CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- boltwireCross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to...6.1 Medium
- red hat satellite 6, red hat satellite 6 hat satellite 6, redhat satellite +2 moreVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 Medium
- red hat jboss portalIt was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp...5.9 Medium
- shaarliMultiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote...6.1 Medium
- xnviewStack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to...7.8 High
- xnviewHeap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute...7.8 High
- jomres, jomres component for joomla! +1 moreSQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows...8.8 High
- jomres, jomres component for joomla! +1 moreCross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for...5.4 Medium
- katello, redhat subscription asset manager +1 moreVersions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a...6.1 Medium
- xnviewHeap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute...7.8 High
- xnviewxnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of...7.8 High
- xnviewXjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz...9.8 Critical
- red hat jboss eap, redhat jboss enterprise application platform +1 moreIn JBoss EAP 6 a security domain is configured to use a cache that is shared between all...6.5 Medium
- extensis mrsid, irfanview mrsid plugin +1 moreStack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows...7.8 High
- extensis mrsid, irfanview mrsid plugin +1 moreThe MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute...7.8 High
- extensis mrsid, irfanview mrsid plugin +1 moreHeap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows...7.8 High
- obs-server, suse linux enterprise server +1 moreobs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api...8.8 High
- spreadshirt-rss-3d-cube-flash-gallery project spreadshirt-rss-3d-cube-flash-galleryCross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress...6.1 Medium
- plonePlone Zope cross-site scripting (XSS) vulnerability6.1 Medium
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3...6.1 Medium
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x...6.1 Medium
- open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x...6.1 Medium
- intel ipmi, citrix netscaler firmware, netscaler sd-wan firmware +3 more +5 moreHardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for...7.5 High
- intel ipmi, citrix netscaler firmware, netscaler sd-wan firmware +3 more +5 moreIntelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation...8.1 High
- ovirt-engine-sdk-pythonovirt-engine-sdk-python improper validation of hostname in x.509 certificate5.9 Medium
- clusterlabs fence-agentsIn fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py...5.9 Medium
- project quay quayA flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker...6.0 Medium
- docker, apache geode, docker.io +2 moreAn issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via...9.8 Critical
- sensiolabs symfony, fedoraproject fedora +1 moreSymfony Host Header Injection vulnerability in the HttpFoundation component6.1 Medium
- ecstatic project ecstaticDenial of Service in ecstatic7.5 High
- opsview, opsview core +1 moreCross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before...8.8 High
- opsview, opsview core +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core...6.1 Medium
- infinispan, redhat jboss data grid +1 moreImproper implementation of the session fixation protection in Infinispan5.4 Medium
- knockoutjs knockout, oracle business intelligence, goldengate +2 more +4 moreXSS in knockout6.1 Medium
- miniupnp project ngiflibngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.8.8 High
- mybbMyBB before 1.8.22 allows an open redirect on login.6.1 Medium
- sitracker support incident trackerIn Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced...6.1 Medium
- sitracker support incident trackerIn Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by...6.1 Medium
- sitracker support incident trackerIn Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs...6.1 Medium
- sitracker support incident trackerIn Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints...6.1 Medium
- sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...7.5 High
- dlink dir-818lx firmware, dir-822 firmware, dir-823 firmware +11 more +13 moreD-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the...7.5 High
- vmware spring frameworkPivotal Spring Framework contains unsafe Java deserialization methods9.8 Critical
- gpac, debian linux +1 moredimC_Read in isomedia/box_code_3gpp.c in GPAC 0.8.0 has a stack-based buffer overflow.5.5 Medium
- saitoha libsixellibsixel 1.8.4 has an integer overflow in sixel_frame_resize in frame.c.8.8 High
- postieplugin postieThe Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with...5.4 Medium
- postieplugin postieThe Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote...5.3 Medium
- comtech stampede fx-1010 firmwareComtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute...7.2 High
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...3.5 Low