CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
drupal/paragraphsPackagistThis resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.No scoredrupal/videoPackagistThis resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.No scoredrupal/metatagPackagistThis resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.No scoredrupal/jsonapiPackagistThis resolves issues described in SA-CORE-2019-003 for this module.No score- indexhibitIn Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in...8.8 High
- flexera software llc libexifAn error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif...7.5 High
- netgate haproxyThe HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or...6.1 Medium
- getbootstrap bootstrap, f5 big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreBootstrap Vulnerable to Cross-Site Scripting6.1 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0...5.4 Medium
- atlassian crucible, fisheye, fisheye and crucible +2 moreThe administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0...4.8 Medium
- dasannetworks h665 firmwareThe backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028...9.8 Critical
- papercut mf, ng +1 morePaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user...9.8 Critical
- octopus deploy, server +1 moreAn Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 ...6.5 Medium
- wordpressWordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges...6.5 Medium
- wordpress, debian linux +1 moreWordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an...8.8 High
- avinetworks avi vantageAvi Vantage before 17.2.13 uses an invalid URL encoding during a redirect operation, aka AV-33959.6.1 Medium
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy vulnerable to SQL Injection via order_by parameter9.8 Critical
- sonicwall sonicos, sonicosv +1 moreIn SonicWall SonicOS, administrators without full permissions can download imported certificates....5.5 Medium
- kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +16 more +18 moreImproper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.7.5 High
- kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +13 more +15 moreUse of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected...5.3 Medium
- tautullidata/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that...6.1 Medium
- o-dyn collabtiveCollabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.5.4 Medium
- dedecmsIn DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being...8.8 High
rsshDebianrssh - regression updateNo score- red hat ansibleAnsible Path Traversal vulnerability4.2 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of...4.4 Medium
- seafile seadroidThe seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the...7.5 High
- tintin\+\+ project tintin\+\+, wintin\+\+ +1 moreStack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2...9.8 Critical
- solarwinds orion network performance monitorSolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the...9.8 Critical
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It has stored XSS via the third text box (for the website...6.1 Medium
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows index.php?g=admin&m=setting&a=site_post CSRF.8.8 High
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service ...7.5 High
- wtcms project wtcmsAn issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by...9.8 Critical
- file project file, canonical ubuntu linux +1 moredo_bid_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...8.8 High
- intel openvinoLogic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a...3.9 Low
- intel data center managerImproper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0...4.4 Medium
- intel data center managerImproper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an...5.5 Medium
- intel data center managerInsufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow...5.5 Medium
- intel data center managerImproper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an...7.8 High
- intel data center managerImproper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an...5.5 Medium
- intel data center managerInsufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5...6.7 Medium
- intel data center managerInsufficient run protection in install routine for Intel(R) Data Center Manager SDK before...6.7 Medium
- intel data center managerInsufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK...7.8 High
- intel data center managerInsufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before...5.5 Medium
- intel data center managerInsufficient file protection in install routine for Intel(R) Data Center Manager SDK before...5.5 Medium
- intel data center managerInsufficient session authentication in web server for Intel(R) Data Center Manager SDK before...8.8 High
- intel uniteAuthentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an...9.8 Critical
- intel usb 3.0 extensible host controller driverCode injection vulnerability in the installer for Intel(R) USB 3.0 eXtensible Host Controller...6.7 Medium
- intel proset\/wirelessBuffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may...5.5 Medium
- Show moreLoading…