Skip to content
OpenAdvisories

Archive

February 2018

Vulnerabilities first published in this month (UTC), newest first.

1,330 results · Feed

  • Unscored —

    Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attac…

  • Unscored —

    Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web sc…

  • Unscored —

    Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attac…

  • Unscored —

    An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc o…

  • Unscored —

    Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.

  • Unscored —

    In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/z…

  • Unscored —

    It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files t…

  • Unscored —
    CVE-2017-1000408 Public exploit

    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environm…

  • Unscored —
    CVE-2017-1000409 Public exploit

    A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH enviro…