CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
python-cryptoDebianpython-crypto - security updateNo score- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free...9.8 Critical
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows...7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could...7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference...7.5 High
- dan bloomberg leptonica, debian linux +1 moreAn exploitable command injection vulnerability exists in the gplotMakeOutput function of...7.0 High
- openr opentmpfilesOpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows...5.5 Medium
- ccn-liteCCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service (buffer overflow) or...9.8 Critical
- brocade communications systems, inc. ruckus networks solo aps and sz managed aps, ruckuswireless smartzone managed access point firmware, solo access point firmware +2 moreRuckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs...8.8 High
- brocade communications systems, inc. ruckus networks unleashed aps and zone director, ruckuswireless h320 firmware, h510 firmware +13 more +15 moreRuckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone...8.8 High
- arm mbed tls, debian linux +1 moreIn ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK...9.8 Critical
- trendnet tew-751dr firmware, tew-752dru firmware, tew733gr firmware +2 moreTRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow...7.5 High
- myrepos project myreposwebcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone,...7.5 High
- hclsoftware connectionsIBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files,...8.8 High
- apache jmeterMissing certificate validation in Apache JMeter9.8 Critical
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user may retrieve information on SAP Internet Graphic Server...8.8 High
- sap internet graphics serverUnder certain conditions an unauthenticated malicious user can prevent legitimate users from...6.5 Medium
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...7.5 High
- sap internet graphics serverUnder certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53,...7.5 High
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user can prevent legitimate users from accessing the SAP...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user can inject log files of SAP Internet Graphics Server ...5.7 Medium
- sap internet graphics serverStored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7...6.1 Medium
- sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking an out of bounds buffer overflow can prevent...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking a divide by zero crash can prevent legitimate...6.5 Medium
- sap internet graphics serverUnder certain conditions a malicious user provoking a Null Pointer dereference can prevent...6.5 Medium
- sap internet graphics serverReflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45...6.1 Medium
- sap internet graphics serverA vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow...6.5 Medium
- sap erp financials information systemSAP ERP Financials Information System (SAP_APPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAP_FIN...8.8 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given...6.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data...6.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, some general server statistics and status...6.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...8.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...8.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...6.5 Medium
- sap hana extended application servicesUnder certain circumstances, a specific endpoint of the Controller's API could be misused by...7.5 High
- sap hana extended application servicesA plain keystore password is written to a system log file in SAP HANA Extended Application...6.5 Medium
- sap netweaver java web applicationThe SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not...6.1 Medium
- sap bi launchpadServer Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad...5.3 Medium
- sap hanaUnder certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access...5.3 Medium
- sap s4fnd, sap se crm webclient ui, sap customer relationship management webclient ui +2 moreSAP CRM WebClient UI 7.01, 7.31, 7.46, 7.47, 7.48, 8.00, 8.01, S4FND 1.02, does not sufficiently...6.1 Medium
- apache qpid dispatch, apache software foundation qpid dispatch router +1 moreA Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8...6.5 Medium
- dedecmsDedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include...7.5 High
- wago pfc200 firmwareAn Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions...9.8 Critical
- ccn-liteIn CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field...9.8 Critical
- ibm aixA software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow...9.1 Critical
- Show moreLoading…