Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instanc…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthent…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensiti…
-
Unscored —
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthent…
-
Unscored —
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attack…
-
Unscored —
A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, …
-
Unscored —
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Applianc…
-
Unscored —
A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated,…
-
Unscored —
A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, …
-
Unscored —
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC V…
-
Unscored —
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an u…
-
Unscored —
static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
-
Unscored —
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.
-
Critical 9.8
Etherpad Lite Access Restriction Bypass
node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions.
-
Unscored —
cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, whi…
-
Unscored —
Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the content…
-
Unscored —
Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker in a priv…
-
Unscored —
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform …
-
Unscored —
Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote at…
-
Unscored —
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to …
-
Unscored —
Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Wind…
-
Unscored —
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform…
-
Unscored —
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to acces…
-
Unscored —
A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote at…
-
Unscored —CVE-2017-15394 Public exploit
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo…
-
Unscored —
An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof …
-
Unscored —
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt …
-
Unscored —
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an ou…
-
Unscored —
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap…
-
Unscored —
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially expl…
-
Unscored —
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit he…
-
Unscored —
Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit h…
-
Unscored —
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit hea…
-
High 8.8
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other pr…
-
Unscored —CVE-2017-5124 Public exploit
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject…
-
Unscored —
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap c…
-
Unscored —
PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.