CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreGPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init...7.8 High
- gpac, canonical ubuntu linux, debian linux +2 moreIn GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a...7.8 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....5.4 Medium
- wibu wibukey, siemens simatic wincc open architecture +1 moreAn exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey...10.0 Critical
- wibu wibukeyAn exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality...9.3 Critical
- wibu wibukeyAn exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler...4.3 Medium
- trend micro dr. safety for android (consumer), trendmicro dr. safety +1 moreA vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions...7.5 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security +3 more +5 moreA DLL hijacking vulnerability in Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163...7.8 High
- advantech webaccess\/scadaWebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.9.8 Critical
- advantech webaccess\/scadaWebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication...8.6 High
- advantech webaccess\/scadaWebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a...9.8 Critical
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability...7.8 High
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, there is path traversal vulnerability when...5.5 Medium
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.61, There is path traversal vulnerability when...7.8 High
- f5 big-ip local traffic manager, f5 networks, inc. big-ip (ltm) +1 moreOn BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may...5.9 Medium
- mitsubishi electric q03/04/06/13/26udvcpu, q03udecpu, q04/06/10/13/20/26/50/100udehcpu, q04/06/13/26udpvcpu +18 more +20 moreMitsubishi Electric MELSEC-Q Series PLCs Resource Exhaustion7.5 High
- parallax scroll project scrollIn the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes...6.1 Medium
- ps phpcaptcha wp project phpcaptcha wpThe PS PHPCaptcha WP plugin before v1.2.0 for WordPress mishandles sanitization of input values.9.8 Critical
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreOn BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross...5.4 Medium
- lcds laquis scadaLCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted...7.8 High
- lcds laquis scadaLCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when...7.8 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an...5.3 Medium
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an...9.8 Critical
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper...9.8 Critical
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper...8.8 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations...5.3 Medium
- lcds laquis scadaLCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report...7.8 High
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A...5.4 Medium
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly...3.7 Low
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL...3.7 Low
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users....5.3 Medium
- [unknown] kube-rbac-proxy, redhat openshift container platform +1 moreThe kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container...3.7 Low
- haraka project harakaCritical severity vulnerability that affects Haraka9.8 Critical
- phpmywindAn issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders...4.9 Medium
- phpmywindAn issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS...6.1 Medium
- rukovoditelRukovoditel before 2.4.1 allows XSS.6.1 Medium
- kaseya virtual system/server administrator (vsa), virtual system administrator +1 moreKaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows...9.8 Critical
- connectwise manageditsync, kaseya virtual system/server administrator (vsa) +1 moreConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to...9.8 Critical
- 42gears suremdmAn issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for...6.5 Medium
- 42gears suremdmAn issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at ...7.5 High
- 42gears suremdmAn SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api...7.3 High
- 42gears suremdmAn issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An...7.5 High
- 42gears suremdmAn issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings. Cross...6.5 Medium
- dlink dir-823g firmwareAn issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There...8.6 High
- dlink dir-823g firmwareAn issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03....7.5 High
- dlink dir-823g firmwareAn issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There...7.5 High
- dovecot, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...7.7 High
- systrome isg-600c firmware, isg-600h firmware, isg-800w firmware +2 moreA local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C,...6.5 Medium
- dell networking os10DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability8.8 High
- ibm security identity managerIBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control...7.2 High
- Show moreLoading…