CVEs published in February 2018
1,334 vulnerabilities, 252 critical, 3 exploited.
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...8.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...8.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...6.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...9.8 Critical
- adobe experience managerAdobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a...6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.1 and 6.0 are vulnerable to a reflected cross-site scripting...6.1 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAn issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011...10.0 Critical
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreIn params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as...7.5 High
- clamav, canonical ubuntu linux, debian linux +2 moreClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR...5.5 Medium
- shibboleth xmltooling-c, arubanetworks clearpass, debian linux +2 moreShibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on...6.5 Medium
- zsh, canonical ubuntu linux +1 moreIn utils.c in zsh before 5.4, symlink expansion had a buffer overflow.9.8 Critical
- zsh project zshIn builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer...8.1 High
- linux kernelThe ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local...5.5 Medium
- linux kernelThe dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local...4.7 Medium
- zsh, canonical ubuntu linux +1 moreIn zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to...9.8 Critical
- zsh project zshIn utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory...9.8 Critical
- zsh, canonical ubuntu linux +1 moreIn exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.9.8 Critical
- zsh project zshzsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the...7.8 High
- unbit uwsgi, debian linux +1 moreuWSGI Directory Traversal vulnerability7.5 High
- microsoft identity managerMicrosoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does...6.1 Medium
- foxitsoftware mobilepdfA Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This...5.5 Medium
- foxitsoftware mobilepdfA denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This...5.5 Medium
- ox project oxOx gem stack overflow in sax_parse5.5 Medium
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by...7.5 High
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly...9.8 Critical
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP...7.5 High
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512...9.8 Critical
- microsoft windows 7, windows 8, windows 8.1 +2 more +4 moreAn issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8...5.5 Medium
- microsoft windows 7, windows 8, windows 8.1 +2 more +4 moreAn issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8...7.0 High
- prestashopIn PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might...7.5 High
- cmsmadesimple cms made simpleRemote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple...7.5 High
- concretecms concrete cmsAn issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An...5.3 Medium
- fasterxml jackson-databind, debian linux, oracle communications billing and revenue management +2 more +4 moreFasterXML jackson-databind allows unauthenticated remote code execution9.8 Critical
- sam2p project sam2p, debian linux +1 moreThere is a heap-based buffer overflow in the LoadPCX function of in_pcx.cpp in sam2p 0.49.4. A...7.8 High
- unisys clearpath mcpThe TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP...5.9 Medium
- blueriver muracmsBlue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end...7.2 High
- unixodbcThe SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy...9.8 Critical
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in...7.8 High
- gnu libcdioAn issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic...9.8 Critical
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to...5.3 Medium
- asanhamayesh cmsSQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6...9.8 Critical
- facetag project facetagws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter...9.8 Critical
- Show moreLoading…