CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- atlassian jira, jira server +1 moreThe labels widget gadget in Atlassian Jira before version 7.6.11 and from version 7.7.0 before...5.4 Medium
- micco lhmelting, lmlzh32.dll, unarj32.dll +2 more +4 moreUntrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32...7.8 High
- micco self-extracting archives created by unlha32.dll, unlha32.dll +1 moreUntrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to...7.8 High
- atlassian jira, jira server +1 moreThe VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7...4.1 Medium
- atlassian jira, jira server +1 moreThe two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from...5.4 Medium
- openam consortium openamOpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows...7.5 High
- mcafee true key, mcafee, llc true key (tk) +1 moreTrue Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability5.6 Medium
- schoolcmsAn issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c...6.1 Medium
- schoolcmsAn issue was discovered in SchoolCMS 2.3.1. There is an XSS vulnerability via index.php?a=Index&c...6.1 Medium
- cloud foundry credhub cliCredHub CLI writes environment variable credentials to disk6.3 Medium
- dell wyse password encoder, wyse thinlinux +1 moreDSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability7.9 High
- uaparser user agent parser-coreuap-core Regular Expression Denial of Service issue5.3 Medium
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- dlink dir-878 firmwareAn issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command...8.8 High
- aveva indusoft web studio, ics-cert aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update, aveva intouch machine edition 2014 +2 moreAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly...7.5 High
- aveva indusoft web studio, ics-cert aveva software, llc indusoft web studio prior to version 8.1 sp3 and intouch edge hmi (formerly intouch machine edition) prior to version 2017 update, aveva intouch machine edition 2014 +2 moreAVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly...9.8 Critical
- check point software technologies ltd. winrarIn WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability...7.8 High
- ics-cert wecon levistudiou, we-con levistudiou +1 moreA memory corruption vulnerability has been identified in WECON LeviStudioU version 1.8.56 and...7.8 High
- ics-cert wecon levistudiou, we-con levistudiou +1 moreSeveral heap-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior...7.8 High
- ics-cert wecon levistudiou, we-con levistudiou +1 moreMultiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and...7.8 High
- ics-cert cx-supervisorWhen CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value...5.0 Medium
- ics-cert cx-supervisorAn access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could...7.3 High
- hackerone airmax, edgemax, ui airos, edgemax firmware +2 moreDenial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers...7.5 High
- jforumIn JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using...5.3 Medium
- atto fibrebridge 7500n firmware, netapp atto fibrebridge 7500n +1 moreATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows...7.5 High
- microfocus solutions business manager, netiq edirectory access manager (nam) +1 moreSolutions Business Manager (SBM) Authentication Bypass Issue in Version prior to 11.59.8 Critical
- cisco network assurance engineCisco Network Assurance Engine CLI Access with Default Password Vulnerability7.7 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate filtering on URL fields in various...6.1 Medium
- joomla joomla\!Joomla! Object Injection Vulnerability9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. A combination of specific web server...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate checks at the Global Configuration...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. Inadequate parameter handling in JavaScript code...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.3. The "No Filtering" textfilter overrides child...6.1 Medium
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 moreAn attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway...7.2 High
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 moreRegisters used to store Modbus values can be read and written from the web interface without...9.1 Critical
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 morePR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow...9.8 Critical
- canonical snapd, ubuntu linux +1 moreLocal privilege escalation via snapd socket8.8 High
- verydowsVerydows 2.0 has XSS via the index.php?m=api&c=stats&a=count referrer parameter.6.1 Medium
- freebsdIn FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0...8.8 High
- freebsdIn FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE...5.5 Medium
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to...5.4 Medium
- flatpak, debian linux, redhat enterprise linux desktop +5 more +7 moreFlatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script...8.2 High
- gnome keyring, canonical ubuntu linux, oracle zfs storage appliance kit +2 moreIn pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session...7.8 High
- *** n/a *** androidIn llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8...6.5 Medium
- Show moreLoading…