CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- gnu binutilsThe bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library ...5.5 Medium
- vyaire carefusion upgrade utilityA uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade...7.0 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This...7.8 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This...9.8 Critical
- apache alluraIn Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the...7.5 High
- unbit uwsgiThe uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based...9.8 Critical
- wordpressIn WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource...7.5 High
- acme thttpd, mini httpd +1 moreThe htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by...9.8 Critical
- sandstormA Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before...8.1 High
- sandstormSandstorm before build 0.203 allows remote attackers to read any specified file under /etc or ...6.5 Medium
- sandstormA remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a...9.8 Critical
- sandstormThe Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows...6.5 Medium
- flexense syncbreezeA buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze...8.8 High
- tiki tikiwiki cms\/groupwaretiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie.6.1 Medium
- ring firmwareRing (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information...4.6 Medium
- virtuemartCross-site scripting (XSS) vulnerability in assets/js/vm2admin.js in the VirtueMart component...5.4 Medium
- nagios business process intelligenceCross-site scripting (XSS) vulnerability in Nagios Business Process Intelligence (BPI) before 2.3...6.1 Medium
- dockerDocker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect...8.1 High
- boot2dockerboot2docker 1.2 and earlier allows attackers to conduct cross-site request forgery (CSRF) attacks...8.8 High
- boot2dockerThe Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP...8.8 High
- kaspersky secure mail gatewayWebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1.6.1 Medium
- kaspersky secure mail gatewayLocal Privilege Escalation in Kaspersky Secure Mail Gateway version 1.1.7.8 High
- kaspersky secure mail gatewayConfiguration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway...9.8 Critical
- kaspersky secure mail gatewayCross-site Request Forgery leading to Administrative account takeover in Kaspersky Secure Mail...8.8 High
- zblogcn z-blogphpZ-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting...6.5 Medium
- flickrrss project flickrrssA cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for...6.1 Medium
- flickrrss project flickrrssA cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for...6.1 Medium
- flickrrss project flickrrssThe flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.8.8 High
- flickrrss project flickrrssA cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for...6.1 Medium
- apache cloudstackApache CloudStack 4.1 to 4.8.1.0 and 4.9.0.0 contain an API call designed to allow a user to...9.8 Critical
- apache cloudstackIn Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as...4.3 Medium
- google androidNVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in...7.8 High
- google androidNVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in...7.8 High
- f5 big-ip pem, big-ip policy enforcement manager +1 moreIn versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL...6.8 Medium
- grammarlyThe Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover...8.8 High
- west-wind web connectionWest Wind Web Server 6.x does not require authentication for /ADMIN.ASP.8.8 High
- web2pyThe secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to...9.8 Critical
- web2pyweb2py exposure of sensitive information5.5 Medium
- web2pyweb2py remote code execution via hardcoded encryption key in session.connect function9.8 Critical
- web2pyweb2py before 2.14.1, when using the standalone version, allows remote attackers to obtain...7.8 High
- parsecgaming parsec, uncurl project uncurl +1 moreIn the uncurl_ws_accept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140...8.8 High
- jlike project jlikeInformation Leakage exists in the jLike 1.0 component for Joomla! via a task=getUserByCommentId...7.5 High
- jsp tickets project ticketsSQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in...9.8 Critical
- zh baidumap project baidumapSQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a...9.8 Critical
- zh yandexmap project yandexmapSQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a...9.8 Critical
- zh googlemap project googlemapSQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a...9.8 Critical
- avaya auraSystem Manager in Avaya Aura before 7.1.2 does not properly use SSL in conjunction with...7.5 High
- micropoint proactive defenseIn Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows...7.8 High
- micropoint proactive defenseIn Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110005.sys) allows...7.8 High
- micropoint proactive defenseIn Micropoint proactive defense software 2.0.20266.0146, the driver file (mp110009.sys) allows...7.8 High
- Show moreLoading…