CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- androidIn llcp_dlc_proc_i_pdu of llcp_dlc.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0,...6.5 Medium
- androidIn mca_ccb_hdl_rsp of mca_cact.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0,...7.5 High
- androidIn bta_hh_ctrl_dat_act of bta_hh_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0...7.5 High
- androidIn add_attr of sdp_discovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android...7.5 High
- androidIn ieee802_11_rx_wnmsleep_req of wnm_ap.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8...5.5 Medium
- androidIn avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8...6.5 Medium
- androidIn savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2,...7.3 High
- androidIn run of InstallPackageTask.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0,...7.0 High
- androidIn nfc_ncif_proc_get_routing of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android...7.8 High
- androidIn nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2,...7.8 High
- androidIn bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0,...9.8 Critical
- androidIn package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the...7.8 High
- dbninja_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin...6.1 Medium
- dbninjaDbNinja 3.2.7 allows session fixation via the data.php sessid parameter.9.6 Critical
- c.p.sub project c.p.subC.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI.6.5 Medium
- verydowsA CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m...8.8 High
- lexmark 6500e firmware, cx310 firmware, cx410 firmware +37 more +39 moreCertain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers...5.3 Medium
- apache jspwikiCross-site Scripting in jspwiki-war6.1 Medium
- dundas biThe Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack,...8.6 High
- hgiga mailsherlock, oaklouds mailsherlock +1 moreSQL Injection exists in MailSherlock before 1.5.235 for OAKlouds4.3 Medium
- dlink dir-600m firmwareD-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm...9.8 Critical
- live555 streaming mediaIn Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header...7.5 High
- live555 streaming mediaIn Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are...7.5 High
- mywebsqlMyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code...9.8 Critical
- mywebsqlMyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via...5.7 Medium
- freron mailmateMailMate before 1.11.3 mishandles a suspicious HTML/MIME structure in a signed/encrypted email.7.5 High
- enigmailEnigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages...6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +30 more +32 moreThere is potential for memory corruption in the RIL daemon due to de reference of memory outside...7.8 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...5.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...7.8 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9640 firmware +33 more +35 moreWhile processing radio connection status change events, Radio index is not properly validated in...7.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +27 more +29 moreUnauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from...7.8 High
- qualcomm mdm9607 firmware, mdm9650 firmware, mdm9655 firmware +15 more +17 moreIf an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer...7.8 High
- qualcomm ipq8074 firmware, mdm9206 firmware, mdm9607 firmware +31 more +33 moreMalicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory...7.8 High
- pmd project pmdImproper Restriction of XML External Entity Reference in PMD8.1 High
- bitcoin core, bitcoinknots bitcoin knots +1 moreBitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1...5.5 Medium
- nconsulting nc-cmslib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name...7.5 High
- taogogo taocmstaocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name...9.8 Critical
- nibbleblogNibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter...9.8 Critical
- metinfoAn issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend...8.1 High
- traqTraq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).8.8 High
- traqTraq 3.7.1 allows SQL Injection via a tickets?search= URI.9.8 Critical
- frog cms project cmsadmin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a...6.1 Medium
- Show moreLoading…