CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- redhat openshift container platform, [red hat] openshift-ansible +1 moreA flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster....7.5 High
- aultware pwstoreAultWare pwStore 2010.8.30.0 has XSS6.1 Medium
- aultware pwstoreAultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request7.5 High
- redhat openshift container platform, red hat library-go +1 moreOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the...5.3 Medium
- fuzezip project fuzezipFuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability7.8 High
- red hat wildfly-security-manager, redhat jboss enterprise application platform, single sign-on +2 moreA flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests...7.5 High
- keycloak, redhat single sign-on +1 morekeycloak vulnerable to unauthorized login via mail server setup9.1 Critical
- transcend-info wifisd firmwareTranscend WiFiSD 1.8 has persistent XSS5.4 Medium
- pqigroup air card firmwarePQI AirCard has persistent XSS5.4 Medium
- [unknown] moodleMoodle does not revoke role capabilities correctly4.2 Medium
- appspace on-premIn Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.6.1 Medium
- cisco linksys e4200 firmware, linksys ea2700 firmware, linksys ea3500 firmware +1 more +3 moreCisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open...9.8 Critical
- hmailserverHMailServer 5.3.x and prior: Memory Corruption which could cause DOS5.9 Medium
- codologic codoforumCodoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.4.8 Medium
- schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...7.5 High
- schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...7.5 High
- schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...7.5 High
- schneider-electric ecostruxure control expert, unity pro, modicon m340 bmxp341000 firmware +20 more +22 moreAn Improper Authorization - CWE-285 vulnerability exists in EcoStruxure? Control Expert V14.0 and...7.3 High
- schneider-electric clearscadaA CWE-264 Permissions, Privileges, and Access Controls vulnerability exists in a folder within...7.8 High
- soplanningMultiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning)...5.4 Medium
- free freebox osA Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS...5.4 Medium
- dedecmsA file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.8.8 High
- thomsonreuters fatcaA file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which...9.9 Critical
- okerthai g232v1 firmwareOKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without...6.8 Medium
- usriot usr-wifi232-g2 firmware, usr-wifi232-h firmware, usr-wifi232-s firmware +1 more +3 moreA cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR...6.1 Medium
- ahsay cloud backup suiteAn insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0...8.8 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based...7.5 High
- dten d5 firmware, d7 firmware +1 moreDTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF...5.3 Medium
- dten d5 firmware, d7 firmware +1 moreOn DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android...9.8 Critical
- dten d5 firmware, d7 firmware +1 moreDTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug...9.8 Critical
- dten d5 firmware, d7 firmware +1 moreDTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.7.5 High
- open-xchange appsuiteOX App Suite through 7.10.2 has Incorrect Access Control.6.6 Medium
- marked project markedMultiple Content Injection Vulnerabilities in marked6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.2 has XSS.6.1 Medium
- rconfigAn issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system...8.8 High
- rconfigAn issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for...7.8 High
- gilacms gila cmsGila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.6.8 Medium
- troglobit uftpdBuffer overflow vulnerability in uftpd6.5 Medium
- gilacms gila cmsGila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.6.8 Medium
- gilacms gila cmsGila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to...9.1 Critical
- e-plugins wp membershipMultiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for...5.4 Medium
- gilacms gila cmsGila CMS 1.11.8 allows /admin/sql?query= SQL Injection.7.2 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...9.1 Critical
- google androidIn export_key_der of export_key.cpp, there is possible memory corruption due to a double free....7.8 High
- google androidIn km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input...7.8 High
- google androidIn dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds...6.7 Medium
- google androidIn set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing...6.7 Medium
- google androidIn DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto....5.5 Medium
- hashbrowncms hashbrown cmsHashBrown CMS Directory Traversal7.5 High
- itwork fileviewCross-Site Scripting in fileview6.1 Medium
- Show moreLoading…