CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- cisco firepower extensible operating system (fxos), firepower 9000 firmware +1 moreCisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service Vulnerability6.1 Medium
- cisco iot field network director, iot field network director (iot-fnd) +1 moreCisco IoT Field Network Director XML External Entity Vulnerability4.9 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability5.8 Medium
- cisco unity connectionCisco Unity Connection Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco ip phone 8800 series software, ip conference phone 7832 firmware, ip conference phone 8832 firmware +12 more +14 moreCisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service Vulnerability6.5 Medium
- cisco network convergence system 1000 series, ios xr +1 moreCisco Network Convergence System 1000 Series TFTP Directory Traversal Vulnerability7.5 High
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex Arbitrary Statistics Write Vulnerability4.0 Medium
- netis-systems wf2411 firmware, wf2880 firmware +1 moreOn Netis WF2411 with firmware 2.1.36123 and other Netis WF2xxx devices (possibly WF2411 through...9.8 Critical
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability5.3 Medium
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco Hyperflex Stored Cross-Site Scripting Vulnerability4.7 Medium
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex Software Unauthenticated Root Access Vulnerability8.1 High
- cisco prime collaboration assuranceCisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability8.2 High
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to...4.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates...4.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses...4.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not...4.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is...6.1 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports...5.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could...6.1 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains...5.1 Medium
- altn mdaemonMDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).6.1 Medium
- altn mdaemonMDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).6.1 Medium
- cisco prime infrastructureCisco Prime Infrastructure Certificate Validation Vulnerability7.4 High
ghostscriptUbuntughostscript regressionNo score- wavemaker wavemarker studiocom/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService...9.6 Critical
- mcafee getsusp, mcafee, llc mcafee getsusp (getsusp) +1 moreGetSusp (a free McAfee tool) update fixes an infinite loop vulnerability (CVE-2018-6687)6.5 Medium
- fastweb fastgate firmwareThe web interface on FASTGate Fastweb devices with firmware through 0.00.47_FW_200_Askey 2017-05...9.8 Critical
- kohanaframework kohanaKohana through 3.3.6 has SQL Injection when the order_by() parameter can be controlled.9.8 Critical
- liquidware flexapp, profileunity +1 moreAn issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6...7.8 High
- seafileSeafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining...7.5 High
- splunkSplunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2...5.4 Medium
- signiant manager\+agentsIn Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11...7.5 High
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effective5.3 Medium
- isc bind, bind 9 +1 moreAn assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys4.9 Medium
- isc bind, bind 9 +1 moreA specially crafted packet can cause named to leak memory7.5 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.7.8 High
- cisco hyperflex hx-series, hyperflex hx data platform +1 moreCisco HyperFlex Software Command Injection Vulnerability8.8 High
- micro focus filrLocal privilege escalation in Filr famtd7.8 High
- micro focus filrPath traversal vulnerability in Filr web application6.5 Medium
- jenkins jms messaging, jenkins project jms messaging plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins JMS Messaging Plugin4.3 Medium
- jenkins octopusdeploy, jenkins project octopusdeploy plugin +1 moreSSRF vulnerability due to missing permission check in Jenkins OctopusDeploy Plugin4.3 Medium
- jenkins mattermost, jenkins project mattermost notification plugin +1 moreJenkins Mattermost Notification Plugin vulnerable to SSRF4.3 Medium
- jenkins cloud foundry, jenkins project cloud foundry plugin +1 moreJenkins Cloud Foundry Plugin vulnerable to exposure of sensitive information8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreJenkins Script Security Plugin sandbox bypass vulnerability8.8 High
- mikrotik routeros, tenable mikrotik routeros +1 moreMikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an...7.5 High
- drupal core, drupal +1 moreDrupal core - Highly critical - Remote Code Execution8.1 High
drupal/fontawesomePackagistThis resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.No scoredrupal/tmgmtPackagistThis resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.No score- Show moreLoading…