CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- seeftl project seeftlCross-Site Scripting in seeftl6.1 Medium
- akips network monitorThe application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote...9.8 Critical
- mojohaus exec mavenThe MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document...9.8 Critical
- litespeedtech openlitespeedThe WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as...9.8 Critical
- trust-dns-server project trust-dns-serverStack consumption in trust-dns-server7.5 High
- cisco data center network managerCisco Data Center Network Manager Authentication Bypass Vulnerabilities9.8 Critical
- cisco data center network managerCisco Data Center Network Manager Command Injection Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager Command Injection Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager Path Traversal Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager Path Traversal Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager Path Traversal Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager XML External Entity Read Access Vulnerability4.9 Medium
- cisco data center network managerCisco Data Center Network Manager SQL Injection Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager SQL Injection Vulnerabilities7.2 High
- cisco data center network managerCisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability5.4 Medium
- cisco data center network managerCisco Data Center Network Manager Authentication Bypass Vulnerabilities9.8 Critical
- cisco data center network managerCisco Data Center Network Manager Authentication Bypass Vulnerabilities9.8 Critical
- pisignageThe web application component of piSignage before 2.6.4 allows a remote attacker (authenticated...4.3 Medium
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreAccess analysis CGI An-Analyzer released in 2019 June 24 and earlier allow remote attackers to...7.5 High
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreDOM-based cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019...6.1 Medium
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreStored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019...6.1 Medium
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreAccess analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote authenticated...8.8 High
- nasm netwide assemblerIn Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm...7.1 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS...6.1 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection...8.8 High
- icewarp mail serverIceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows...6.1 Medium
- icewarp mail serverIceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 (and probably earlier versions) allows...5.4 Medium
- codologic codoforumCodoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.4.8 Medium
- codologic codoforumCodoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the...4.8 Medium
- determine contract lifecycle managementAn issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle...8.8 High
- determine contract lifecycle managementAn issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5...6.1 Medium
- determine contract lifecycle managementAn issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in...4.9 Medium
- typesettercms typesetterThe Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability. The logout...4.3 Medium
- intelbras iwr 3000n firmwareAn issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is...8.8 High
- debian linux, python pillow, canonical ubuntu linux +1 more +3 moreUncontrolled Resource Consumption in Pillow7.5 High
- gitlabIn GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a...7.5 High
- gitlabIn GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the...9.8 Critical
- gitlabGitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.7.5 High
- gitlabGitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service. Certain characters were...7.5 High
- gitlabGitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project...5.8 Medium
- advanced real estate script project real estate scriptIn PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext...6.1 Medium
- advanced real estate script project real estate scriptIn PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is...7.2 High
- freeradius, opensuse leap +1 moreIn FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to...7.5 High
- nasm netwide assemblerIn Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c....5.5 Medium
- chamilo lmsChamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to...6.1 Medium
- apache rust sgx sdkBaidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in...9.8 Critical
- mitreid connectXSS in MITREid Connect6.1 Medium
- dell rsa authentication managerRSA Authentication Manager versions prior to 8.4 P7 contain an XML Entity Injection Vulnerability...6.5 Medium
- telos automated message handling systemTelos Automated Message Handling System reflected XSS in itemlookup.asp6.1 Medium
- telos automated message handling systemTelos Automated Message Handling System information disclosure in itemlookup.asp6.1 Medium
- Show moreLoading…