CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...8.8 High
- schneider electric se iiot monitor 3.1.38, schneider-electric iiot monitor +1 moreA Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow...5.5 Medium
- schneider electric se zelio soft 2 v5.1 and prior versions, schneider-electric zelio soft 2 +1 moreA Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which...7.8 High
- schneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0), schneider-electric guicon +1 moreA Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ...7.8 High
- schneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0), schneider-electric guicon +1 moreA Stack-based Buffer Overflow (CWE-121) vulnerability exists in Eurotherm by Schneider Electric...7.8 High
- schneider electric se eurotherm by schneider electric guicon v2.0 (gold build 683.0), schneider-electric guicon +1 moreA Type Confusion (CWE-843) vulnerability exists in Eurotherm by Schneider Electric GUIcon V2.0 ...7.8 High
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy is vulnerable to SQL Injection via group_by parameter7.8 High
- topnew siduAn issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the...4.8 Medium
- topnew siduAn issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross...6.1 Medium
- dbninjaIn DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site...5.4 Medium
- mywebsqlAn issue was discovered in MyWebSQL 3.7. The Add User function of the User Manager pages has a...5.4 Medium
- kindsoft kindeditorIn KindEditor 4.1.11, the php/demo.php content1 parameter has a reflected Cross-site Scripting ...6.1 Medium
- bd facslyric, facslyric ivd, ics-cert bd facslyric +2 moreBD FACSLyric Research Use Only, Windows 10 Professional Operating System, U.S. and Malaysian...6.8 Medium
- canvasgfx canvas draw, talos acd systems +1 moreAn exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw...8.8 High
- canvasgfx canvas draw, talos acd systems +1 moreAn exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of...8.8 High
- canvasgfx canvas draw, talos acd systems +1 moreAn exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version...8.8 High
- grafana piechart-panelThe Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or...6.1 Medium
drupal/acquia_connectorPackagistAcquia Connector facilitates sending certain telemetry data to Acquia for the purposes of analysis. The module automates the collection of site information to speed support communication and issue res…No scoredrupal/login_alertPackagistThis module provides a field on user profiles which allows users to get a notification when their account logs in to the site. The notification e-mail includes a link which will terminate all sessions…No score- modx revolutionMODX vulnerability allows for XSS via user settings parameters5.4 Medium
- modx revolutionMODX Revolution allows XSS through extended user fields6.1 Medium
- modx revolutionMODX Revolution allows XSS via document resources6.1 Medium
- modx revolutionMODX Revolution vulnerable to XSS attack through its User Photo field6.1 Medium
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreXSS vulnerability in Jenkins Warnings Next Generation Plugin6.1 Medium
- jenkins monitoring, jenkins project monitoring plugin +1 moreJenkins Monitoring Plugin vulnerable to Denial of service vulnerability6.5 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form4.3 Medium
- jenkins kanboard, jenkins project kanboard plugin +1 moreJenkins Kanboard Plugin vulnerable to Server-side request forgery (SSRF)4.3 Medium
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin session fixation vulnerability5.9 Medium
- jenkins project github authentication plugin, jenkins github oauth +1 moreGitHub Authentication Plugin showed plain text client secret in configuration form4.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin CSRF vulnerability5.3 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin vulnerable to exposure of sensitive information8.8 High
- jenkins job import, jenkins project job import plugin +1 moreXXE vulnerability in Jenkins Job Import Plugin9.1 Critical
- jenkins config file provider, jenkins project config file provider plugin, redhat openshift container platform +2 moreJenkins Config File Provider Plugin XSS vulnerability4.8 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-site Scripting in Jenkins Blue Ocean Plugin5.4 Medium
- jenkins blue ocean, jenkins project blue ocean plugins, redhat openshift container platform +2 moreCross-Site Request Forgery in Jenkins Blue Ocean Plugin6.5 Medium
- jenkins token macro, jenkins project token macro plugin, redhat openshift container platform +2 moreJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS8.1 High
- jenkins git, redhat openshift container platform +1 moreCross-Site Request Forgery in Jenkins Git Plugin4.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin Improper certificate validation with StartTLS7.4 High
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 moreJenkins Warnings Next Generation Plugin cross-site request forgery vulnerability8.8 High
- jenkins warnings, jenkins project warnings plugin +1 moreSandbox Bypass via CSRF in Jenkins Warnings Plugin8.8 High
- jenkins groovy, jenkins project groovy plugin +1 moreJenkins Groovy Plugin sandbox bypass vulnerability8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox Bypass in Script Security Plugin8.8 High
netmaskDebiannetmask - security updateNo score- broadcom automic workload automationInsufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload...6.1 Medium
- the gnome projectr gdm, canonical ubuntu linux, gnome display manager +1 more +3 moreA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...6.3 Medium
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....7.1 High
- gnome gnome-shell, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that the gnome-shell lock screen since version 3.15.91 did not properly...4.8 Medium
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreIn GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a...7.8 High
- gpac project gpac, canonical ubuntu linux, debian linux +2 moreGPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files...7.8 High
- Show moreLoading…