critical
- joomlaworks k2 ** DISPUTED ** The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory... 7.5 High
- school management script project management script SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and... 9.8 Critical
- sam2p project sam2p, debian linux +1 more There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p... 9.8 Critical
- sam2p project sam2p, debian linux +1 more There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4... 9.8 Critical
- sam2p project sam2p, debian linux +1 more There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a... 9.8 Critical
- sam2p project sam2p, debian linux +1 more There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in... 9.8 Critical
- wiris mathtype An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.... 9.8 Critical
- wiris mathtype A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.... 9.8 Critical
- wiris mathtype An out-of-bounds write (Remote Code Execution) issue was discovered in Design Science MathType 6... 9.8 Critical
- wiris mathtype A stack-based buffer overflow (Remote Code Execution) issue was discovered in Design Science... 9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 more Apache Tomcat unauthorized access vulnerability 5.9 Medium
- postgresql, canonical ubuntu linux, redhat cloudforms +2 more A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other... 8.8 High
- dovecot, canonical ubuntu linux, debian linux +2 more A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random... 5.9 Medium
- dovecot, debian linux, ubuntu +2 more A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out... 5.9 Medium
- zsh, canonical ubuntu linux +1 more In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an... 9.8 Critical
- lingyun lyadmin lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config... 4.8 Medium
- Show olderLoading…