CVEs published February 23, 2018
59 CVEs were published on February 23, 2018: 0 critical, 0 high.
- Published
- 59
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 59
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- 10
- FUJI SOFT INCORPORATED FS010W
- 2
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- LINE for iOS
- 1
- OnCommand API Services and NetApp Service Level Manager
- 1
- Qualcomm Snapdragon Automobile, Snapdragon IoT, Snapdragon…
- 1
- Synology Photo Station
- 1
Medium, low and unrated 59
- CVE-2017-14884In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" frQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-14910In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD Qualcomm Snapdragon Automobile, Snapdragon IoT, Snapdragon…
- CVE-2017-15518All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account OnCommand API Services and NetApp Service Level Manager
- CVE-2017-15817In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15820In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can poteQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15829In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentiallQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15860In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management framQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15861In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is recQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-15862In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17764In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly valQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17765In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly valiQualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2017-17767In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component Qualcomm Android for MSM, Firefox OS for MSM, QRD Android
- CVE-2018-1305Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 tApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2017-16769Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadatSynology Photo Station
- CVE-2018-7320In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the SIGCOMP protocol dissector could crash.
- CVE-2018-7321In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with
- CVE-2018-7322In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite loop that was addressed by checking for intege
- CVE-2018-7323In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calcul
- CVE-2018-7324In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct in
- CVE-2018-7325In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a l
- CVE-2018-7326In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct in
- CVE-2018-7327In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating
- CVE-2018-7328In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short fra
- CVE-2018-7329In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-b
- CVE-2018-7330In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct
- CVE-2018-7331In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length
- CVE-2018-7332In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a len
- CVE-2018-7333In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a ch
- CVE-2018-7334In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash.
- CVE-2018-7335In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash.
- CVE-2018-7336In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash.
- CVE-2018-7337In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash.
- CVE-2018-7417In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash.
- CVE-2018-7418In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash.
- CVE-2018-7419In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash.
- CVE-2018-7420In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash.
- CVE-2018-7421In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop.
- CVE-2018-7443The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which
- CVE-2017-18196Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, whi
- CVE-2018-7435An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7436An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7437An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7438An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-7439An issue was discovered in FreeXL before 1.0.5.
- CVE-2018-6859SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter.
- CVE-2012-6709ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.
- CVE-2014-3205backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user.
- CVE-2014-3206Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or th
- CVE-2018-6764util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an i
- CVE-2018-0518LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof sLINE for iOS
- CVE-2018-0519Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTMLFUJI SOFT INCORPORATED FS010W
- CVE-2018-0520Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authenticatFUJI SOFT INCORPORATED FS010W
- CVE-2018-7339The MP4Atom class in mp4atom.cpp in MP4v2 through 2.0.0 mishandles Entry Number validation for the MP4 Table Property, which allows remote a
- CVE-2018-6866Cross Site Scripting (XSS) exists in PHP Scripts Mall Learning and Examination Management System Script 2.3.1 via a crafted message.
- CVE-2018-6867Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter.
- CVE-2018-6868Cross Site Scripting (XSS) exists in PHP Scripts Mall Slickdeals / DealNews / Groupon Clone Script 3.0.2 via a User Profile Field parameter.
- CVE-2018-7440An issue was discovered in Leptonica through 1.75.3.
- CVE-2018-7441Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other
- CVE-2018-7442An issue was discovered in Leptonica through 1.75.3.