Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metachara…
-
Unscored —
Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbi…
-
Unscored —CVE-2018-6947 Public exploit
An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with No…
-
Unscored —CVE-2015-3898 Public exploit
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to ar…
-
Unscored —
The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binu…
-
Unscored —
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote a…
-
Unscored —
The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libb…
-
Medium 5.9
Apache Tomcat unauthorized access vulnerability
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This …
-
Medium 6.5
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.
-
Unscored —
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out…
-
Unscored —
IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary c…
-
Unscored —
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows r…
-
Unscored —
PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field to admin/ca…
-
Unscored —
In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to impro…
-
Unscored —
A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that h…
-
Unscored —
LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerCo…
-
Unscored —
The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a deni…
-
Unscored —
The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to downl…
-
Unscored —CVE-2018-7477 Public exploit
SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents…
-
Unscored —
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted inp…
-
Unscored —
There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted…
-
Unscored —
There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.…
-
Unscored —
There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will…
-
Unscored —
A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify …
-
Unscored —
An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can overw…
-
Unscored —
An out-of-bounds write (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. A size used by mem…
-
Unscored —
A stack-based buffer overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. This occurs…
-
Unscored —
In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p.
-
Unscored —
In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result.
-
Unscored —
zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of…
-
Unscored —
In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links.
-
Unscored —
In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax.
-
Unscored —
In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters.
-
Unscored —
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
-
Unscored —
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processi…
-
Unscored —
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.
-
Unscored —CVE-2018-7467 EPSS 10%
AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI.
-
Unscored —
When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the …
-
Unscored —
The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of…