Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
January

CVEs published in January 2020

1,599 vulnerabilities, 235 critical, 8 exploited.

Known exploitedIn KEVPublic exploitFix available

telos automated message handling systemTelos Automated Message Handling System reflected XSS in prefs.aspCVE-2019-95406.1 MediumJanuary 3, 2020
telos automated message handling systemTelos Automated Message Handling System reflected XSS in ModalWindowPopup.aspCVE-2019-95396.1 MediumJanuary 3, 2020
telos automated message handling systemTelos Automated Message Handling System reflected XSS in LDAP cbURL parameterCVE-2019-95386.1 MediumJanuary 3, 2020
telos automated message handling systemTelos Automated Message Handling System reflected XSS in uploaditem.aspCVE-2019-95376.1 MediumJanuary 3, 2020
sqlite, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations...CVE-2019-19959Fix available7.5 HighJanuary 3, 2020
cloudfastpath netcharts serverUnrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers...CVE-2014-8516Public exploitEPSS 81.7%9.8 CriticalJanuary 3, 2020
helpdezkUnrestricted file upload vulnerability in includes/classes/uploadify-v2.1.4/uploadify.php in...CVE-2014-83379.8 CriticalJanuary 3, 2020
konakartCross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems...CVE-2014-55166.5 MediumJanuary 3, 2020
loadedcommerce loaded7The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce...CVE-2014-5140Public exploit8.8 HighJanuary 3, 2020
bssys rbs bs-client. retail clientMultiple cross-site scripting (XSS) vulnerabilities in bsi.dll in Bank Soft Systems (BSS) RBS BS...CVE-2014-103986.1 MediumJanuary 3, 2020
bssys rbs bs-clientCross-site scripting (XSS) vulnerability in bsi.dll in Bank Soft Systems (BSS) RBS BS-Client 3.17...CVE-2014-41966.1 MediumJanuary 3, 2020
bulbsecurity smartphone pentest frameworkBulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to...CVE-2012-5878Public exploit9.8 CriticalJanuary 3, 2020
bulbsecurity smartphone pentest frameworkBulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute...CVE-2012-56938.8 HighJanuary 3, 2020
hp simplivity 2600 gen10 firmware, simplivity 380 gen10 firmware, simplivity 380 gen10 g firmware +5 more +7 moreA security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen...CVE-2019-119949.8 CriticalJanuary 3, 2020
hp simplivity 2600 gen10 firmware, simplivity 380 gen10 firmware, simplivity 380 gen10 g firmware +5 more +7 moreA security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen...CVE-2019-119937.5 HighJanuary 3, 2020
opencv, oracle application testing suite, big data spatial and graph +1 more +3 moreOut-of-bounds Write in OpenCVCVE-2019-5064Fix availableEPSS 10.7%8.8 HighJanuary 3, 2020
opencv, oracle application testing suite, big data spatial and graph +1 more +3 moreOut-of-bounds Write in OpenCVCVE-2019-5063Fix availableEPSS 21.1%8.8 HighJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 9.0 and later through 12.5 allows Information Disclosure.CVE-2019-193104.9 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 8.90 and later through 12.5 has Incorrect Access Control.CVE-2019-193094.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 8.2 and later through 12.5 has Insecure Permissions.CVE-2019-192634.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 11.9 and later through 12.5 has Insecure Permissions.CVE-2019-192624.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.CVE-2019-192618.8 HighJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access...CVE-2019-192605.4 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object...CVE-2019-192594.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 10.8 and later through 12.5 has Incorrect Access Control.CVE-2019-192585.3 MediumJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) through 12.5 has Incorrect Access...CVE-2019-192575.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 12.2 and later through 12.5 has Incorrect Access Control.CVE-2019-192565.3 MediumJanuary 3, 2020
gitlabGitLab Enterprise Edition (EE) 12.3 and later through 12.5 has Incorrect Access Control.CVE-2019-192554.3 MediumJanuary 3, 2020
zend framework, fedoraproject fedora, redhat enterprise linux +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow...CVE-2012-4451Fix available6.1 MediumJanuary 3, 2020
gitlabGitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has...CVE-2019-192545.3 MediumJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.CVE-2019-190889.8 CriticalJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 2 of 2).CVE-2019-190874.3 MediumJanuary 3, 2020
gitlabGitlab Enterprise Edition (EE) before 12.5.1 has Insecure Permissions (issue 1 of 2).CVE-2019-190864.3 MediumJanuary 3, 2020
gitlabGitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields.CVE-2019-193115.4 MediumJanuary 3, 2020
huawei honor 10 firmware, honor v10 firmware, mate 10 pro firmware +1 more +3 moreMate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The...CVE-2020-17855.5 MediumJanuary 3, 2020
huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +23 more +25 moreSome Huawei products have a buffer error vulnerability. An unauthenticated, remote attacker could...CVE-2019-53047.5 HighJanuary 3, 2020
huawei usg9500, usg9500 firmware +1 moreUSG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600;...CVE-2020-18718.2 HighJanuary 3, 2020
huawei p30, p30 firmware +1 moreHUAWEI P30 smart phones with versions earlier than 10.0.0.166(C00E66R1P11) have an information...CVE-2019-194416.5 MediumJanuary 3, 2020
fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 moreDeserialization of Untrusted Data in jackson-databindCVE-2019-20330Fix available9.8 CriticalJanuary 3, 2020
python pillow, canonical ubuntu linux, fedoraproject fedora +2 moreInteger overflow in PillowCVE-2020-5310Fix available8.8 HighJanuary 3, 2020
python pillow, canonical ubuntu linux, debian linux +1 more +3 moreBuffer Copy without Checking Size of Input in PillowCVE-2020-5311Fix available9.8 CriticalJanuary 3, 2020
python pillow, canonical ubuntu linux, debian linux +1 more +3 morePCX P mode buffer overflow in PillowCVE-2020-5312Fix available9.8 CriticalJanuary 3, 2020
python pillow, canonical ubuntu linux, debian linux +1 more +3 moreOut-of-bounds Read in PillowCVE-2020-5313Fix available7.1 HighJanuary 3, 2020
fontforge, opensuse leap +1 moreFontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in...CVE-2020-5496Fix available8.8 HighJanuary 3, 2020
fontforge, fedoraproject fedora, opensuse leap +2 moreFontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c.CVE-2020-5395Fix available8.8 HighJanuary 3, 2020
openlambda project openlambdaOpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP...CVE-2019-203298.1 HighJanuary 2, 2020
openldap, debian linux +1 moreAn off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV...CVE-2014-8182Fix available7.5 HighJanuary 2, 2020
fusionforge, debian linux +1 moreFusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by...CVE-2014-62755.9 MediumJanuary 2, 2020
get-simple getsimple cmsMultiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote...CVE-2013-14206.1 MediumJanuary 2, 2020
quixplorer project quixplorerMultiple cross-site scripting (XSS) vulnerabilities in QuiXplorer before 2.5.5 allow remote...CVE-2013-16426.1 MediumJanuary 2, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open