CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- cisco web security appliance (wsa), web security appliance +1 moreCisco Web Security Appliance Decryption Policy Bypass Vulnerability5.8 Medium
- fortinet fortiosA format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized...9.8 Critical
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability5.4 Medium
- hotels server project servercontroller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on...7.5 High
- helpsystems boksA buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through...9.8 Critical
- symantec ghost solution suite, symantec corporation ghost solution suite (gss) +1 moreSymantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL...7.3 High
- fedoraproject fedora, gsi-openssh project gsi-openssh +1 moreAn issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29. If PermitPAMUserChange is set...8.1 High
- yubico libu2f-host, debian linux +1 moreYubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious...6.8 Medium
- lifesize networker 220 firmware, passport 220 firmware, room 220 firmware +1 more +3 moreLifeSize Team, Room, Passport, and Networker 220 devices allow Authenticated Remote OS Command...8.8 High
- kentico xperience** DISPUTED ** Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password...7.2 High
- redhat pagurePagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS...5.9 Medium
- f5 nginx unitNGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the...9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +3 more +5 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.1 High
- forcepoint user id, forcepoint . user id (fuid) server +1 moreForcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload...9.8 Critical
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Cross-Site Scripting Vulnerability6.1 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability6.1 Medium
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Cross-Site Scripting Vulnerability6.1 Medium
- apache guacamoleMissing Encryption of Sensitive Data in Apache Guacamole7.5 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Hadoop7.5 High
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Simple Object Access Protocol Vulnerability5.3 Medium
- cisco webex business suite, webex meetings online +1 moreCisco Webex Business Suite Content Injection Vulnerability4.3 Medium
- cisco expressway series, telepresence conductor, telepresence video communication server +2 moreCisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server REST API Server-Side Request Forgery Vulnerability5.0 Medium
- cisco meeting serverCisco Meeting Server Denial of Service Vulnerability4.3 Medium
- cisco aironet active sensor, digital network architecture center +1 moreCisco Aironet Active Sensor Static Credentials Vulnerability7.5 High
- bo-blog bwBo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID...9.8 Critical
- dell emc vnx control station in dell emc vnx2 oe for file, dell emc vnx2 firmware +1 moreVNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command...7.8 High
- cisco webex meetings for android, webex meetings +1 moreCisco Webex Meetings for Android Cross-Site Scripting Vulnerability5.0 Medium
- bijiadao waimai super cmsAn issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/PublicAction.class.php...9.8 Critical
- libmingThe readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have...8.8 High
- libmingThe parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote...8.8 High
- thinkcmfThinkCMF 5.0.190111 allows remote attackers to execute arbitrary PHP code via the portal...8.8 High
- ibm api connectAPI Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in...9.0 Critical
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0...4.3 Medium
- gurock testrailindex.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid...5.3 Medium
- pbootcmsA CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del...6.5 Medium
- wdoyo doyoAn issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability...8.8 High
- baijiacms project baijiacmsAn issue was discovered in baijiacms V4 that can result in time-based blind SQL injection to get...9.8 Critical
- bijiadao waimai super cmsAn issue was discovered in Waimai Super Cms 20150505. admin.php?m=Member&a=adminaddsave has XSS...6.1 Medium
- cszcms csz cmsCSZ CMS 1.1.8 has CSRF via admin/users/new/add.8.8 High
- boolector project boolectorBoolector use after free5.5 Medium
- btor2tools project btor2toolsIn btor2parser/btor2parser.c in Boolector Btor2Tools before 2019-01-15, opening a specially...5.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...8.8 High
- Show moreLoading…