CVEs published in February 2019
853 vulnerabilities, 120 critical, 6 exploited.
- redhat libvirt, opensuse leap +1 moreA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...5.8 Medium
- phoenixcontact axc 1050 firmware, ilc 131 eth\/xc firmware, ilc 131 eth firmware +5 more +7 morePhoenix Contact ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC...9.8 Critical
- grinutil/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute...9.8 Critical
- std42 elfinderelFinder command injection vulnerability in the PHP connector9.8 Critical
- gnu glibc** DISPUTED ** In the GNU C Library (aka glibc or libc6) through 2.29,...7.5 High
- etsi enterprise transport securityThe ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide...5.9 Medium
- broadcom privileged access managerAn improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager...9.1 Critical
- apple icloud, icloud for windows, ios +6 more +8 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +5 more +7 moreA logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12...6.1 Medium
- apple icloud, icloud for windows, ios +6 more +8 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- j2storeSQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote...9.8 Critical
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreCross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6...6.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi...5.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL...5.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL...9.1 Critical
ghostscriptUbuntughostscript regressionNo score- zzzcms zzzphpThere is a CSRF in ZZZCMS zzzphp V1.6.1 via a /admin015/save.php?act=editfile request. It allows...8.8 High
- schoolcmsSchoolCMS version 2.3.1 allows file upload via the logo upload feature at admin.php?m=admin&c...7.2 High
- kde kauth, fedoraproject fedora, opensuse backports +1 more +3 moreKDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as...8.1 High
- gnu glibc, canonical ubuntu linux, mcafee web gateway +6 more +8 moreIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...9.8 Critical
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix...7.5 High
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreIn the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses...7.5 High
chromiumDebianchromium - regression updateNo score- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreA heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0...8.8 High
- podofo project podofo, fedoraproject fedora +1 morePoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL...8.8 High
- woocommerceWooCommerce before 3.5.5 allows XSS via a Photoswipe caption.6.1 Medium
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracle5.9 Medium
- cordaware bestinformedCordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL...9.8 Critical
- cordaware bestinformedThe Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client...7.8 High
- gurock testrailAn issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File"...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9615 firmware +28 more +30 moreImproperly configured memory protection allows read/write access to modem image from HLOS kernel...7.1 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +16 more +18 moreLack of input validation for data received from user space can lead to an out of bound array...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +39 more +41 moreImproper validation of array index can lead to unauthorized access while processing debugFS in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreArbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +18 more +20 moreKGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9206 firmware, mdm9607 firmware +11 more +13 moreImproper input validation in SCM handler to access storage in TZ can lead to unauthorized access...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +33 more +35 moreUse-after-free vulnerability will occur as there is no protection for the route table`s rule in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm msm8996au firmware, qcs605 firmware +28 more +30 moreExceeding the limit of usage entries are not tracked and the information will be lost causing the...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +48 more +50 moreImproper input validation in wireless service messaging module for data received from broadcast...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +43 more +45 moreImproper input validation for argument received from HLOS can lead to buffer overflows and...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9607 firmware, mdm9650 firmware +26 more +28 moreImproper input validation might result in incorrect app id returned to the caller Instead of...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9650 firmware, mdm9655 firmware +18 more +20 moreImproper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto,...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +40 more +42 moreBytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreUsage of non-time-constant comparison functions can lead to information leakage through side...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9150 firmware +44 more +46 moreUse of non-time constant memcmp function creates side channel that leaks information and leads to...5.5 Medium
- Show moreLoading…