CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- jenkins health advisor by cloudbees, jenkins project health advisor by cloudbees plugin +1 moreCSRF vulnerability in Health Advisor by CloudBees Plugin8.8 High
- jenkins robot framework, jenkins project robot framework plugin +1 moreXXE vulnerability in Jenkins Robot Framework Plugin8.8 High
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreCSRF vulnerability in Jenkins Amazon EC2 Plugin8.8 High
- jetbrains idetalkJetBrains IDETalk plugin before version 193.4099.10 allows XXE7.5 High
- portapps kitty portableBuffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote...9.8 Critical
- delegateDeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.7.8 High
- pyamfPyAMF vulnerable to XML external entity (XXE)7.1 High
- joomla!, joomla joomla\! +1 moreJoomla! 1.5x through 1.5.12: Missing JEXEC Check5.3 Medium
- tiki wiki cms groupware, tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.6.1 Medium
- spamdykespamdyke prior to 4.2.1: STARTTLS reveals plaintext7.5 High
- cisco ironport web security applianceCisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic...7.4 High
- cisco ironport web security applianceCisco IronPort Web Security Appliance does not check for certificate revocation which could lead...5.9 Medium
- joomla!, joomla joomla\! +1 moreJoomla! before 2.5.3 allows Admin Account Creation.7.5 High
- joomla! core, joomla joomla\! +1 moreJoomla! core before 2.5.3 allows unauthorized password change.7.5 High
- cisco ironport web security appliance asyncos, ironport web security appliance +1 moreCisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching...6.4 Medium
- whoopsie-daisywhoopsie-daisy before 0.1.26: Root user can remove arbitrary files4.9 Medium
- juniper junos spaceJunos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.6.5 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-Site Scripting (XSS) in J-Web7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Path traversal vulnerability in J-Web5.4 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.8.6 High
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.6.5 Medium
- cacti** DISPUTED ** data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input...8.8 High
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreMissing permission checks in Jenkins Amazon EC2 Plugin8.1 High
- phpbbphpBB allows CSRF6.5 Medium
- phpbbphpBB Cross-Site Request Forgery (CSRF)4.3 Medium
- microsoft dynamics 365, dynamics 365 field service (on-premises) v7 series +1 moreA cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not...5.4 Medium
- microsoft onedrive, one drive for android +1 moreA security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could...9.1 Critical
- microsoft office 365 proplusA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office, excel, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Office software when the software fails...7.8 High
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft excel, office, office 365 proplus +2 moreA remote code execution vulnerability exists in Microsoft Excel software when the software fails...7.8 High
- microsoft office online serverA spoofing vulnerability exists when Office Online does not validate origin in cross-origin...5.4 Medium
- microsoft .net framework, .net framework 3.0, .net framework 3.5 +50 more +52 moreA remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate...9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +13 more +15 moreAn elevation of privilege vulnerability exists when Microsoft Windows implements predictable...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn information disclosure vulnerability exists in the way that the Windows Graphics Device...5.5 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +13 more +15 moreAn elevation of privilege vulnerability exists in Windows Media Service that allows file creation...7.8 High
- microsoft internet explorer, internet explorer 10, internet explorer 11 +8 more +10 moreA remote code execution vulnerability exists when Internet Explorer improperly accesses objects...7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn information disclosure vulnerability exists in the Windows Common Log File System (CLFS)...5.5 Medium
- microsoft update notification manager, windows, windows 10 version 1903 for 32-bit systems +17 more +19 moreAn elevation of privilege vulnerability exists in the way the Update Notification Manager handles...7.8 High
- microsoft windows server, windows server 2008, windows server 2012 +2 more +4 moreAn information disclosure vulnerability exists when Remote Desktop Web Access improperly handles...6.5 Medium
- microsoft windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems, windows 10 version 1903 for x64-based systems +7 more +9 moreAn elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS)...7.8 High
- Show moreLoading…