CVEs published February 8, 2018
74 CVEs were published on February 8, 2018: 2 critical, 0 high. 2 are now in CISA KEV.
- Published
- 74
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 1
- Unrated
- 71
- Now in CISA KEV
- 2
- Fix available
- 2
Most affected products
- Quest NetVault Backup
- 24
- Brocade Communications Systems Brocade FABRIC OS
- 2
- Cisco Data Center Analytics Framework
- 2
- Cisco Policy Suite
- 2
- Cisco Unified Communications Manager
- 2
- borgbackup
- 1
- Cisco Email Security Appliance and Cisco Content Security M…
- 1
- Cisco Firepower System Software
- 1
- Cisco IOS and IOS XE
- 1
- Cisco IOS XR
- 1
Critical 2
Medium, low and unrated 72
- CVE-2011-4889The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before
- CVE-2012-0941Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote at
- CVE-2012-2166IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before level 11.1.1 have hard
- CVE-2012-3331IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF.
- CVE-2012-5359Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.
- CVE-2012-5360Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.
- CVE-2013-2830Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
- CVE-2013-3552Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file
- CVE-2013-3553Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file
- CVE-2014-4066Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
- CVE-2014-4112Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
- CVE-2014-4145Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
- CVE-2014-8985Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
- CVE-2015-2329Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary we
- CVE-2017-15914Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.borgbackup
- CVE-2018-6180A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts.
- CVE-2018-6644SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the /cimom URI.
- CVE-2017-6225Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric Brocade Communications Systems Brocade FABRIC OS
- CVE-2017-6227A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.Brocade Communications Systems Brocade FABRIC OS
- CVE-2018-5550Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allowEpson AirPrint
- CVE-2017-17412This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17413This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.
- CVE-2017-17414This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17415This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17416This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17417This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17418This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17419This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17420This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17421This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17422This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17423This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17424This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17425This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17652This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17653This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17654This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17655This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17656This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17657This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17658This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2017-17659This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.Quest NetVault Backup
- CVE-2018-1161This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.Quest NetVault Backup
- CVE-2018-1162This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2Quest NetVault Backup
- CVE-2018-1163This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13.Quest NetVault Backup
- CVE-2018-1000030Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free.
- CVE-2018-6846Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php.
- CVE-2017-7351A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.
- CVE-2018-0512Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC.I-O DATA DEVICE IP address setting tool "MagicalFinder"
- CVE-2018-0513Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers tMT Systems Co. MTS Simple Booking C · MT Systems Co. MTS Si…
- CVE-2018-0514MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.futomi Co. MP Form Mail CGI eCommerce Edition
- CVE-2018-0517Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges vKDDI Anshin net security for Windows
- CVE-2018-0113A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commanCisco UCS Central
- CVE-2018-0116A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized aCisco Policy Suite
- CVE-2018-0117A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software cCisco Virtualized Packet Core-Distributed Instance
- CVE-2018-0119A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to iCisco Spark
- CVE-2018-0120A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQLCisco Unified Communications Manager
- CVE-2018-0122A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenCisco StarOS for Cisco ASR 5000 Series Aggregation Services…
- CVE-2018-0123A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to useCisco IOS and IOS XE
- CVE-2018-0127A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could alloCisco RV132W and RV134W Wireless VPN Routers
- CVE-2018-0128A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attackCisco Data Center Analytics Framework
- CVE-2018-0129A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attackCisco Data Center Analytics Framework
- CVE-2018-0132A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to caCisco IOS XR
- CVE-2018-0134A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whethCisco Policy Suite
- CVE-2018-0135A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an Cisco Unified Communications Manager
- CVE-2018-0137A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of seCisco Prime Network
- CVE-2018-0138A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file poCisco Firepower System Software
- CVE-2018-0140A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authCisco Email Security Appliance and Cisco Content Security M…
- CVE-2018-6834static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
- CVE-2018-6835node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restep_etherpad-lite
- CVE-2018-6836The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory a
- CVE-2018-6844MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.