CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- opt-net ng-netmsOPT/NET BV NG-NetMS version v3.6-2 and earlier versions contains a Cross Site Scripting (XSS)...6.1 Medium
- opt-net ng-netmsOPT/NET BV OPTOSS Next Gen Network Management System (NG-NetMS) version v3.6-2 and earlier...9.8 Critical
- taoensso senteTaoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF)...8.8 High
- slixmpp project slixmppslixmpp Incorrect Access Control7.5 High
- chamilo lmsChamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability...6.5 Medium
- ffmpegFFMPEG version 4.1 contains a CWE-129: Improper Validation of Array Index vulnerability in...6.5 Medium
- chamilo lmsChamilo Chamilo-lms version 1.11.8 and earlier contains a Cross Site Scripting (XSS)...6.1 Medium
- erlang rebar3Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package...8.8 High
- hex coreHex authenticity of signed packages not validated8.8 High
- hexHex package manager version 0.14.0 through 0.18.2 contains a Signing oracle vulnerability in...8.8 High
- api-platform coreIncorrect Access Control vulnerability in api-platform/core6.5 Medium
- phpipamphpIPAM version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in subnet...6.1 Medium
- helm chartmuseumHelm ChartMuseum version >=0.1.0 and < 0.8.1 contains a CWE-22: Improper Limitation of a Pathname...6.5 Medium
- helmHelm Path Traversal6.5 Medium
- aioxmpp project aioxmppDepth counting error in guard() leading to multiple potential security issues in aioxmpp7.4 High
- riot-os riotRIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer...9.8 Critical
- mpdf project mpdfmPDF Unsafe Deserialization8.8 High
- jspmyadmin jspmyadmin2yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS)...6.1 Medium
- mapsvg liteMapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery (CSRF) vulnerability in...8.8 High
- giteaGitea Arbitrary File Delete Vulnerability6.5 Medium
- teampassTeamPass Storing Passwords in a Recoverable Format vulnerability9.8 Critical
- recon-ng project recon-ngAn issue was discovered in Recon-ng before 4.9.5. Lack of validation in the modules/reporting/csv...9.8 Critical
- ibm security identity manager, security access manager +1 moreIBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack...7.1 High
- ibm security identity managerIBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the...4.0 Medium
- ibm app connect, integration bus, websphere message broker +2 moreIBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13,...5.3 Medium
- ibm tivoli application dependency discovery managerIBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in...6.8 Medium
- freebsd cvswebFreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that...6.1 Medium
- dthdevelopment dt registerJoomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an...9.8 Critical
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state'...6.1 Medium
- zoneminderLog Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit...6.5 Medium
- zoneminderSession fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session...7.3 High
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an...6.1 Medium
- zoneminderA Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a...7.5 High
- zoneminderA CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback...8.8 High
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view ...4.8 Medium
- zoneminderReflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...6.1 Medium
- zoneminderReflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker...6.1 Medium
- zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderReflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker...6.1 Medium
- zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderSelf - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' ...4.8 Medium
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view...6.1 Medium
- zoneminderSelf - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...6.1 Medium
- zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an...6.1 Medium
- Show moreLoading…