CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- nothings stb truetype.hstb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.8.8 High
- imperva securesphere web application firewallImperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection...9.8 Critical
- prophecyinternational snareSnare for Linux before 1.7.0 has CSRF in the web interface.6.5 Medium
- prophecyinternational snareSnare for Linux before 1.7.0 has password disclosure because the rendered page contains the field...7.5 High
- koala-framework koala frameworkKoala Framework before 2011-11-21 has XSS via the request_uri parameter.6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 moreAfter a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3,...6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Medium
- mozilla firefox, firefox esr, opensuse leap +2 moreDuring the initialization of a new content process, a race condition occurs that can allow a...5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf an XML file is served with a Content Security Policy and the XML file includes an XSL...6.5 Medium
- mozilla firefoxWhen Python was installed on Windows, a python file being served with the MIME type of text/plain...8.8 High
- mozilla firefoxWhen in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to...5.3 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...6.1 Medium
- mozilla firefox, firefox esr +1 moreDuring the initialization of a new content process, a pointer offset can be manipulated leading...8.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.8.8 High
- gnu libredwg, opensuse backports, leap +2 moreGNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in...6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.6.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in...8.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.8.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.8.1 High
- gnu libredwg, opensuse backports sle, leap +2 moreGNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c...6.5 Medium
- bigprof online invoicing systemBigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session...6.1 Medium
- google androidAn Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer...5.5 Medium
- google androidIn LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds...4.7 Medium
- google androidIn flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to...5.5 Medium
- google androidIn rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of...6.5 Medium
- google androidIn generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image...5.5 Medium
- google androidIn onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of...6.7 Medium
- google androidIn ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use...8.8 High
- google androidIn getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly....7.8 High
- symantec norton mobile security for android, norton mobile security +1 moreA Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to...5.3 Medium
- small crm project crmPHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when...8.8 High
- phpgurukul hostel management systemPHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full...9.8 Critical
- ftpgetterFTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a...7.5 High
- technicolor tc7230 steb firmwareThe web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which...9.8 Critical
- symantec norton mobile security for android, norton mobile security +1 moreAn Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in...5.5 Medium
- symantec norton mobile security for android, norton mobile security +1 moreA security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16...3.7 Low
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...9.1 Critical
- progress loadmasterA Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a...8.8 High
- igniterealtime openfireXSS in Ignite Realtime Openfire via alias to Manage Store Contents6.1 Medium
- igniterealtime openfireXSS in Ignite Realtime Openfire via cacheName6.1 Medium
- igniterealtime openfireXSS in Ignite Realtime Openfire via Users/Group search page6.1 Medium
- igniterealtime openfireXSS in Ignite Realtime Openfire via isTrustStore6.1 Medium
- Show moreLoading…