CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...8.1 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreImplementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an...6.5 Medium
- google chromeUse after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to...7.4 High
- google chromeInappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a...5.3 Medium
- google chromeUse of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local...5.5 Medium
- pbootcmsA SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps...7.2 High
- bagesoft bagecmsupload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL...7.2 High
- vnote project vnoteVNote 2.2 has XSS via a new text note.6.1 Medium
- seacmsSeaCMS 7.2 mishandles member.php?mod=repsw4 requests.8.8 High
- cmswingglobal.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations...7.5 High
- mi mix 2 firmwareOn Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface...5.5 Medium
- feifeicmsFeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via...8.8 High
- zzcmsadmin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files...7.5 High
- onefilecmsOneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button...4.9 Medium
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter...6.5 Medium
- globee woocommerceThe GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.7.5 High
- adobe flash player desktop runtime, flash player for google chrome, flash player for microsoft edge and internet explorer 11 +1 more +3 moreFlash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome...6.5 Medium
- zabbix, debian linux +1 moreZabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3...6.1 Medium
- hotels server project serverHotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login...9.8 Critical
- ory hydraHydra has Reflected XSS via error_hint parameter6.1 Medium
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the...6.5 Medium
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the...6.5 Medium
- hdfgroup hdf5A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library...6.5 Medium
- zohocorp manageengine servicedesk plusAn Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk...9.8 Critical
- zoho manageengine, zohocorp manageengine servicedesk plus +1 moreZoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to...6.5 Medium
- dlink dir-823g firmwareAn issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect...7.5 High
- amazon fire osAmazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms...7.4 High
- musicloud project musicloudA file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By...8.1 High
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the...7.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function...8.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in Tcpreplay 4.3.1. An invalid memory access occurs in do_checksum in...7.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in AP4_Track:...8.8 High
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the...7.8 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. A heap-based buffer over-read exists in...8.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function...7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreAn issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function...7.8 High
mosquittoDebianmosquitto - regression updateNo score- verydowsVerydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=index[XSS] value.6.1 Medium
- dedecmsDedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php...7.5 High
- responsive video news script project video news scriptPHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example...6.1 Medium
- themerig find a place cms directoryThemerig Find a Place CMS Directory 1.5 has SQL Injection via the find/assets/external/data_2.php...9.8 Critical
- hiawatha-webserver hiawathaIn Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles...8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Critical
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Critical
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...9.8 Critical
- mozilla thunderbirdA crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted...7.5 High
- mozilla thunderbirdA use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The...9.8 Critical
- easy2map easy2map-photos, steven ellis easy2map-photos wordpress plugin +1 moreVulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave...7.5 High
- easy2map easy2map-photos, steven ellis easy2map-photos wordpress plugin +1 moreVulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized...9.8 Critical
- Show moreLoading…