CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash. This...7.5 High
- synology photo stationExposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1...5.3 Medium
- freexl project freexl, debian linux +1 moreAn issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the...8.8 High
- freexl project freexl, debian linux +1 moreAn issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the...8.8 High
- freexl project freexl, debian linux +1 moreAn issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a...8.8 High
- freexl project freexl, debian linux +1 moreAn issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a...8.8 High
- freexl project freexl, debian linux +1 moreAn issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the...8.8 High
- leptonicaLeptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when...3.3 Low
- schools alert management script project alert management scriptSQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login...9.8 Critical
- seagate blackarmor nas 110 firmware, blackarmor nas 220 firmware +1 moreSeagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session...9.8 Critical
- seagate blackarmor nas 110 firmware, blackarmor nas 220 firmware +1 morebackupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@#...9.8 Critical
- elinks, twibright links +1 moreELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.5.9 Medium
- fsi fs010w firmware, fuji soft incorporated fs010w +1 moreCross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier...8.8 High
- fsi fs010w firmware, fuji soft incorporated fs010w +1 moreCross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an...4.8 Medium
- line corporation for ios, linecorp line +1 moreLINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which...5.9 Medium
- mp4v2 project mp4v2The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for...8.8 High
- groupon clone script project clone scriptCross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone...5.4 Medium
- alibaba clone script project clone scriptCross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile...5.4 Medium
- learning and examination management system script project and examination management system scriptCross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System...5.4 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly...6.5 Medium
- leptonicaAn issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block ...9.1 Critical
- leptonicaLeptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to...7.0 High
- leptonica, debian linux +1 moreAn issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function allows command...9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreApache Tomcat information exposure vulnerability6.5 Medium
- microfocus project and portfolio management centerXML External Entity (XXE) vulnerability in Micro Focus Project and Portfolio Management Center,...9.8 Critical
- micro focus universal cmdb, microfocus ucmdb configuration manager +1 moreMFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance8.1 High
- juniper appformixAppFormix: Debug Shell Command Execution in AppFormix Agent9.8 Critical
cups-filtersMageia,qpdfMageia +1 moreUpdated qpdf packages fix security vulnerabilityNo score- os property real estate project property real estateSQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the...9.8 Critical
- belitsoft checklist, oracle data integrator +1 moreSQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search,...9.8 Critical
- christianwebministries proclaimBackup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a ...7.5 High
- christianwebministries proclaimArbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action.9.8 Critical
- harmistechnology ek rishtaSQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2,...9.8 Critical
- mlwebtechnologies prayercenterSQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter,...9.8 Critical
- alexandriabooklibrary alexandria book librarySQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter...9.8 Critical
- eq-3 homematic central control unit ccu2 firmwareeQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can...9.8 Critical
- Show moreLoading…