CVEs published February 23, 2018
59 CVEs were published on February 23, 2018: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 59
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 59
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 10
- FUJI SOFT INCORPORATED FS010W
- 2
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- LINE for iOS
- 1
- OnCommand API Services and NetApp Service Level Manager
- 1
- Qualcomm Snapdragon Automobile, Snapdragon IoT, Snapdragon…
- 1
- Synology Photo Station
- 1
Medium, low and unrated 59
- CVE-2017-14884In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len"…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-14910In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12…Qualcomm Snapdragon Automobile, Snapdragon IoT, Snapdragon…
- CVE-2017-15518All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user…OnCommand API Services and NetApp Service Level Manager
- CVE-2017-15817In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15820In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15829In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15860In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15861In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15862In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17764In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17765In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17767In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder…Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-1305Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 tApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2017-16769Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain…Synology Photo Station
- CVE-2018-7320In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash.
- CVE-2018-7321In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding…
- CVE-2018-7322In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for…
- CVE-2018-7323In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a…
- CVE-2018-7324In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct…
- CVE-2018-7325In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a…
- CVE-2018-7326In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct…
- CVE-2018-7327In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by…
- CVE-2018-7328In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short…
- CVE-2018-7329In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting…
- CVE-2018-7330In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a…
Show all 59 entriesShow fewer entries
- CVE-2018-7331In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a…
- CVE-2018-7332In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a…
- CVE-2018-7333In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a…
- CVE-2018-7334In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash.
- CVE-2018-7335In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash.
- CVE-2018-7336In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash.
- CVE-2018-7337In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash.
- CVE-2018-7417In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash.
- CVE-2018-7418In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash.
- CVE-2018-7419In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash.
- CVE-2018-7420In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash.
- CVE-2018-7421In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop.
- CVE-2018-7443The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file…
- CVE-2017-18196Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories…
- CVE-2018-7435An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7436An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7437An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7438An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7439An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-6859SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.
- CVE-2012-6709ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- CVE-2014-3205backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user.
- CVE-2014-3206Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or…
- CVE-2018-6764util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an…
- CVE-2018-0518LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof…LINE for iOS
- CVE-2018-0519Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or…FUJI SOFT INCORPORATED FS010W
- CVE-2018-0520Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the…FUJI SOFT INCORPORATED FS010W
- CVE-2018-7339The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote…
- CVE-2018-6866Cross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message.
- CVE-2018-6867Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter.
- CVE-2018-6868Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter.
- CVE-2018-7440An issue was discovered in Leptonica through 1.75.3.
- CVE-2018-7441Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified…
- CVE-2018-7442An issue was discovered in Leptonica through 1.75.3.