CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- quest netvault backupThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- quest netvault backupThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- quest netvault backupThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- quest netvault backupThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- zblogcn z-blogphpZ-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to...5.3 Medium
- vanderbilt redcapA SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing...8.8 High
- kddi anshin net security, kddi corporation anshin net security for windows +1 moreUntrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and...7.8 High
- futomi mp form mail cgi, futomi co., ltd. mp form mail cgi ecommerce edition +1 moreMP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute...9.8 Critical
- mt systems co., ltd. mts simple booking business, mts simple booking c, mtssb.mt-systems simple booking +2 moreCross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1...6.1 Medium
- i-o data device, inc. ip address setting tool "magicalfinder", iodata bx-vp1 firmware, gv-ntx1 firmware +43 more +45 moreDevices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow...6.8 Medium
- red hat, inc. 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux +3 more +5 moreA stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x...7.5 High
- mybbMyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.5.4 Medium
- wiresharkThe netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a...9.8 Critical
- etherpadEtherpad Lite Access Restriction Bypass9.8 Critical
- etherpad litestatic/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.6.1 Medium
- cisco content security management appliance, email security appliance firmware +1 moreA vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content...6.5 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine of Cisco Firepower System Software could allow an...5.3 Medium
- cisco prime networkA vulnerability in the TCP throttling process of Cisco Prime Network could allow an...8.6 High
- cisco unified communications managerA vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote...4.3 Medium
- cisco mobility services engineA vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an...5.3 Medium
- cisco ios xr, carrier routing system +1 moreA vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could...8.6 High
- cisco data center analytics frameworkA vulnerability in the web-based management interface of Cisco Data Center Analytics Framework...6.1 Medium
- cisco data center analytics frameworkA vulnerability in the web-based management interface of Cisco Data Center Analytics Framework...6.1 Medium
- cisco rv132w firmware, rv134w firmware +1 moreA vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco...9.8 Critical
- cisco vpn routers, rv132w firmware, rv134w firmware +2 moreA vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2...9.8 Critical
- cisco ios, ios xe +1 moreA Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could...5.5 Medium
- cisco starosA vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series...4.4 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager could allow an...4.3 Medium
- cisco conference directorA vulnerability in certain authentication controls in the account services of Cisco Spark could...4.7 Medium
- cisco asr 5000 firmware, asr 5500 firmware +1 moreA vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet...8.6 High
- cisco mobility services engineA vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an...7.2 High
- cisco unified computing system central softwareA vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote...8.8 High
- advancemame advancecomp, amadvance advancecomp:, canonical ubuntu linux +1 more +3 moreAn out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02...3.3 Low
- python, canonical ubuntu linux +1 morePython 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python...3.6 Low
- gnupg libgcryptcipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly...7.5 High
- google chrome osInsufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed...7.8 High
- google chrome osInappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a...7.4 High
- multilanguage real estate mlm script project real estate mlm scriptPHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input...5.4 Medium
- naukri clone script project clone scriptPHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.5.4 Medium
- doctor search script project search scriptPHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.5.4 Medium
- golang go, debian linux, redhat enterprise linux server +3 more +5 moreGo before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get"...7.8 High
drupal/entity_ref_tab_formatterPackagistThis module enables you to show referenced entities in tabs. The module doesn't sufficiently sanitize the body fields of the referenced entities when it prints them to the tabs. This vulnerability is…No score- cozyCozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript...6.1 Medium
- ibm websphere mqGSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1...7.5 High
- ibm api connectIBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- ibm content navigatorIBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An...7.8 High
- ibm api connectIBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query...4.3 Medium
- zohocorp manageengine admanager plus/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL...8.8 High
- ibm aixIBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally...7.8 High
- ccn-liteccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service...7.5 High
- Show moreLoading…