CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- google androidIn DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak....6.5 Medium
- google androidIn ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This...6.5 Medium
- google androidIn audioserver, there is an out-of-bounds write due to a log statement using %s with an array...7.5 High
- google androidIn libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead...7.8 High
- google androidIn hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the...8.8 High
- google androidA remote code execution vulnerability in the Android media framework (n/a). Product: Android....9.8 Critical
- google androidIn function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount...8.8 High
- carbonblack carbon blackcb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds...7.5 High
- carbonblack carbon blackThe cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to...4.4 Medium
- misp-project mispIn app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override...7.2 High
- apache couchdbThe Windows installer that the Apache CouchDB team provides was vulnerable to local privilege...7.8 High
- apache thriftApache Thrift Go Library Command Injection8.8 High
- finecmscontrollers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c...9.8 Critical
- progress sitefinityProgress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that...8.8 High
- progress sitefinityAuthenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication...6.1 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User...5.4 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the...5.4 Medium
- progress sitefinityProgress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka...5.4 Medium
- minibbCross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB...4.8 Medium
- typesettercms typesetterAn issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability,...8.8 High
- typesettercms typesetterAn issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers...8.0 High
- phome empirecms, dedecms +1 moreEmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a...5.3 Medium
- phome empirecmsEmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value...5.3 Medium
- multireligion responsive matrimonial project responsive matrimonialCross Site Scripting (XSS) exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2...5.4 Medium
- select your college script project your college scriptSQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter.9.8 Critical
- bitcoin mlm project mlmCross Site Scripting (XSS) exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 via a profile...5.4 Medium
- lawyer search script project search scriptCross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile...5.4 Medium
- schools alert management script project alert management scriptArbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert...8.8 High
- facebook clone script project clone scriptCross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script.5.4 Medium
- olx clone script project clone scriptPHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.6.1 Medium
- ffmpegThe decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...7.8 High
- cloudme syncAn issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can...9.8 Critical
- booking-wp-plugin booklyBookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng...6.1 Medium
- linux kernelIn the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c...9.8 Critical
- wondercmsWonderCMS version 2.4.0 contains a Stored Cross-Site Scripting on File Upload through SVG...4.4 Medium
- sensu coreLow severity vulnerability that affects sensu9.8 Critical
- validformbuilder validform builderValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form...9.8 Critical
- jenkins pipeline supporting apisArbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin8.8 High
- jenkins credentials bindingJenkins Credentials Binding Plugin has Insufficiently Protected Credentials4.3 Medium
- jenkins junitImproper Restriction of XML External Entity Reference in Jenkins JUnit Plugin8.3 High
- jenkins android lintXXE vulnerability in Jenkins Android Lint Plugin8.3 High
- jenkins ccmJenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference8.3 High
- limesurveyLimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability...8.8 High
- fmtfmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85)...7.5 High
- artifex mupdf, debian linux +1 moreArtifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that...7.8 High
- stb vorbis project vorbisSean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All...8.8 High
- nanopool claymore dual minerNanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution...7.5 High
- nasa rtretrievalframeworkNASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval...8.8 High
- nasa kodiakNASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing...8.8 High
- Show moreLoading…