CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- ics-cert pangea communications internet fax ata, pangea-comm fax ata +1 more Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass... 7.5 High
- deltaww screeneditor, ics-cert delta industrial automation cncsoft +1 more Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of... 5.5 Medium
- horner automation cscape Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by... 7.8 High
- cisco webex meetings desktop app, webex productivity tools, webex meetings +1 more +3 more Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability 7.8 High
- cisco rv110w wireless-n vpn firewall, rv130w wireless-n multifunction vpn router, rv215w wireless-n vpn router +3 more +5 more Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability 9.8 Critical
- mozilla firefox When the RSS Feed preview about:feeds page is framed within another page, it can be used in... 8.8 High
- mozilla firefox In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as... 5.3 Medium
- android The permissions on /proc/iomem were world-readable. This could lead to local information... 5.5 Medium
- android In several functions of binder.c, there is possible memory corruption due to a use after free.... 7.8 High
- android In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being... 5.5 Medium
- android In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure... 7.5 High
- android In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a... 6.5 Medium
- android In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach... 5.5 Medium
- android In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings... 8.8 High
- android In register_app of btif_hd.cc, there is a possible memory corruption due to an integer overflow.... 7.8 High
- android In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race... 7.5 High
- android In btif_dm_data_copy of btif_core.cc, there is a possible out of bounds write due to a buffer... 8.8 High
- android In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input... 8.8 High
- android In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing... 7.8 High
- android In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a... 8.8 High
- mcafee agent, mcafee, llc mcafee agent (ma) +1 more McAfee Agent update fixes an Information Disclosure vulnerability 6.5 Medium
- mcafee agent, mcafee, llc mcafee agent (ma) +1 more McAfee Agent update fixes a vulnerability in handling UDP requests 5.3 Medium
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 more McAfee Endpoint Security updates fix a privilege escalation vulnerability 8.6 High
- baigo cms An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers... 9.8 Critical
- baigo cms An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows... 6.1 Medium
-
openssl-1_1SUSE Security update for openssl-1_1 No score - debian linux, live555 streaming media, opensuse backports sle +1 more +3 more In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the... 9.8 Critical
- ikiwiki ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190226 allows SSRF via the... 7.5 High
- android, canonical ubuntu linux, debian linux +2 more In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys... 5.5 Medium
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys... 7.8 High
- nvidia gpu driver, nvidia corporation gpu graphics driver +1 more NVIDIA Windows GPU Display driver contains a vulnerability in the 3D vision component in which... 7.8 High
- hclsoftware bigfix platform IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather... 5.3 Medium
- ibm san volume controller, flashsystem 9100 family, flashsystem v9000 +7 more +9 more IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products... 6.5 Medium
- apache airflow Apache Airflow vulnerable to Stored XSS 5.5 Medium
-
drupal/facetsPackagist This module enables you to create facet-filters for results of a search query and exposes them as blocks The module doesn't sufficiently escape HTML under the scenario leading to a Cross Site Scriptin… No score - antfin sofa-hessian Incomplete List of Disallowed Inputs in SOFA-Hessian 9.8 Critical
- gnu pspp, fedoraproject fedora, suse backports +2 more There is a reachable assertion abort in the function write_long_string_missing_values() in data... 6.5 Medium
- maccms Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html... 6.1 Medium
- netapp clustered data ontap Clustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a... 7.5 High
- podofo project podofo An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in... 6.5 Medium
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was... 7.5 High
- advancemame advancecomp, canonical ubuntu linux, debian linux +1 more +3 more In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering... 7.8 High
- wireshark, canonical ubuntu linux, debian linux +1 more +3 more In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash... 5.5 Medium
- wireshark, debian linux +1 more In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was... 7.5 High
- avaya one-x communicator Avaya one-X Communicator Weak Encryption 6.5 Medium
- Show olderLoading…