CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- eq-3 homematic ccu2 firmwareDirectory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method...9.8 Critical
- eq-3 homematic central control unit ccu2 firmwareRemote Code Execution in the addon installation process in eQ-3 AG Homematic CCU2 2.29.2 and...8.0 High
- eq-3 homematic central control unit ccu2 firmwareIn /usr/local/etc/config/addons/mh/loopupd.sh on eQ-3 AG HomeMatic CCU2 2.29.22 devices, software...8.1 High
- eq-3 homematic central control unit ccu2 firmwareRemote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier...9.8 Critical
- eq-3 homematic central control unit ccu2 firmwareDirectory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2...5.3 Medium
- wolfcms wolf cmsCross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as...4.8 Medium
- ibm sdk, java technology edition, java sdk +1 moreUnder certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0)...8.1 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection. A remote attacker could...8.8 High
- ibm financial transaction managerIBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow...3.1 Low
- ibm financial transaction managerIBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow...6.5 Medium
- unixodbcIn unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in...9.8 Critical
- npmjs npmIncorrect Permission Assignment for Critical Resource in NPM7.8 High
- insteon hub firmwareIn version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for...8.1 High
- insteon for hubIn version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the...9.8 Critical
- wink, wink labs inc - smart home +1 moreIn version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used...9.8 Critical
- hamayeshnegar cmsSQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS...9.8 Critical
- cwjoomla cw tagsSQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.9.8 Critical
gcc-6Debiangcc-6 - updateNo score- digium asteriskAn issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP...5.9 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1...6.5 Medium
- digium asteriskA NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in...7.5 High
- digium asterisk, certified asterisk, debian linux +2 moreA Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x...7.5 High
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...6.1 Medium
- cisco prime collaboration provisioningA vulnerability in the User Provisioning tab in the Cisco Prime Collaboration Provisioning Tool...6.1 Medium
- cisco prime collaboration provisioningA vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow...7.5 High
- cisco unity connectionA vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated,...5.3 Medium
- cisco jabberA vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote...5.4 Medium
- cisco prime service catalogA vulnerability in the web-based interface of Cisco Prime Service Catalog could allow an...6.1 Medium
- cisco jabberA vulnerability in Cisco Jabber Client Framework (JCF) could allow an unauthenticated, remote...6.1 Medium
- cisco ucs directorA vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco...8.8 High
- cisco data center analytics frameworkA vulnerability in the Cisco Data Center Analytics Framework application could allow an...5.4 Medium
- cisco data center analytics frameworkA vulnerability in the web-based management interface of the Cisco Data Center Analytics...6.1 Medium
- cisco unified customer voice portalA vulnerability in the Interactive Voice Response (IVR) management connection interface for Cisco...8.6 High
- cisco elastic services controller, virtual managed services +1 moreA vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic...9.8 Critical
- cisco unified communications domain managerA vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated,...9.8 Critical
- cisco elastic services controller, virtual managed services +1 moreA vulnerability in the authentication functionality of the web-based service portal of Cisco...9.8 Critical
- linux kernelfs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows...5.5 Medium
- privatevpn** DISPUTED ** PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability...8.8 High
- cactusvpnCactusVPN 5.3.6 for macOS contains a root privilege escalation vulnerability through a setuid...8.8 High
- d-link dir-600m c1 firmwareCross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a...5.4 Medium
- hosting project hostingA CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows...8.8 High
- ibm control center, financial transaction manager, transformation extender advanced +2 moreIBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and...7.1 High
- ibm maximo anywhereIBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm rational rhapsody design managerIBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
drupal/jsonapiPackagistThis module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The module doesn't sufficiently associate cacheability metadata in cer…No score- mybbMyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts.4.9 Medium
- tikiTiki 17.1 does not validate user input for special characters; consequently, a CSV Injection...8.8 High
- tiki tikiwiki cms\/groupwareThe Calendar component in Tiki 17.1 allows HTML injection.5.4 Medium
- tikiTiki Wiki CMS XSS Vulnerability5.4 Medium
- Show moreLoading…