CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- webfactoryltd minimal coming soon \& maintenance modeA flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows...7.6 High
- browseridThe BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers...9.8 Critical
- webfactoryltd minimal coming soon \& maintenance modeA flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows...5.4 Medium
- md-systems simplenewsThe Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7...5.3 Medium
- plixer scrutinizer netflow \& sflow analyzerCross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer...6.1 Medium
- plixer scrutinizer netflow \& sflow analyzerCross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International...6.1 Medium
- plixer scrutinizer netflow \& sflow analyzerMultiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow...9.8 Critical
- plixer scrutinizer netflow \& sflow analyzercgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1...6.5 Medium
- symantec endpoint protection small business edition cloud, and endpoint protection cloud client, endpoint protection, endpoint protection cloud +8 more +10 moreA Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with...7.8 High
- gnome glib, fedoraproject fedora +1 moreGSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address...5.9 Medium
- hp deskjet 3630 f5s43a firmware, deskjet 3630 f5s57a firmware, deskjet 3630 k4t93a firmware +6 more +8 moreHP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and...8.1 High
- hp deskjet 3630 f5s43a firmware, deskjet 3630 f5s57a firmware, deskjet 3630 k4t93a firmware +6 more +8 moreCertain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B -...8.1 High
- apache olingoServer-Side Request Forgery (SSRF) in Apache Olingo7.5 High
- hp access controlA potential security vulnerability has been identified in the software solution HP Access Control...9.8 Critical
- hp samsung mobile printAn issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential...3.3 Low
- hp inc. deskjet 2600 all-in-one printer series, deskjet ink advantage 2600 all-in-one printer series, deskjet ink advantage 5000 all-in-one printer series +60 more +62 moreA potential security vulnerability has been identified with certain HP InkJet printers. The...4.8 Medium
- webfactoryltd minimal coming soon \& maintenance modeA flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a...9.6 Critical
- huawei cloudengine 12800 firmware, s5700 firmware, s6700 firmware +2 moreHuawei products CloudEngine 12800, S5700, and S6700 have a weak algorithm vulnerability. The...5.3 Medium
- huawei mate 20 pro, mate 20 pro firmware +1 moreHUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper...4.6 Medium
- ibm jazz reporting service (jrs), jazz reporting service +1 moreIBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could...5.4 Medium
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper...6.6 Medium
- huawei honor magic2, honor magic2 firmware +1 moreHuawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an...4.4 Medium
- billion sg600 r2 firmwareBillion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain...8.8 High
- billion sg600 r2 firmwareAn exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6...7.8 High
- billion sg600 r2 firmwareXSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6...5.4 Medium
- artica pandora fmsnetflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users...8.8 High
- 1passwordAgileBits 1Password through 1.0.9.340 allows security feature bypass5.5 Medium
- bss continuity cms project continuty cmsBSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability9.8 Critical
- bss continuity cms project continuty cmsBSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated...9.8 Critical
- bss continuity cms project continuty cmsBSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability7.5 High
- publifyPublify vulnerable to DoS attack7.5 High
- atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, openscape desk phone ip 55g firmware +12 more +14 moreUnify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection...9.8 Critical
gnutls28Ubuntugnutls28 updateNo score- atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, openscape desk phone ip 55g firmware +11 more +13 moreUnify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the...9.8 Critical
- redhat ansibleAnsible unsafe evaluation of some strings7.5 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the...6.1 Medium
- compal 7284e firmware, 7486e firmware, netgear c6250emr firmware +4 more +6 moreBroadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which...8.8 High
- danschultzer powSession fixation attack in Pow (Hex package)6.5 Medium
- prestashopIn PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is...6.1 Medium
- libmingMing (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in...8.8 High
- libmingMing (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in...6.5 Medium
- gpacAn issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the...5.5 Medium
- gpacAn issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the...5.5 Medium
- jhead project jheadjhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in...7.1 High
- jhead project jheadjhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.7.1 High
- ltsp ldm, debian linux +1 moreLTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have...7.8 High
- tablepressThe TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users.6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 High
- pivotal ops manager, pivotal software operations manager +1 morePivotal Ops Manager logs query parameters in tomcat access file8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.8.8 High
- Show moreLoading…