CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- frog cms project cmsFrog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.5.4 Medium
- frog cms project cmsFrog CMS 0.9.5 provides a directory listing for a /public request.7.5 High
- frog cms project cmsadmin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php...7.2 High
- frog cms project cmsFrog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.5.4 Medium
- frog cms project cmsFrog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional...7.2 High
- frog cms project cmsFrog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.7.2 High
rsshDebianrssh - regression updateNo score- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreUncontrolled Memory Consumption in Django7.5 High
- apple icloud, icloud for windows, ios +7 more +9 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...8.6 High
- [unknown] gvfsAn incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that...7.0 High
- gnome evolution, debian linux +1 moreGNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary...6.5 Medium
- webassembly binaryenwasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an...6.5 Medium
- webassembly binaryenIn Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in...6.5 Medium
- webassembly binaryenA NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in...6.5 Medium
- webassembly binaryenA heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm...6.5 Medium
- webassembly binaryenA heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary...6.5 Medium
- axiosys bento4A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in...6.5 Medium
- axiosys bento4An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter...6.5 Medium
- axiositalia registro elettronicoAxios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters...6.1 Medium
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +26 more +28 moreAn issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...9.8 Critical
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +26 more +28 moreAn issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...9.8 Critical
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +26 more +28 moreAn issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...7.5 High
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +26 more +28 moreAn issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...9.8 Critical
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +26 more +28 moreAn issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i,...8.8 High
- cim project ciminstall/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a...9.8 Critical
- abbyy flexicaptureMultiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY...9.8 Critical
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for...8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and...8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message...6.5 Medium
- inxeduinxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file...9.8 Critical
- enphase envoyA directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/,...9.8 Critical
- enphase envoyXSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.6.1 Medium
- enphase envoyA weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port...7.2 High
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application...7.5 High
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to...9.8 Critical
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored...7.5 High
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of...9.8 Critical
- elfutils project elfutils, redhat enterprise linux, enterprise linux desktop +5 more +7 moreIn elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h...5.5 Medium
- webassembly binaryenAn assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in...6.5 Medium
- genivia gsoap, debian linux +1 moreGenivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service ...8.1 High
- rdflib project rdflib, canonical ubuntu linux, debian linux +2 moreThe Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load...9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreIn elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in...5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +1 more +3 moreAn Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff...6.5 Medium
- emsisoft anti-malwareEPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs...7.5 High
linux-hweUbuntulinux, linux-hwe regressionNo score- fortinet forticlient, forticlientwindows, fortinet, inc. fortinet forticlientwindows +2 moreA null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows...5.5 Medium
- cisco meeting serverCisco Meeting Server SIP Processing Denial of Service Vulnerability6.8 Medium
- Show moreLoading…