CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
gtk2SUSESecurity update for gtk2No score- ultimatemember ultimate membercore/lib/upload/um-file-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross...6.1 Medium
- ultimatemembercore/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross...6.1 Medium
- frontaccountingFrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin...8.8 High
- f-secure radarF-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl...6.1 Medium
- f-secure radarF-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter...6.1 Medium
- netfortris trixboxtrixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages...6.5 Medium
- netfortris trixboxtrixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language...5.4 Medium
- netfortris trixboxtrixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint...8.8 High
- quagga bgpd, quagga, canonical ubuntu linux +1 more +3 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent...7.1 High
- leptonica, debian linux +1 moreLeptonica before 1.75.3 does not limit the number of characters in a %s format argument to fscanf...9.8 Critical
- debian bind9, linux +1 moreBackport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:18587.5 High
- jenkins, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized Actor in Jenkins5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreServer-Side Request Forgery in Jenkins5.3 Medium
- apple cups, canonical ubuntu linux, debian linux +2 moreA localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2...7.5 High
- ivanti endpoint securityIvanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and...7.5 High
- tendacn ac15 firmwareAn issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated...9.8 Critical
- hewlett packard enterprise project and portfolio management (ppm), microfocus project and portfolio management +1 moreA Remote Cross-Site Scripting vulnerability in HPE Project and Portfolio Management (PPM) version...5.4 Medium
- hewlett packard enterprise xp storage using hglm, hp xp storage hitachi global link manager +1 moreHPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information...5.3 Medium
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center ...7.5 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3...9.8 Critical
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT...7.5 High
- hewlett packard enterprise integrated lights-out 2 (ilo 2), hp integrated lights-out 2 firmware +1 moreSecurity vulnerabilities in the HPE Integrated Lights-Out 2 (iLO 2) firmware could be exploited...9.8 Critical
- hewlett packard enterprise icewall products, hp icewall mcrp, icewall mfa +1 more +3 moreA Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA...4.6 Medium
- hewlett packard enterprise moonshot provisioning manager applianceA Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning...9.1 Critical
- hewlett packard enterprise moonshot provisioning manager applianceA Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager...9.8 Critical
- hewlett packard enterprise moonshot provisioning manager applianceA Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager...9.8 Critical
- hewlett packard enterprise nonstop server, hp nonstop server software +1 moreA Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series:...4.4 Medium
- hewlett packard enterprise matrix operating environmentAn improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1...4.3 Medium
- hewlett packard enterprise matrix operating environmentA clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.4.3 Medium
- hewlett packard enterprise matrix operating environmentA clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.4.3 Medium
- hewlett packard enterprise matrix operating environmentA remote unauthenticated disclosure of information vulnerability in HPE Matrix Operating...5.3 Medium
- hewlett packard enterprise insight controlAn improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found.5.7 Medium
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Deserialization of Untrusted Data vulnerability in Hewlett Packard Enterprise Intelligent...8.8 High
- hewlett packard enterprise intelligent management centerA directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02...8.8 High
- hewlett packard enterprise msa 1040 and 2040 san storage, hp msa 1040 san storage firmware, msa 2040 san storage firmware +2 moreAn Authentication Bypass vulnerability in HPE MSA 1040 and MSA 2040 SAN Storage IN version...9.8 Critical
- hewlett packard enterprise msa 1040 and 2040 san storage, hp msa 1040 san storage firmware, msa 2040 san storage firmware +2 moreAn Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3...8.8 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2...9.8 Critical
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3...9.8 Critical
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2...7.5 High
- hewlett packard enterprise intelligent management center (imc) plat, hp intelligent management center +1 moreA Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2...9.8 Critical
- hp loadrunner, performance center, hewlett packard enterprise loadrunner and performance center +2 moreA Remote Cross-Site Scripting (XSS) vulnerability in HPE LoadRunner v12.53 and earlier and HPE...5.4 Medium
- Show moreLoading…