CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- vmware workspace one sdk, workspace one boxer, workspace one content +6 more +8 moreVMware Workspace ONE SDK and dependent mobile application updates address sensitive information...5.9 Medium
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam efd-2240 firmware +8 more +10 moreGeutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All...7.2 High
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam efd-2240 firmware +8 more +10 moreGeutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All...4.8 Medium
- geutebrueck g-cam ebc-2110 firmware, g-cam ebc-2111 firmware, g-cam efd-2240 firmware +8 more +10 moreGeutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All...7.2 High
- zte corporation f6x2w, zte f6x2w firmware +1 moreV6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability....5.3 Medium
- solarwinds orion platformA Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...6.1 Medium
- solarwinds orion platformA Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds...6.1 Medium
- intel intel(r) daal, data analytics acceleration library +1 moreImproper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to...5.5 Medium
- intel intel(r) vtune(tm) amplifier for windows*, vtune profiler +1 moreImproper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8...7.8 High
- intel intel(r) rwc 3 for windows, raid web console 3 +1 moreImproper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000...7.8 High
- intel intel(r) chipset device software inf utility, chipset inf utility +1 moreImproper access control in the installer for Intel(R) Chipset Device Software INF Utility before...5.5 Medium
- intel intel(r) snmp subagent stand-alone for windows*, snmp subagent stand-alone +1 moreUncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for...6.7 Medium
- maarch rmAn issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an...8.8 High
- maarch rmAn issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an...9.1 Critical
- dicube easescreen crystalFeldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and...6.1 Medium
- suse openqaXSS in distri and version parameter in openQA6.5 Medium
- suse keystone-json-assignment, openstack cloud, openstack cloud 8 +1 more +3 morekeystone_json_assignment backend granted access to any project for users in user-project-map.json8.8 High
libjpegMageiaUpdated libjpeg packages fix security vulnerabilitiesNo score- suse caas platform, caas platform 3.0 +1 moreInsecure API port exposed to all Master Node guest containers8.4 High
- gallagher command centreIn Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5)...6.5 Medium
- gallagher command centreIn Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8...5.5 Medium
- intelbras wrn 240 firmwareIntelbras WRN240 devices do not require authentication to replace the firmware via a POST request...7.5 High
- saltstack salt, canonical ubuntu linux, debian linux +1 more +3 moreSaltStack Salt is vulnerable to command injection9.8 Critical
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application8.0 High
- plantronics hubA local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for...7.8 High
- libslirp project libslirp, qemu, debian linux +1 more +3 moretcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 Medium
- simplisafe ss3 firmwareAuthentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3...4.6 Medium
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader,...8.8 High
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.0 High
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader,...8.8 High
- foxit, foxitsoftware reader, phantompdf +2 moreAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's...8.8 High
- webfactoryltd wp database resetThe WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated...9.9 Critical
- webfactoryltd wp database resetThe WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any...9.1 Critical
- hpe superdome flex server, superdome flex server firmware +1 moreHPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input...5.5 Medium
- hp enhanced internet usage manager, hpe enhanced internet usage manager (eium) +1 moreA potential security vulnerability has been identified in HPE enhanced Internet Usage Manager ...6.1 Medium
- emerson rx3i cpe100 firmware, rx3i cpe115 firmware, rx3i cpe302 firmware +6 more +8 moreGE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All...7.5 High
- apache cxf, oracle commerce guided search, communications element manager +4 more +6 moreReflected Cross-Site Scripting in Apache CXF6.1 Medium
- apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 morePrivate key leak in Apache CXF7.5 High
- cisco unified personal communicatorCisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received...7.5 High
- siemens sinamics perfect harmony gh180 firmware, siemens ag sinamics perfect harmony gh180 drives mlfb 6sr32..-.....-.... mlfb 6sr4...-.....-.... mlfb 6sr5...-.....-.... with option a30 (hmis 12 inches or larger), sinamics perfect harmony gh180 drives mlfb 6sr325.-.....-.... (high availability) +2 moreA vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-....6.8 Medium
- siemens apogee mec/mbc/pxc (p2), apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet) +47 more +49 moreA vulnerability has been identified in Nucleus NET (All versions), Nucleus RTOS (All versions),...7.1 High
- siemens sinema serverA vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1)....9.9 Critical
- siemens tia portal v14, tia portal v15, tia portal v16 +2 more +4 moreA vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All...7.8 High
- debian linux, linux kernel, netapp 8300 firmware +11 more +13 moreThe flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device...5.3 Medium
- centreonInsecure permissions in cwrapper_perl in Centreon Infrastructure Monitoring Software through 19...7.8 High
- prost project prostOut of bounds write in prost9.8 Critical
- learndashThe LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.5.4 Medium
- etoilewebdesign ultimate faqThe Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes...6.1 Medium
- cacti, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreCacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items...6.1 Medium
- redislabs hiredis, debian linux, fedoraproject fedora +2 moreasync.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference...7.5 High
- Show moreLoading…