CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
drupal/spamspanPackagistThe SpamSpan module obfuscates email addresses to help prevent spambots from collecting them. This module contains a spamspan twig filter which doesn't sanitize the passed HTML string. This vulnerabil…No score- kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 moreAn Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla...9.8 Critical
- kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 moreAn issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.7.5 High
- usebbCross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.8.8 High
- forcepoint web securityIt has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security,...6.1 Medium
- elementor website builderThe Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during...9.8 Critical
- usebbA File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.7.2 High
- serendipity freetag plugin, s9y serendipity event freetag +1 moreA Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30...6.1 Medium
- joomla!, joomla joomla\! +1 moreMultiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php...5.4 Medium
- anelectron advanced electron forums, electron inc. advanced electron forums (aef) +1 moreA Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF)...8.8 High
- honeywell hnmswvms firmware, hnmswvmslt firmware, maxpro nvr pe firmware +3 more +5 moreThe following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build...9.8 Critical
- honeywell hnmswvms firmware, hnmswvmslt firmware, maxpro nvr pe firmware +3 more +5 moreThe following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build...9.8 Critical
- codepeople calculated fields formThe Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS...5.4 Medium
- schneider-electric msx configuratorA CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software...7.8 High
- schema-inspectorValidation Bypass in schema-inspector9.8 Critical
- bibtex-ruby project bibtex-rubyBibTeX-Ruby vulnerable to OS command injection9.8 Critical
- samsung galaxy gear firmware, gear 2 firmware, gear fit 2 firmware +7 more +9 moreThe wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to...9.8 Critical
- samsung galaxy gear firmware, gear 2 firmware, gear fit 2 firmware +7 more +9 moreThe wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series...6.5 Medium
- samsung galaxy gear firmware, gear 2 firmware, gear fit 2 firmware +7 more +9 moreSamsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or...7.5 High
- samsung galaxy gear firmware, gear 2 firmware, gear fit 2 firmware +7 more +9 moreThe wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take...7.5 High
- linux tizenThe SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform...4.3 Medium
- linux tizenThe system-popup system service in Tizen allows an unprivileged process to perform popup-related...8.1 High
- linux tizenThe bt/bt_core system service in Tizen allows an unprivileged process to create a system user...6.5 Medium
- linux tizenThe BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth...6.5 Medium
- linux tizenThe PulseAudio system service in Tizen allows an unprivileged process to control its A2DP...8.8 High
- linux tizenThe pkgmgr system service in Tizen allows an unprivileged process to perform package management...8.8 High
- linux tizenThe Enlightenment system service in Tizen allows an unprivileged process to fully control or...8.1 High
- impresspages cmsImpressPages CMS RCE9.8 Critical
- parity libsecp256k1Observable Discrepancy in libsecp256k1-rs5.9 Medium
- simplemachines simple machines forumAn issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can...6.5 Medium
- lifesize express 220 firmware, room 220i firmware +1 moreLifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand...6.1 Medium
- cesnet libyangA NULL pointer dereference is present in libyang before v1.0-r3 in the function...6.5 Medium
- cesnet libyangA double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization...8.8 High
- cesnet libyangA segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern...6.5 Medium
- cesnet libyangA stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union...6.5 Medium
- cesnet libyangA double-free is present in libyang before v1.0-r3 in the function yyparse() when a type...8.8 High
- cesnet libyangA double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty...8.8 High
- cesnet libyangAn invalid memory access flaw is present in libyang before v1.0-r1 in the function...6.5 Medium
- cesnet libyangAn invalid memory access flaw is present in libyang before v1.0-r3 in the function...6.5 Medium
- huawei dbs3900 tdd lte firmware, dp300 firmware, rp200 firmware +4 more +6 moreThere is an integer overflow vulnerability in LDAP server of some Huawei products. Due to...7.5 High
- huawei dbs3900 tdd lte firmware, dp300 firmware, rp200 firmware +4 more +6 moreThere is an integer overflow vulnerability in LDAP client of some Huawei products. Due to...7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 High
- opensuse libsolv, debian linux +1 morerepodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.7.5 High
- huawei honor v30, honor v30 firmware +1 moreHonor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper...5.5 Medium
- owasp modsecurity, fedoraproject fedora +1 moreTrustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may,...7.5 High
- multitech conduit mtcdt-lvw2-246a firmwareMultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated...7.2 High
- facebook whatsapp desktop, meta platforms whatsapp +1 moreA vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for...8.2 High
- storebackup, canonical ubuntu linux, debian linux +2 more +4 morestoreBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which...8.1 High
- grinGrin Insufficient Validation7.5 High
- Show moreLoading…