Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
1,041 results · Feed
-
Unscored —
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) co…
-
Unscored —
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, re…
-
Unscored —
A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, re…
-
Unscored —
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to…
-
Unscored —
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote atta…
-
Unscored —
A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remo…
-
Unscored —
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentic…
-
Unscored —
Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physi…
-
Critical 9.8
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Data…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospi…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Route…
-
Unscored —
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon…
-
Unscored —
The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which ma…
-
Unscored —CVE-2016-9314 Public exploit
Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtu…
-
Unscored —CVE-2016-9316 Public exploit
Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in…
-
Unscored —
Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appl…
-
Unscored —CVE-2016-9315 Public exploit
Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan W…
-
Unscored —
Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU cons…
-
Unscored —CVE-2017-6095 Public exploit
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lis…
-
Unscored —
FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a mal…
-
Unscored —CVE-2017-6097 Public exploit
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/cam…
-
Unscored —CVE-2017-6096 Public exploit
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/lis…
-
Unscored —
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosu…
-
Unscored —
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosu…
-
Unscored —CVE-2017-6098 Public exploit
A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/cam…
-
Unscored —
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cnt…
-
Unscored —CVE-2017-5881 Public exploit
GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspec…
-
Unscored —
CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be…
-
Unscored —
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window…
-
Unscored —
F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive a…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The i…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth"…
-
Unscored —CVE-2016-7617 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth"…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Grapher" c…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" comp…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iClou…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watch…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iClou…