CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- norton power eraser, symantec norton power eraser +1 moreNorton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation...7.8 High
- abrt, redhat automatic bug reporting tool +1 moreThe abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool ...7.8 High
- linux kernelIn the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x...7.8 High
- intel intel(r) processors, canonical ubuntu linux, intel atom e3805 +443 more +445 moreInsufficient control flow in certain data structures for some Intel(R) Processors with Intel(R)...5.5 Medium
- sap basis, sap se automated note search tool (sap basis) +1 moreAutomated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7...4.3 Medium
- sap leasing, sap se leasing (ea appl), leasing (sap appl) +2 moreMissing authorization check in a transaction within SAP Leasing (update provided in SAP_APPL 6.18...2.7 Low
- sap process integration, sap se process integration - rest adapter (sap xiaf) +1 morePI Rest Adapter of SAP Process Integration (update provided in SAP_XIAF 7.31, 7.40, 7.50) does...6.1 Medium
- sap netweaver internet communication manager \(kernel\), netweaver internet communication manager \(krnl32nuc\), netweaver internet communication manager \(krnl32uc\) +7 more +9 moreImproper input validation in SAP NetWeaver Internet Communication Manager (update provided in...5.9 Medium
- sap disclosure managementSAP Disclosure Management, before version 10.1, does not validate user input properly in specific...5.4 Medium
- abrt, redhat automatic bug reporting tool +1 moreDirectory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows...7.8 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS...6.1 Medium
- abrt, redhat automatic bug reporting tool +1 moreabrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the...7.1 High
- abrt, redhat automatic bug reporting tool, enterprise linux desktop +5 more +7 moredaemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports...6.5 Medium
- abrt, redhat automatic bug reporting tool +1 moreThe default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to...7.8 High
- adbglobal p.dga4001n firmwareThe ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6...5.3 Medium
- apache airflowXSS in Apache Airflow4.8 Medium
- abb cp651-web firmware, cp651 firmware, cp661-web firmware +5 more +7 moreABB CP651 HMI products revision BSP UN30 v1.76 and prior implement hidden administrative accounts...8.8 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0...5.4 Medium
- wps office, huawei p2-6011 firmware +1 morecn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei...8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreUndisclosed traffic patterns received may cause a disruption of service to the Traffic Management...7.5 High
- open-xchange appsuiteXML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6...7.8 High
- iii sierraInnovative Interfaces Sierra Library Services Platform 1.2_3 does not properly handle query...7.5 High
manSUSESecurity update for manNo score- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn impacted versions and platforms the Trusted Platform Module (TPM) system integrity check...4.6 Medium
- daum potplayerPotPlayer 1.5.40688: .avi File Memory Corruption7.8 High
- apache kafka, oracle banking corporate lending process management, banking credit facilities process management +10 more +12 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Kafka7.5 High
- gonitro nitropdfNitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution7.8 High
- apache cordova, cordova inappbrowser, oracle instantis enterprisetrack +1 more +3 morePrivilege Escalation in cordova-plugin-inappbrowser9.8 Critical
- clickdeskClickDesk version 4.3 and below has persistent cross site scripting6.1 Medium
- cerberusftp ftp serverThe zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip...5.4 Medium
- cerberusftp ftp serverCerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an...8.1 High
- yet another java service wrapper project another java service wrapperAn XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in...9.1 Critical
- cayintech smp-pro4 firmwareAn issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by...6.5 Medium
- cayintech smp-pro4 firmwareAn issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename=...6.1 Medium
- proofpoint enterprise protectionA file-extension filtering vulnerability in ProofPoint Protection Server Email Firewall through 8...8.8 High
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through...4.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has...5.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through...4.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through...4.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through...5.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through...5.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through...5.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through...4.3 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project...5.3 Medium
- ezhometech ezserverA Code Execution vulnerability exists in the memcpy function when processing AMF requests in...9.8 Critical
- safend data protector agentA Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or...7.8 High
- safend data protector agentA Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector...7.8 High
- hashbrowncms hashbrown cmsHashBrown CMS RCE9.8 Critical
- hashbrowncms hashbrown cmsA privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3...8.8 High
- safend data protector agentAn issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the...6.1 Medium
- Show moreLoading…