CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under...6.1 Medium
- kanboardapp/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.6.1 Medium
- podofo project podofoAn issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage-...8.8 High
- apache sparkPyspark User Impersonation Vulnerability5.5 Medium
- logmxGUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the...7.5 High
- css-tricks chat2An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin...9.8 Critical
- debian linux, live555 streaming media +1 moreliblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP...9.8 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.7.5 High
- graphicsmagick, imagemagick, canonical ubuntu linux +2 more +4 moreIn ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.7.5 High
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...6.5 Medium
- buildbotBuildbot CRLF Injection6.1 Medium
- primx zed, zedmail, zonecentral +2 moreLimited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed...5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32...5.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...7.8 High
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of environment variables passed to rsync can bypass the restrictions...9.8 Critical
- debian gnu/linux rssh, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by...9.8 Critical
- [unknown] libreofficeIt was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory...7.8 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially...3.3 Low
- hackerone static-resource-serverPath Traversal in simplehttpserver7.5 High
- extend project extendPrototype Pollution in extend9.8 Critical
- dreamerslab node.extendPrototype Pollution in node.extend9.8 Critical
- hackerone mpathPrototype Pollution in mpath7.5 High
- hackerone just-extendPrototype Pollution in just-extend9.8 Critical
- hackerone lodashPrototype Pollution in lodash5.6 Medium
- defaults-deep project defaults-deepPrototype Pollution in defaults-deep9.8 Critical
- hackerone m-serverm-server Vulnerable to Directory Traversal6.5 Medium
- hackerone m-serverCross-Site Scripting in m-server5.4 Medium
- express-cart project express-cartAuthentication Bypass by Spoofing in express-cart8.8 High
- hackerone mcstaticmcstatic directory traversal vulnerability7.5 High
- hackerone html-pagesCross-Site Scripting in html-pages6.1 Medium
- hackerone publicTnantoka/public XSS Vulnerability6.1 Medium
- hackerone http-live-simulatorPath Traversal in http-live-simulator7.5 High
- qnap photo stationPath Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and...7.5 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a...8.8 High
- netapp clustered data ontapClustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows...4.4 Medium
- debian linux, linux kernel +1 moreIn the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of...4.7 Medium
- mcafee epolicy orchestrator, mcafee, llc epolicy orchestrator cloud +1 moreePolicy Orchestrator Cloud update fixes multiple Cross-Site Request Forgery vulnerabilities4.8 Medium
- avaya aura communication manager, communication manager +1 moreCommunication Manager Denial of Service6.5 Medium
- zevenet zen load balancerZen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as...7.2 High
- articatech artica proxyArtica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading...7.2 High
- pylonsproject colanderPylons Colander Denial of Service vulnerability7.5 High
- Show moreLoading…