CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreData truncation during higher to lower type conversion which causes less memory allocation than...7.8 High
- flexera flexnet publisher, oracle communications lsms +1 moreA Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher...9.8 Critical
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the...8.8 High
- hdfgroup hdf5An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the...8.8 High
- jamf self serviceJamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging...7.5 High
- cisco webex teamsCisco Webex Teams for iOS Arbitrary File Upload Vulnerability7.3 High
- hsycmsAn issue was discovered in Hsycms V1.1. There is an XSS vulnerability via the name field to the ...6.1 Medium
- cisco small business spa112 series ip phones, small business spa500 series ip phones, small business spa525 series ip phones +15 more +17 moreCisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability6.5 Medium
- exiv2An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in...8.8 High
- exiv2An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image:...8.8 High
- b3log symphonyModerate severity vulnerability that affects org.b3log:symphony6.1 Medium
- opensuse supportutilsCode execution if run with command line switch -v4.4 Medium
- opensuse supportutilsCode execution if run with command line switch -v6.7 Medium
- opensuse supportutilsUser can overwrite arbitrary log files in support tar2.2 Low
- opensuse supportutilsStatic temporary filename allows overwriting of files2.8 Low
- sublimetext sublime text 3** DISPUTED ** DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit...7.8 High
- samba, canonical ubuntu linux, debian linux +2 moreA flaw was found in the way an LDAP search expression could crash the shared LDAP server process...6.5 Medium
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path...7.5 High
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file...7.5 High
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a...7.5 High
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path...7.5 High
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in...6.1 Medium
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a...7.5 High
- tecrail responsive filemanagertecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as...7.5 High
- dlink dir-825 rev.b firmwareAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure...7.5 High
- d-link dir-878 firmwareAn issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a...9.8 Critical
- d-link dir-878 firmwareAn issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log...9.8 Critical
- dlink dir-825 rev.b firmwareAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank...9.8 Critical
- dlink dir-825 rev.b firmwareAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to...8.8 High
- irisnet irisnet-cryptoirisnet-crypto RCE Vulnerability9.8 Critical
- libming mingMing (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in...8.8 High
- libming mingMing (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the...8.8 High
- micode xiaomi perseus-p-ossThe msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018...5.5 Medium
- micode xiaomi perseus-p-ossThe msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018...5.5 Medium
- micode xiaomi perseus-p-ossdrivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro...5.5 Medium
- micode xiaomi perseus-p-ossThe ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device...5.5 Medium
- wuzhicmsXSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to...6.1 Medium
- wuzhicmsXSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe...6.1 Medium
- wuzhicmsXSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe...6.1 Medium
- wuzhicmsXSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to...6.1 Medium
waagentDebianwaagent - updateNo score- linux kernel, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 moreIn the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT...7.8 High
- thinkphp, opensourcebms open source background management system, zzzcms zzzphp +2 moreThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote...8.8 High
- zzcmszzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php...5.4 Medium
- leonerd libvtermlibvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory...7.5 High
- gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 moreAn issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in...7.8 High
- gnu binutils, netapp element software management +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutils, canonical ubuntu linux, f5 big-ip access policy manager +15 more +17 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...7.8 High
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- Show moreLoading…