CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- strongswanThe rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in...5.3 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreImproper Limitation of a Pathname to a Restricted Directory in Jenkins6.5 Medium
- kubik-rubik simple image gallery extendedReflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows...6.1 Medium
- epic mychartXPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an...7.5 High
- photo\,video locker-calculator project locker-calculatorsmart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator"...7.5 High
- photo\,video locker-calculator project locker-calculatorThe "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true"...7.5 High
- datto alto 2 firmware, alto 3 firmware, alto imaged firmware +5 more +7 moreDatto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to...5.3 Medium
- datto alto 2 firmware, alto 3 firmware, alto imaged firmware +5 more +7 moreDatto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data,...5.3 Medium
- datto alto 2 firmware, alto 3 firmware, alto imaged firmware +5 more +7 moreDatto ALTO and SIRIS devices have a default VNC password.9.8 Critical
- datto alto 2 firmware, alto 3 firmware, alto imaged firmware +5 more +7 moreDatto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP...9.8 Critical
- flightsimlabs a320-xThe FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account...9.8 Critical
- wavpack, debian linux +1 moreThe ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote...7.8 High
- wavpack, canonical ubuntu linux, debian linux +2 moreThe ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote...7.8 High
- anchorcms anchorAnchor CMS Logs Credentials9.8 Critical
- oxid-esales eshopAn issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By...5.9 Medium
- dotcmsSQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2...7.2 High
- dotcmsSQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x...7.2 High
- unisys stealthUnisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local users to gain access to Stealth...7.8 High
- apexis apm-h803-mpc firmwareAn issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP...9.8 Critical
- smartbear soapuiThe project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary...7.8 High
- carbonblack carbon blackA security design issue can allow an unprivileged user to interact with the Carbon Black Sensor...9.8 Critical
- 10web photo galleryCross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1...5.4 Medium
- apexis apm-j601-ws firmwareDirectory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49...5.3 Medium
- adobe shockwave playerAdobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a...8.8 High
- symantec backup exec system recovery, norton 360, norton ghost +1 more +3 moreGEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System...5.5 Medium
- symantec altiris deployment solutionDBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers...6.5 Medium
- leptonicaAn issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3....9.8 Critical
- ge d60 line distance relay firmwareA Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running...9.8 Critical
- ge d60 line distance relay firmwareAn Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered...9.8 Critical
- nortekcontrol emerge e3 firmwareA Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and...9.8 Critical
- vncterm project vnctermAn issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the...9.8 Critical
- openstack nova, redhat openstack +1 moreOpenStack Nova Denial of service attack on the compute host7.5 High
- apache juddiThe console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote...6.5 Medium
- apache karafModerate severity vulnerability that affects org.apache.karaf:apache-karaf6.5 Medium
- 5none nonecmsapplication/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an...8.8 High
- conversejs converse.jsConverse.js Exposure of Sensitive Information5.3 Medium
- hcl software notes, ibm client application access +1 moreIBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to...7.8 High
- hcl software notes, ibm client application access +1 moreIBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to...7.8 High
- hcl software notes, ibm client application access +1 moreIBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to...7.8 High
- atlassian crucibleThe SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5...5.3 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4...4.8 Medium
- atlassian crucibleThe print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4...5.4 Medium
- userscape helpspotAn issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery...8.8 High
- userscape helpspotAn issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting...6.1 Medium
- apache ooziePath Traversal in Apache Oozie6.5 Medium
- zohocorp manageengine desktop centralRemote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10...9.8 Critical
- libvncserver project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in...9.8 Critical
- phpAn issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20....6.5 Medium
- thethinkery project logSQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.9.8 Critical
- tejari bravo solutionIn Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application...8.8 High
- Show moreLoading…