CVEs published February 26, 2018
30 CVEs were published on February 26, 2018: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- IBM Security Guardium Big Data Intelligence
- 2
- Apache Software Foundation Apache Geode · org.apache.geode:…
- 1
- com.fasterxml.jackson.core:jackson-databind
- 1
- Microsoft Identity Manager
- 1
- ox
- 1
- uwsgi
- 1
Medium, low and unrated 30
- CVE-2017-11632An issue was discovered on Wireless IP Camera 360 devices.
- CVE-2017-11633An issue was discovered on Wireless IP Camera 360 devices.
- CVE-2017-11634An issue was discovered on Wireless IP Camera 360 devices.
- CVE-2017-11635An issue was discovered on Wireless IP Camera 360 devices.
- CVE-2017-16229In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafox
- CVE-2017-16813A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS.
- CVE-2017-16814A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS.
- CVE-2018-0908Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted atMicrosoft Identity Manager
- CVE-2018-7490uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.uwsgi
- CVE-2018-7249An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as
- CVE-2018-7250An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as
- CVE-2018-7492A NULL pointer dereference was found in the net/rds/rdma.c __rds_rdma_map() function in the Linux kernel before 4.14.7 allowing local attack
- CVE-2017-18195An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0.
- CVE-2018-7448Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject
- CVE-2018-7491In PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might lead to state-changing impact in the context
- CVE-2018-5762The TLS implementation in the TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 58.1 before 58.160, 59.1 before 059.1a
- CVE-2018-7487There is a heap-based buffer overflow in the LoadPCX function of in_pcx.cpp in sam2p 0.49.4.
- CVE-2018-7489FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution becausecom.fasterxml.jackson.core:jackson-databind
- CVE-2017-1774IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users.IBM Security Guardium Big Data Intelligence
- CVE-2017-18201An issue was discovered in GNU libcdio before 2.0.0.
- CVE-2018-1377IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores user credentials in plain in clear text which can be read by a local user.IBM Security Guardium Big Data Intelligence
- CVE-2018-7485The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, which allows attacker
- CVE-2018-7486Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file ty
- CVE-2018-7463SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQ
- CVE-2017-9425The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.
- CVE-2017-9426ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags a
- CVE-2017-18200The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bios calls, which allo
- CVE-2018-7479YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php.
- CVE-2017-15696When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configurApache Software Foundation Apache Geode · org.apache.geode:…
- CVE-2018-7484An issue was discovered in PureVPN through 5.19.4.0 on Windows.