CVEs published February 28, 2018
28 CVEs were published on February 28, 2018: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Apache Software Foundation Apache OpenMeetings · org.apache…
- 1
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- Red Hat CloudForms
- 1
Medium, low and unrated 28
- CVE-2015-4117Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup p
- CVE-2015-5079Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a ..
- CVE-2018-6947An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and
- CVE-2015-3898Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and
- CVE-2018-7568The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows rem
- CVE-2018-7569dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a d
- CVE-2018-7570The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed i
- CVE-2018-1304The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4Apache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2018-1286In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to dApache Software Foundation Apache OpenMeetings · org.apache…
- CVE-2016-0291IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to execute arbitrary commands by leveraging
- CVE-2016-0295Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hi
- CVE-2016-0299IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to obtain sensitive
- CVE-2018-7264The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and
- CVE-2017-9447In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the
- CVE-2018-7469PHP Scripts Mall Entrepreneur Job Portal Script 2.0.9 has XSS via the p_name (aka Edit Category Name) field to admin/categories_industry.php
- CVE-2017-12191A flaw was found in the CloudForms account configuration when using VMware.Red Hat CloudForms
- CVE-2018-7477SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents/Parent_module/parent
- CVE-2018-7482The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files,
- CVE-2018-7556LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerController.php after in
- CVE-2018-7557The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of
- CVE-2018-7551There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4.
- CVE-2018-7552There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4.
- CVE-2018-7553There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4.
- CVE-2018-7554There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4.
- CVE-2018-6638A stack-based buffer overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.
- CVE-2018-6639An out-of-bounds write (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.
- CVE-2018-6640A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.
- CVE-2018-6641An Arbitrary Free (Remote Code Execution) issue was discovered in Design Science MathType 6.9c.