CVEs published February 13, 2018
28 CVEs were published on February 13, 2018: 0 critical, 1 high.
- Published
- 28
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IBM Client Application Access · IBM Notes
- 3
- ARM mbed TLS before 1.3.22, before 2.1.10, and before
- 2
- Kofax Saperion Web Client
- 2
- Apache Software Foundation Apache ActiveMQ · org.apache.… +1
- 1
- Apache Software Foundation Apache JMeter · org.apache.jmete…
- 1
- Apache Software Foundation Apache Qpid Dispatch Router
- 1
- IBM AIX
- 1
- WAGO PFC200 Series
- 1
High 1
Medium, low and unrated 27
- CVE-2017-15699A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0.Apache Software Foundation Apache Qpid Dispatch Router
- CVE-2018-5459An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X.WAGO PFC200 Series
- CVE-2018-6910DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions
- CVE-2017-15709When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel vApache Software Foundation Apache ActiveMQ · org.apache.… +1
- CVE-2017-1711IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directoryIBM Client Application Access · IBM Notes
- CVE-2017-1714IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege.IBM Client Application Access · IBM Notes
- CVE-2017-1720IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared meIBM Client Application Access · IBM Notes
- CVE-2018-1383A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system,IBM AIX
- CVE-2018-6953In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual component length, which ha
- CVE-2015-9252An issue was discovered in QPDF before 7.0.0.
- CVE-2016-10713An issue was discovered in GNU patch before 2.7.6.
- CVE-2017-18183An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18184An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18185An issue was discovered in QPDF before 7.0.0.
- CVE-2017-18186An issue was discovered in QPDF before 7.0.0.
- CVE-2018-6951An issue was discovered in GNU patch through 2.7.6.
- CVE-2018-6952A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
- CVE-2018-6928PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.
- CVE-2018-6948In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffer buf.
- CVE-2018-0487ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (ARM mbed TLS before 1.3.22, before 2.1.10, and before
- CVE-2018-0488ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to ARM mbed TLS before 1.3.22, before 2.1.10, and before
- CVE-2018-6911The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a sing
- CVE-2018-6292Remote Code Execution in Saperion Web Client version 7.5.2 83166.Kofax Saperion Web Client
- CVE-2018-6293Arbitrary File Read in Saperion Web Client version 7.5.2 83166.Kofax Saperion Web Client
- CVE-2018-1297When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection.Apache Software Foundation Apache JMeter · org.apache.jmete…
- CVE-2018-6930A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remot
- CVE-2018-6942An issue was discovered in FreeType 2 through 2.9.