CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
drupal/ckeditor_uploadimagePackagistThis module enables you to drag and drop or paste images into CKEditor. The module does not sufficiently verify users permissions, which leads to anonymous users being able to upload files to the serv…No score- teclib-edition armadito antivirusAn issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2....3.3 Low
- keycloakModerate severity vulnerability that affects org.keycloak:keycloak-core8.8 High
drupal/corePackagistThis security advisory fixes multiple vulnerabilities in both Drupal 7 and Drupal 8. See below for a list. Comment reply form allows access to restricted content - Critical - Drupal 8 - CVE-2017-6926…No score- ninjaforms ninja formsThe Ninja Forms plugin before 3.2.14 for WordPress has XSS.6.1 Medium
- radiantcms radiant cmsradiant vulnerable to Cross-site Scripting5.4 Medium
- ibm forms experience builderXML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6...2.7 Low
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote...4.3 Medium
- ibm security privileged identity managerIBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow...3.7 Low
- ibm security identity manager virtual applianceIBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set...3.7 Low
- ibm tririga application platformCross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3...8.0 High
- ibm tririga application platformIBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1...4.3 Medium
- ibm tririga application platformCross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application...5.4 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1...4.3 Medium
- codeigniterSQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before...9.8 Critical
- codeigniterThe xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an...6.1 Medium
- phpmyadminphpMyAdmin Cross-site scripting (XSS) vulnerability in central columns feature5.4 Medium
- reprisesoftware reprise license managerAn issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal...8.1 High
- atlassian floodlightRace condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2...5.9 Medium
- apache qpidThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Medium
- apache vclThe Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x...8.8 High
- abb microscada, hitachienergy sys600 firmware +1 moreThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.8 High
- joyent smartosThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.8 High
- joyent smartos, oracle solaris, zfs storage appliance +2 moreThis vulnerability allows local attackers to escalate privileges on vulnerable installations of...7.0 High
- zyxel p-870h-51 dsl router, p-870h-51 firmware +1 moreThis vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable...9.8 Critical
libdb-4_8SUSESecurity update for libdb-4_8No score- rletech fds-pc-dp firmware, fds-pc firmware +1 moreAn issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS...6.1 Medium
- rletech fds-wi firmware, wi-mgr firmware +1 moreAn issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server...6.1 Medium
- lutron quantum bacnet integration firmwareAn issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices....7.5 High
- quarx cms project cmsYab Quarx persistent cross-site scripting vulnerability6.1 Medium
- linux kernelIn the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions...5.5 Medium
- forgerock access managementThe REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows...6.5 Medium
- metinfoAn issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the...8.1 High
- oxid-esales eshopOXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance),...7.5 High
- oxid-esales eshopOXID eShop Community Edition before 6.0.0 RC2 (development), 4.10.x before 4.10.5 (maintenance),...7.5 High
- shimmie2 project shimmie2Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.6.1 Medium
- maharaMahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to...5.9 Medium
- maharaMahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site...5.4 Medium
- underbit libmadThe mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote...9.8 Critical
- micro focus universal cmdb foundation softwareMFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information9.8 Critical
- underbit libid3tagid3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in...7.5 High
- combodo itopCross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop...6.1 Medium
- abb netcadopsAn Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and...5.8 Medium
- samsung knox enterprise mobility management, knox identity access management +1 moreIn Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on...5.9 Medium
- apng disassembler project disassemblerBuffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service...5.5 Medium
- apng disassembler project disassemblerBuffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service...5.5 Medium
- kentico xperience** DISPUTED ** Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout"...4.8 Medium
- kentico xperience** DISPUTED ** Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote...7.2 High
- nat32A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can...8.8 High
- nat32A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can...6.1 Medium
- Show moreLoading…