CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- inca nprotect avsIn nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a...7.8 High
- inca nprotect avsIn nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a...7.8 High
- inca nprotect avsIn nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause...7.8 High
- simplesamlphp, debian linux +1 moreSimpleSAMLphp Use of insecure connection charset (sqlauth module)9.8 Critical
- simplesamlphpSimpleSAMLphp Open redirection protection bypass6.1 Medium
- simplesamlphp saml2, debian linux +1 moreSimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability7.5 High
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling...6.5 Medium
- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the...6.5 Medium
- perforce puppet enterprise, puppet enterprise +1 morePuppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users...7.5 High
- perforce puppet enterprise, puppet enterprise +1 moreIn Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain...6.5 Medium
- perforce puppet enterprise, puppet enterprise +1 moreVersions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective...4.9 Medium
- apache cordova, apache software foundation cordova android +1 moreAfter the Android platform is added to Cordova the first time, or after a project is created...7.4 High
- pivotal software cloud foundry uaa, cloud foundry cf-deployment, cloud foundry cf-release +1 more +3 moreCloud Foundry UAA SessionID present in Audit Event Logs8.8 High
- evergreen-ils evergreenEvergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to...7.5 High
- evergreen-ils evergreenEvergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission...6.5 Medium
- open atrium project atriumThe OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal...7.5 High
- open atrium project atriumThe Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows...6.5 Medium
- open atrium project atriumMultiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open...8.8 High
- gdata-software totalprotectionThe MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users...6.7 Medium
- openvz vzkernelThe open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the...6.5 Medium
- sugarcrmXML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17...9.8 Critical
- evergreen-ils evergreenThe open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4...6.5 Medium
- packetfencehtml/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP...9.8 Critical
- packetfenceThe check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote...9.8 Critical
- gnu glibc, netapp cloud backup, data ontap edge +12 more +14 moreAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...9.8 Critical
- citrix netscalerCitrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by...8.8 High
- jordy meow wp retina 2xCross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to...6.1 Medium
- kkcald project kkcald, kkcal epg search result viewer(kkcald) +1 moreBuffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers...9.8 Critical
- kkcald project kkcald, kkcal epg search result viewer(kkcald) +1 moreCross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and...8.8 High
- kkcald project kkcald, kkcal epg search result viewer(kkcald) +1 moreCross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows...6.1 Medium
- nibbleblogNibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store...5.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreIt was possible for double OGNL evaluation in certain redirect action and in WebWork URL and...9.8 Critical
smarty3Debiansmarty3 - regression updateNo score- gdraheim zziplib, canonical ubuntu linux +1 moreIn ZZIPlib 0.13.67, there is a memory alignment error and bus error in the...6.5 Medium