Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
1,041 results · Feed
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFam…
-
Unscored —
An issue was discovered in certain Apple products. Safari before 10.0.3 is affected. The issue involves the "Safari" co…
-
Unscored —CVE-2017-2368 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "Contacts" com…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2362 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2360 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCl…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCl…
-
Unscored —CVE-2017-2369 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —CVE-2017-2373 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCl…
-
Unscored —CVE-2017-2353 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth"…
-
Unscored —CVE-2017-2363 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is aff…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" compone…
-
Unscored —
An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projec…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Graphics D…
-
Unscored —CVE-2017-2364 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The…
-
Unscored —CVE-2017-2371 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" compo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewe…
-
Unscored —CVE-2017-2365 Public exploit
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCl…
-
Unscored —CVE-2017-6074 Public exploit
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST …
-
Unscored —
Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…
-
Unscored —
Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local…
-
Unscored —
XML external entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows rem…
-
Unscored —
SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authen…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to …
-
Unscored —
The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote atta…
-
Medium 4.7
MantisBT XSS through weak CSP when using Gravatar plugin
MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
-
Unscored —
Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.…
-
Unscored —
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive i…
-
Unscored —
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vector…
-
Unscored —
Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vecto…
-
Unscored —
Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via …
-
Unscored —
The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown …
-
Unscored —
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.