CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- facetag project facetagThe Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag...6.1 Medium
- yzmcmsYzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application...5.3 Medium
- linux kernelThe f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated...5.5 Medium
- purevpnAn issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants...7.8 High
- apache geodeApache Geode configuration request authorization vulnerability7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux...5.5 Medium
- finecmscontrollers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting (XSS) via the id...6.1 Medium
- invt studioINVT Studio 1.2 allows remote attackers to cause a denial of service during import operations.5.5 Medium
- bj-tct kingviewKingView 7.5SP1 has an integer overflow during stgopenstorage API read operations.7.8 High
- imagemagickAn issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders...6.5 Medium
- testlinkinstall/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe blkcg_init_queue function in block/blk-cgroup.c in the Linux kernel before 4.11 allows local...7.8 High
- apache commons emailImproper Input Validation Apache Commons Email7.5 High
- piwigoPiwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags...4.9 Medium
- xpdfreader xpdfAn out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to...5.5 Medium
- xpdfreader xpdfA NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to...5.5 Medium
- xpdfreader xpdfInfinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch...5.5 Medium
- xpdfreader xpdfA NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows...5.5 Medium
- gnu libcdiorealloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial...6.5 Medium
- gnu libcdioprint_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause...8.8 High
- zzcmszzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2...5.3 Medium
- mojoportal** DISPUTED ** mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting...4.8 Medium
- jgraph mxgraphmxGraph vulnerable to XXE attacks9.8 Critical
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- libtiff, canonical ubuntu linux, debian linux +2 moreA NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3...6.5 Medium
- drupal, drupal core, drupal.org drupal core +1 more +3 moreDrupal external link injection vulnerability4.7 Medium
- drupal, drupal core, drupal.org drupal core +1 more +3 moreDrupal cross site scripting vulnerability6.1 Medium
- drupal, drupal core, drupal.org drupal core +1 more +3 moreDrupal access bypass vulnerability5.3 Medium
- drupal, debian linux, drupal core +1 more +3 moreDrupal cross-site scripting vulnerability6.1 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, in...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, in the function...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, while processing...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, when an access...7.8 High
- netapp oncommand api services, service level manager, oncommand api services and netapp service level manager +2 moreAll versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9650 firmware +19 more +21 moreIn Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A,...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of...7.8 High
- wiresharkIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was...7.5 High
- Show moreLoading…