CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- hcl software notes, ibm client application access +1 moreIBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully...5.3 Medium
- hcl software notes, ibm client application access +1 moreIBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without...7.8 High
- hcl software notes, ibm client application access +1 moreIBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL...7.8 High
- apache activemqActiveMQ's OpenWire protocol exposes certain system details as plain text3.7 Low
- gnu patchA double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.7.5 High
- ccn-liteIn CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing...9.8 Critical
- news website script project website scriptPHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.9.8 Critical
- arm mbed tls, debian linux +1 moreARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension...9.8 Critical
- arm mbed tls, debian linux +1 moreARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute...9.8 Critical
- advantech webaccessThe VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers...9.8 Critical
- hyland saperion web clientArbitrary File Read in Saperion Web Client version 7.5.2 83166.7.5 High
- hyland saperion web clientRemote Code Execution in Saperion Web Client version 7.5.2 83166.9.8 Critical
tempdircrates.io`tempdir` crate has been deprecated; use `tempfile` insteadNo score- apache jmeterMissing certificate validation in Apache JMeter9.8 Critical
- freetype, canonical ubuntu linux +1 moreAn issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the...6.5 Medium
- imagemagickA stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c...6.5 Medium
- systemd project systemd, canonical ubuntu linux, opensuse leap +2 moresystemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path...7.8 High
- gnu patch, canonical ubuntu linux +1 moreAn issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated...7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...6.5 Medium
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string...4.3 Medium
- quagga bgpd, quagga, canonical ubuntu linux +7 more +9 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing...7.5 High
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref...5.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in...5.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the...5.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter:...5.5 Medium
- gnu patchAn issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line()...5.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in...5.5 Medium
- schneider-electric struxureon gatewayA remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions...7.2 High
- schneider-electric igss mobileAn information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application...6.7 Medium
- schneider-electric igss mobileA security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application...5.9 Medium
- schneider-electric interactive graphical scada systemA security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software...7.8 High
- schneider-electric powerscada anywhereA cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider...8.1 High
firefoxUbuntufirefox regressionsNo score- exiv2In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2...6.5 Medium
- exiv2In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure...6.5 Medium
- exiv2In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in...8.1 High
- exiv2In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp,...6.5 Medium
- dell emc supportassist enterpriseDell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named ...7.0 High
- google androidIn the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader...7.8 High
- google androidA information disclosure vulnerability in the Upstream kernel network driver. Product: Android....7.5 High
- google androidA elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android....7.8 High
- google androidA elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions:...7.8 High
- google androidA information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5...7.5 High
- google androidA information disclosure vulnerability in the Android system (bluetooth). Product: Android....7.5 High
- google androidA information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc...7.5 High
- google androidA information disclosure vulnerability in the Android framework (crypto framework). Product:...7.5 High
- google androidA information disclosure vulnerability in the Android framework (ui framework). Product: Android....7.5 High
- google androidIn XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an...4.2 Medium
- google androidIn the KeyStore service, there is a permissions bypass that allows access to protected resources....7.8 High
- google androidA other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1...6.5 Medium
- Show moreLoading…