CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- ibm emptoris sourcingOpen redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x...5.4 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive...7.5 High
- ibm tivoli business service managerCross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1...5.4 Medium
- ibm tivoli integrated portalCross-site scripting (XSS) vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15...5.4 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1...5.4 Medium
- projectpierMultiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote...6.1 Medium
- echor project echorEchor Ruby Gem credentials can be stolen via process table monitoring7.8 High
- echor project echorEchor contains Command Injection7.8 High
- joommasters jms musicSQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword,...9.8 Critical
- janguo jimtawlArbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view...9.8 Critical
- jextn reverse auctionSQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products...9.8 Critical
- jextn je paypervideoSQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter...9.8 Critical
- jextn membershipSQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan...9.8 Critical
- ezcode event managerSQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug...9.8 Critical
- jextn classifiedSQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid=...9.8 Critical
- dojotoolkit dojodijit editor cross-site scripting vulnerability6.1 Medium
- intel graphics driverPointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows...7.8 High
- simplesamlphp, debian linux +1 moreSimpleSAMLphp Signature validation bypass8.1 High
- simplesamlphp, debian linux +1 moreSimpleSAMLphp XSS Vulnerability6.1 Medium
- flatpak, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreIn dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3,...8.8 High
- gnu glibcThe malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on...9.8 Critical
- micro focus fortify audit workbench (awb) and micro focus fortify software security center (ssc), microfocus fortify audit workbench, fortify software security center +2 moreMFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (SSC), XML External Entity Injection7.3 High
- atlassian confluenceVarious resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to...6.1 Medium
- atlassian confluenceThe viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows...6.1 Medium
- atlassian confluenceThe usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote...4.8 Medium
- atlassian confluenceThe editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote...5.4 Medium
- atlassian bambooThe plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote...5.4 Medium
- atlassian bambooThe signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to...6.1 Medium
- atlassian bambooThe saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote...8.8 High
- atlassian bambooThe update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote...8.8 High
- atlassian bambooThe viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0...5.4 Medium
- atlassian bambooThe viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote...5.4 Medium
- atlassian jiraThe IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows...6.1 Medium
- atlassian bitbucket, bitbucket server +1 moreThe repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote...5.3 Medium
- atlassian bitbucket, bitbucket server +1 moreThe git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14...6.5 Medium
- atlassian bitbucket, bitbucket server +1 moreThe Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote...4.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye...4.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0...5.4 Medium
- canonical ltd. snapdIn snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's acces…7.5 High
- monstraMonstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via...5.4 Medium
- webmproject libwebmA use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was...9.8 Critical
- ipswitch moveitIpswitch MoveIt v8.1 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability, as...6.1 Medium
- artifex mupdf, debian linux +1 morepdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream...5.5 Medium
- gnu binutilsIn GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section()...7.8 High
- gdraheim zziplibIn ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by...6.5 Medium
- flexense syncbreezeA buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4...9.8 Critical
- icingaAn issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after...5.5 Medium
- mantisbtview_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to...5.3 Medium
- lcdf gifsicleA double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker...7.8 High
- inca nprotect avsIn nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a...7.8 High
- Show moreLoading…