CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- nasa pyblockNASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library...7.8 High
- nasa singledopNASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library (Weather...7.8 High
- securityonion squertSecurity Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection...9.8 Critical
- securityonion squertSecurity Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper...9.8 Critical
- securityonion squertSecurity Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper...9.8 Critical
- gnome librsvg, debian linux +1 moreGNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper...8.8 High
- unzip project unzipA heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of...7.8 High
- info-zip unzipAn out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform...9.1 Critical
- info-zip unzipAn out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform...9.1 Critical
- info-zip unzipA heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to...7.8 High
- info-zip unzipA heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to...7.8 High
- elsa project elsamcholste Enterprise Log Search and Archive (ELSA) version revision 1205, commit 2cc17f1 and...6.1 Medium
- linux kernelLinux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a...7.4 High
- firebase admin sdk for php project admin sdk for phpJerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability8.1 High
- insight.bitpay insight-apiInsight API transaction broadcast endpoint can result in Full Path Disclosure5.3 Medium
- electrum bitcoin walletElectrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a...5.3 Medium
- git-scm gitGIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can...5.0 Medium
- open-emr openemrOpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf...6.1 Medium
- open-emr openemrOpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can...8.8 High
- croogoCross site scripting in Croogo5.4 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability5.4 Medium
- invoiceplaneInvoice Plane version 1.5.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in...6.1 Medium
- cnvs canvasCanvs Canvas XSS Vulnerability5.4 Medium
- mauticMautic Cross Site Scripting (XSS) vulnerability6.1 Medium
- sonatype nexus repository managerMultiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka...6.1 Medium
- sonatype nexus repository managerMultiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka...6.1 Medium
- trend micro control managerXXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro...8.8 High
- trend micro control managerXXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code...8.8 High
- trend micro control managerTopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE)...8.8 High
- trend micro control managerGetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control...8.8 High
- trend micro control managerA CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control...8.8 High
- trend micro control managerAn AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro...8.8 High
- trend micro control managerA password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0...9.8 Critical
- trend micro control managerA external entity processing information disclosure (XXE) vulnerability in Trend Micro Control...6.5 Medium
- twitter kit for ios, kit +1 moreTwitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the ...5.4 Medium
- redhat automatic bug reporting toolThe crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve...7.0 High
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe memory resource controller (aka memcg) in the Linux kernel allows local users to cause a...5.5 Medium
- fishshell fish, fedoraproject fedora +1 morefish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp...7.8 High
- fortinet fortidbMultiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in...6.1 Medium
- fortinet fortiwebMultiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote...6.1 Medium
- perforce puppet enterprise, puppet enterprise, puppetlabs/apache +4 more +6 morePuppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a...8.0 High
- perforce puppet enterprise, puppet, puppet agent +3 more +5 moreIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 Medium
- apache juddiApache juddi-client vulnerable to XML External Entity (XXE)8.1 High
- hot scripts clone project scripts cloneCross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone...5.4 Medium
- imagemagick, libfpx project libfpx +1 moreThe OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16...6.5 Medium
- ibm websphere portalIBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm security guardium, security guardium database activity monitor +1 moreIBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with...4.4 Medium
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This...6.1 Medium
- omninova vobot firmwareVOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which...8.1 High
- omninova vobot firmwareAn issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download...7.5 High
- Show moreLoading…