CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, mdm9607 firmware +14 more +16 moreUse after free issue occurs when camera access sensors data through direct report mode in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, mdm9607 firmware +14 more +16 moreUse after free issue due to using of invalidated iterator to delete an object in sensors HAL in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +26 more +28 moreNULL is assigned to local instance of audio device pointer after free instead of global static...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreBuffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto,...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +43 more +45 moreNull pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +26 more +28 moreImproper initialization of local variables which are parameters to sfs api may cause invalid...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreWhile transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +32 more +34 moreWhile trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreNull-pointer dereference issue can occur while calculating string length when source string...9.8 Critical
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...2.4 Low
- ibm chatbot with ibm watsonThe conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that...6.1 Medium
- logaritmo aware callmanagerThe CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012...8.8 High
- smc d3g0804 firmwareSMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network...4.8 Medium
- red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x...6.5 Medium
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...6.5 Medium
- [unknown] samba, canonical ubuntu linux, debian linux +1 more +3 moreThere is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4...5.4 Medium
- gentoo portageGentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64...5.5 Medium
- comtech stampede fx-1010 firmwareComtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve...7.2 High
- comtech stampede fx-1010 firmwareComtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve...7.2 High
- comtech stampede fx-1010 firmwareComtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve...7.2 High
- wpseeds wp database backupThe WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in...7.5 High
- meinberg lantime m300, ims-lantime m1000, meinbergglobal lantime m1000 firmware +1 more +3 moreMeinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device)...8.8 High
rust_sodiumcrates.iorust_sodium is unmaintained; switch to a modern alternativeNo score- gallagher command centreAn issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00...5.5 Medium
- testlinkTestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter...6.1 Medium
- cactiCacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to...8.8 High
- canonical python-aptpython-apt downloads from untrusted sources4.7 Medium
- canonical python-aptpython-apt uses MD5 for validation4.7 Medium
- ruckuswireless r310 firmwareRuckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the...4.8 Medium
- uhp uhp-100 firmwareUHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).6.1 Medium
- uhp uhp-100 firmwareUHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the...6.1 Medium
- evoko homeEvoko Home 1.31 devices provide different error messages for failed login requests depending on...5.3 Medium
- evoko homeEvoko Home 1.31 devices allow remote attackers to obtain sensitive information (such as usernames...7.5 High
- kmccontrols bac-a1616bc firmwareKMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME...9.8 Critical
suricataMageiaUpdated suricata packages fix security vulnerabilitiesNo score- westermo mrd-315 firmwareWestermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows...6.5 Medium
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +7 more +9 moreA Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +3 more +5 moreAn arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer...6.7 Medium
- trend micro password manager, trend micro, inc. micro password manager +1 moreA RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where...5.5 Medium
- trend micro password manager, trend micro, inc. micro password manager +1 moreA memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an...5.5 Medium
- amcrest web serverAn issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The...5.3 Medium
- kibokolabs chained quizThe chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php...6.1 Medium
- zohocorp manageengine desktop central, manageengine desktop central managed service providers +1 moreDirectory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop...9.8 Critical
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux5.3 Medium
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability...7.8 High
- eclipse memory analyzer, the eclipse foundation eclipse memory analyzer +1 moreEclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS)...9.0 Critical
- redhat enterprise linux, red hat kpatch:, redhat enterprise linux eus +2 moreIt was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix...6.5 Medium
- Show moreLoading…