CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- yingzhi python programming language, yingzhipython project yingzhipython +1 moreVulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to...9.1 Critical
- mambo cms, mambo-foundation mambo cms +1 moreA vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php,...5.3 Medium
- fileutils project fileutilsFileutils Command Injection vulnerability8.8 High
- ibm rational clearcaseIBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database...7.5 High
- ibm infosphere information server, infosphere information governance catalog, infosphere information server on cloud +2 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting....5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External...7.1 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized...8.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- sap manufacturing integration and intelligenceSAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator...8.8 High
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...7.5 High
- sap advanced business application programming platform kernel, advanced business application programming platform krnl32nuc, advanced business application programming platform krnl32uc +7 more +9 moreSLD Registration of ABAP Platform allows an attacker to prevent legitimate users from accessing a...4.9 Medium
- sap businessobjects bi platform, sap se webintelligence bilaunchpad (enterprise) +1 moreSAP WebIntelligence BILaunchPad, versions 4.10, 4.20, does not sufficiently encode user...5.4 Medium
- sap se hana extended application services, sap landscape management +1 moreUnder certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced)...9.8 Critical
- sap businessobjects, sap se businessobjects business intelligence platform servers (enterprise) +1 moreSAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any...9.8 Critical
- sap disclosure managementSAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an...8.8 High
- sap netweaver as abap, netweaver application server abap, sap se abap platform(sap basis) +2 moreCustomizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02,...8.8 High
- sap business one, sap se business one mobile android app +1 moreUnder certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker...5.5 Medium
- sap advanced business application programming platform kernel, advanced business application programming platform krnl64nuc, advanced business application programming platform krnl64uc +2 moreSAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75,...8.1 High
- sap disclosure managementSAP Disclosure Management (before version 10.1 Stack 1301) does not sufficiently encode user...5.4 Medium
- sap businessobjects, sap se businessobjects business intelligence platform (fiori launchpad) +1 moreThe Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently...6.1 Medium
- beescmsBEESCMS 4.0 has a CSRF vulnerability to add arbitrary VIP accounts via the admin/admin_member.php...8.8 High
- estrongs es file explorer file managerThe Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows...4.2 Medium
- nasm netwide assemblerIn Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens in asm/preproc.c.7.8 High
- pocoo jinja2, opensuse leap +1 more** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...9.8 Critical
- sound exchange project exchangeAn issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c allows a NULL pointer...5.5 Medium
- sound exchange project exchangeAn issue was discovered in SoX 14.4.2. One of the arguments to bitrv2 in fft4g.c is not guarded,...5.5 Medium
- sound exchange project exchangeAn issue was discovered in SoX 14.4.2. In xmalloc.h, there is an integer overflow on the result...5.5 Medium
- canonical ubuntu linux, debian linux, sound exchange project exchange +2 moreAn issue was discovered in SoX 14.4.2. lsx_make_lpf in effect_i_dsp.c has an integer overflow on...5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...8.1 High
kauthMageiaUpdated kauth packages fix security vulnerabilityNo scoreradvdMageiaUpdated radvd packages fix security vulnerabilityNo score- python python-gnupg, canonical ubuntu linux, debian linux +2 more +4 moreImproper Input Validation python-gnupg7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected...6.1 Medium
- google chromeIncorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote...6.5 Medium
- google androidNVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers...7.8 High
- google androidNVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory...7.8 High
- google androidNVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not...7.8 High
- abb cp400pb firmware, ics-cert abb cp400 panel builder texteditor 2.0 +1 moreThe TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7.05 and earlier contain a...7.8 High
- marlam mpop, msmtp +1 moreIn msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate...5.3 Medium
- tibco silver fabricThe SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a...6.1 Medium
- d-circle power eggInput validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and...9.8 Critical
- openam consortium (open source edition), osstech openam +1 moreOpen redirect vulnerability in OpenAM (Open Source Edition) 13.0 allows remote attackers to...6.1 Medium
- ntt docomo, inc. v20 pro l-01j, nttdocomo v20 pro l-01j firmware +1 moreV20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be...5.3 Medium
- micco lhmelting, the installer of lhmelting +1 moreUntrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3...7.8 High
- micco the installer of unarj32.dll, unarj32.dll +1 moreUntrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1...7.8 High
- micco the installer of unlha32.dll, unlha32.dll +1 moreUntrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2...7.8 High
- house gate inc. gate app for ios, housegate house gate +1 moreDirectory traversal vulnerability in HOUSE GATE App for iOS 1.7.8 and earlier allows remote...7.5 High
- yokogawa centum vp, prm, prosafe-rs +2 more +4 moreLicense Manager Service of YOKOGAWA products (CENTUM VP (R5.01.00 - R6.06.00), CENTUM VP Entry...9.8 Critical
- atlassian crowdVarious rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before...8.1 High
- atlassian confluence server, confluence data center +1 moreAtlassian Confluence Server and Data Center before version 6.13.1 allows an authenticated user to...6.5 Medium
- Show moreLoading…