CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- meinbergglobal syncbox\/ptpv2 firmwareThe Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root...7.5 High
- cactiCacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability...6.5 Medium
- hutchhouse marketo forms and trackingThe marketo-forms-and-tracking plugin through 1.0.2 for WordPress allows wp-admin/admin.php?page...8.8 High
- jamasoftware connectJama Connect 8.44.0 has XSS via the "Import File and Destination" tab on the "Data import wizard"...6.1 Medium
- huge-it image galleryAn issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The...9.8 Critical
- xmindThe update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code...8.1 High
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an...6.0 Medium
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600,...3.7 Low
- apt-cacher-ng project apt-cacher-ng, debian linux, opensuse backports +1 more +3 moreapt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the...5.5 Medium
- squid analysis report generator project analysis report generator, opensuse backports sle, leap +2 morelog.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation....7.0 High
- papercrop project papercroppapercrop does not properly handle crop input9.8 Critical
- fordnn usersexportimportThe forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an...9.8 Critical
- taskautomation carbonftpCarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption...5.5 Medium
- parallelsParallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle...7.5 High
- simplejobscriptAn issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL...9.8 Critical
- libslirp project libslirp, qemu +1 moretftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on...7.5 High
- project quay quayA vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI...5.4 Medium
- dimo-crm yellowbox crmAn Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a...8.8 High
- dimo-crm yellowbox crmIn DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and...7.5 High
- dimo-crm yellowbox crmPath Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard...6.5 Medium
- dimo-crm yellowbox crmIncorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a...8.8 High
- accusoft prizm content connectPrizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability9.8 Critical
- mircmIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.5.3 Medium
- websitebakerwebsitebaker prior to and including 2.8.1 has an authentication error in backup module.7.5 High
- jaraJara 1.6 has an XSS vulnerability6.1 Medium
- jaraJara 1.6 has a SQL injection vulnerability.9.8 Critical
- mozilla firefoxMozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of...6.5 Medium
- mozilla firefoxMozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header8.8 High
- sonoff th10 firmware, th16 firmware +1 moreSonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field ...4.8 Medium
- qdpmA remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can...8.8 High
shamircrates.ioThreshold value is ignored (all shares are n=3)No score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcs404 firmware +9 more +11 moreLocked regions may be modified through other interfaces in secure boot loader image due to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064 firmware, apq8096au firmware +8 more +10 morePossible buffer overflow issue in error processing due to improper validation of array index...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 moreUse after free while processing eeprom query as there is a chance to not unlock mutex after error...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon industrial iot, snapdragon mobile, qualcomm msm8917 firmware, msm8953 firmware +15 more +17 morePossible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto,...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +8 more +10 moreString format issue will occur while processing HLOS data as there is no user input validation to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreHeap buffer overflow can occur while parsing invalid MKV clip which is not standard and have...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreInteger overflow occurs while playing the clip which is nonstandard in Snapdragon Auto,...9.8 Critical
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm nicobar firmware, sdm670 firmware +6 more +8 morePossible buffer overflow when byte array receives incorrect input from reading source as array is...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreWhile parsing invalid super index table, elements within super index table may exceed total chunk...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9607 firmware, nicobar firmware +9 more +11 moreThe device may enter into error state when some tool or application gets failure at 1st buffer...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9150 firmware, mdm9607 firmware +6 more +8 morePossible null pointer dereference issue in location assistance data processing due to missing...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreBuffer overflow occur while playing the clip which is nonstandard due to lack of offset length...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreBuffer overflow occur while playing the clip which is nonstandard due to lack of check of size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreBuffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreNull pointer exception can happen while parsing invalid MKV clip where cue information is parsed...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreBuffer overflow can occur while processing clip due to lack of check of object size before...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +6 more +8 moreOut-of-bound access will occur in USB driver due to lack of check to validate the frame size...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +17 more +19 morePotential use-after-free heap error during Validate/Present calls on display HW composer in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +25 more +27 morePossible integer overflow happens when mmap find function will increment refcount every time when...7.8 High
- Show moreLoading…