CVEs published February 8, 2018
74 CVEs were published on February 8, 2018: 2 critical, 0 high. 2 are now in CISA KEV.
- Published
- 74
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 1
- Unrated
- 71
- Now in CISA KEV
- 2
- Fix available
- 2
Most affected products
- Quest NetVault Backup
- 24
- Brocade Communications Systems Brocade FABRIC OS
- 2
- Cisco Data Center Analytics Framework
- 2
- Cisco Policy Suite
- 2
- Cisco Unified Communications Manager
- 2
- borgbackup
- 1
- Cisco Email Security Appliance and Cisco Content Security M…
- 1
- Cisco Firepower System Software
- 1
- Cisco IOS and IOS XE
- 1
- Cisco IOS XR
- 1
Critical 2
Medium, low and unrated 72
- CVE-2011-4889The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1…
- CVE-2012-0941Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote…
- CVE-2012-2166IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have…
- CVE-2012-3331IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF.
- CVE-2012-5359Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.
- CVE-2012-5360Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.
- CVE-2013-2830Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
- CVE-2013-3552Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF…
- CVE-2013-3553Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF…
- CVE-2014-4066Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
- CVE-2014-4112Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
- CVE-2014-4145Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
- CVE-2014-8985Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
- CVE-2015-2329Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary…
- CVE-2017-15914Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.borgbackup
- CVE-2018-6180A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts.
- CVE-2018-6644SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- CVE-2017-6225Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade…Brocade Communications Systems Brocade FABRIC OS
- CVE-2017-6227A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and…Brocade Communications Systems Brocade FABRIC OS
- CVE-2018-5550Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can…Epson AirPrint
- CVE-2017-17412This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17413This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.
- CVE-2017-17414This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17415This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17416This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
Show all 72 entriesShow fewer entries
- CVE-2017-17417This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17418This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17419This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17420This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17421This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17422This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17423This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17424This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17425This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17652This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17653This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17654This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17655This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17656This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17657This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17658This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17659This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2018-1161This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.Quest NetVault Backup
- CVE-2018-1162This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup…Quest NetVault Backup
- CVE-2018-1163This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13.Quest NetVault Backup
- CVE-2018-1000030Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free.
- CVE-2018-6846Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php.
- CVE-2017-7351A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.
- CVE-2018-0512Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC.I-O DATA DEVICE IP address setting tool "MagicalFinder"
- CVE-2018-0513Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers…MT Systems Co. MTS Simple Booking C · MT Systems Co. MTS Si…
- CVE-2018-0514MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.futomi Co. MP Form Mail CGI eCommerce Edition
- CVE-2018-0517Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges…KDDI Anshin net security for Windows
- CVE-2018-0113A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell…Cisco UCS Central
- CVE-2018-0116A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized…Cisco Policy Suite
- CVE-2018-0117A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software…Cisco Virtualized Packet Core-Distributed Instance
- CVE-2018-0119A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to…Cisco Spark
- CVE-2018-0120A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an…Cisco Unified Communications Manager
- CVE-2018-0122A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an…Cisco StarOS for Cisco ASR 5000 Series Aggregation Services…
- CVE-2018-0123A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to…Cisco IOS and IOS XE
- CVE-2018-0127A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could…Cisco RV132W and RV134W Wireless VPN Routers
- CVE-2018-0128A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote…Cisco Data Center Analytics Framework
- CVE-2018-0129A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote…Cisco Data Center Analytics Framework
- CVE-2018-0132A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…Cisco IOS XR
- CVE-2018-0134A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine…Cisco Policy Suite
- CVE-2018-0135A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on…Cisco Unified Communications Manager
- CVE-2018-0137A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of…Cisco Prime Network
- CVE-2018-0138A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file…Cisco Firepower System Software
- CVE-2018-0140A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an…Cisco Email Security Appliance and Cisco Content Security M…
- CVE-2018-6834static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
- CVE-2018-6835node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access…ep_etherpad-lite
- CVE-2018-6836The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory…
- CVE-2018-6844MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.