CVEs published February 13, 2018
28 CVEs were published on February 13, 2018: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 28
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IBM Client Application Access · IBM Notes
- 3
- ARM mbed TLS before 1.3.22, before 2.1.10, and before
- 2
- Kofax Saperion Web Client
- 2
- Apache Software Foundation Apache ActiveMQ · org.apache.… +1
- 1
- Apache Software Foundation Apache JMeter · org.apache.jmete…
- 1
- Apache Software Foundation Apache Qpid Dispatch Router
- 1
- IBM AIX
- 1
- WAGO PFC200 Series
- 1
High 1
Medium, low and unrated 27
- CVE-2017-15699A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0.Apache Software Foundation Apache Qpid Dispatch Router
- CVE-2018-5459An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.WAGO PFC200 Series
- CVE-2018-6910DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or…
- CVE-2017-15709When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel…Apache Software Foundation Apache ActiveMQ · org.apache.… +1
- CVE-2017-1711IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp…IBM Client Application Access · IBM Notes
- CVE-2017-1714IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege.IBM Client Application Access · IBM Notes
- CVE-2017-1720IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared…IBM Client Application Access · IBM Notes
- CVE-2018-1383A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one…IBM AIX
- CVE-2018-6953In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which…
- CVE-2015-9252An issue was discovered in QPDF before 7.0.0.
- CVE-2016-10713An issue was discovered in GNU patch before 2.7.6.
- CVE-2017-18183An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18184An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18185An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18186An issue was discovered in QPDF before 7.0.0.
- CVE-2018-6951An issue was discovered in GNU patch through 2.7.6.
- CVE-2018-6952A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
- CVE-2018-6928PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.
- CVE-2018-6948In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf.
- CVE-2018-0487ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service…ARM mbed TLS before 1.3.22, before 2.1.10, and before
- CVE-2018-0488ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers…ARM mbed TLS before 1.3.22, before 2.1.10, and before
- CVE-2018-6911The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a…
- CVE-2018-6292Remote Code Execution in Saperion Web Client version 7.5.2 83166.Kofax Saperion Web Client
- CVE-2018-6293Arbitrary File Read in Saperion Web Client version 7.5.2 83166.Kofax Saperion Web Client
- CVE-2018-1297When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection.Apache Software Foundation Apache JMeter · org.apache.jmete…