CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- wago pfc100 firmware, pfc200 firmware, pfc200 +2 moreAn exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check...9.8 Critical
- amazon aws lambdaOS command injection in aws-lambda9.8 Critical
- symantec it management suiteA Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in...5.4 Medium
- broadcom ca automic dollar universeCA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being...7.8 High
- broadcom ca automic sysloadCA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of...9.8 Critical
- jamfAn issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted...9.8 Critical
- symantec it management suiteA Denial of Service vulnerability exists in the ITMS workflow process manager login window in...6.5 Medium
- e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...7.5 High
- symantec encryption desktop, ghost solution suite, it management suite +2 more +4 moreA privilege escalation vulnerability exists when loading DLLs during boot up and reboot in...7.8 High
- 3ds catiaDassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks9.8 Critical
- contao cmsContao CMS through 3.2.4 has PHP Object Injection Vulnerabilities9.8 Critical
- google android, debian linux +1 moreIn calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a...5.5 Medium
- mobileiron sentry, virtual smartphone platform +1 moreMobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication...9.1 Critical
- symantec norton app lockA security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if...7.1 High
- devcert-sanscache project devcert-sanscacheOS Command Injection in devcert-sanscache9.8 Critical
- symantec vip access desktopA code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP...7.8 High
- keycloak, redhat jboss enterprise application platform, jboss fuse +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in Keycloak4.3 Medium
- google androidA Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows...6.5 Medium
- teradici pcoip client, pcoip graphics agent, pcoip standard agent +2 moreIn Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path...7.8 High
- centurystar project centurystarcenturystar 7.12 ActiveX Control has a Stack Buffer Overflow9.8 Critical
- pearson esis enterprise student information systemPearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper...4.8 Medium
- actix actix-serviceUse after free in actix-service5.5 Medium
- actix actix-utilsUse after free in actix-utils9.1 Critical
- genexis platinum-4410 firmwareAn authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows...9.8 Critical
- icegram email subscribers \& newslettersThere was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that...8.3 High
- givewpA flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API...7.5 High
prestashop/gamificationPackagistPrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841No scoreprestashop/autoupgradePackagistPrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841No score- mediawikiThe WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax...6.1 Medium
- ntp, f5 big-ip access policy manager, big-ip advanced firewall manager +22 more +24 moreAn Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a...5.3 Medium
- phpmyadmin, debian linux, suse linux enterprise server +2 morephpMyAdmin SQL injection in user accounts page8.8 High
- tencent wechatThis vulnerability allows remote attackers redirect users to an external resource on affected...4.3 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- tp-link tl-wr841n, tl-wr841n firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- d-link dcs-960l, dlink dcs-935l firmware, dcs-960l firmware +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- watchguard xmt515 firmwareA DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3,...6.1 Medium
varnishMageiaUpdated varnish packages fix security vulnerabilityNo score- opservices opmonAn issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an...9.8 Critical
- ics-cert pr100088 modbus gateway, kunbus pr100088 modbus gateway firmware +1 moreAn attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway...4.9 Medium
- red hat sdl, libsdl simple directmedia layer, redhat enterprise linux +2 moreA flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL...8.1 High
- codologic codoforumCodoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php...6.1 Medium
- jamfJamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with...8.8 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated...9.8 Critical
- unisys mcp firmwareSystems management on Unisys Libra and Libra Software Series, with MCP-FIRMWARE through 2019-10...8.7 High
- git-diff-apply project git-diff-applyOS command injection in git-diff-apply9.8 Critical
- fortinet fortiauthenticator, fortiauthenticator web ui +1 moreAn improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0...6.1 Medium
- fortinet fortisiemAn information exposure vulnerability in the external authentication profile form of FortiSIEM 5...6.5 Medium
- google androidIn the Titan M handling of cryptographic operations, there is a possible information disclosure...5.5 Medium
- soplanningMultiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php,...9.8 Critical
prestashop/ps_facetedsearchPackagistPrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841No score- Show moreLoading…