CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
gnutls28Ubuntugnutls28 updateNo score- fortinet fortiosImproper permission or value checking in the CLI console may allow a non-privileged user to...5.5 Medium
- fortinet fortisiemA hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5...9.8 Critical
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreUndertow vulnerable to Uncontrolled Resource Consumption7.5 High
- sencha ext jsServer-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.7.5 High
- apt-cacher-ng project apt-cacher-ng, opensuse leap 15.1, backports +2 moreapt-cacher-ng insecure use of /run/apt-cacher-ng6.2 Medium
- mircmIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.7.5 High
- splunkSplunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an...7.8 High
- splunkSplunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking4.3 Medium
- google androidGoogle Android prior to 4.4 has an APK Signature Security Bypass Vulnerability9.8 Critical
- formget contact form integrated with google mapsThe WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS6.1 Medium
- jfrog artifactoryIn JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code...8.8 High
- toshiba configfreeToshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability8.8 High
- prestashopPrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a...8.8 High
- apostrophecms sanitize-htmlCross-Site Scripting in sanitize-html6.1 Medium
- mysecureshellMySecureShell 1.31 has a Local Denial of Service Vulnerability5.5 Medium
- supermicro intelligent platform management interfaceDirectory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows...4.3 Medium
- mysecureshellmysecureshell 1.31: Local Information Disclosure Vulnerability5.5 Medium
- babygekkoBabyGekko before 1.2.4 has SQL injection.8.8 High
- babygekkoBabyGekko before 1.2.4 allows PHP file inclusion.9.8 Critical
- ht editor project editorHT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability9.8 Critical
- corel wordperfect office x6Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference5.5 Medium
- ispconfigISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client...9.8 Critical
- ibm websphere mqIBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability6.5 Medium
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS...9.8 Critical
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS...9.8 Critical
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS.4.8 Medium
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreSSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows...7.5 High
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreIncorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102...5.3 Medium
- umbraco cmsUmbraco CMS vulnerable to CSRF4.3 Medium
- twitter secure headersLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Medium
- twitter secure headersDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 Medium
- arm mbed crypto, mbed tls, debian linux +1 more +3 moreThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1...4.7 Medium
- apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 moreInsecure Deserialization in Apache XML-RPC9.8 Critical
- fasttracksoftware admin by requestFastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a...8.2 High
- fasttracksoftware admin by requestFastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a...9.0 Critical
- red hat jboss eap, redhat jboss enterprise application platform, single sign-on +2 moreA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Medium
python-aptUbuntupython-apt regressionNo score- eaton 5p 850 firmwareAn issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an...4.8 Medium
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreA stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7...9.8 Critical
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS...9.8 Critical
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreemfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS...9.8 Critical
- phorumA Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18.6.1 Medium
- troglobit uftpdDirectory Traversal (Chroot Escape) vulnerability in uftpd6.5 Medium
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreIncorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102...9.8 Critical
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreAjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote...9.8 Critical
- ruckuswireless unleashed, zonedirector 1200 firmware +1 moreDirectory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a...7.2 High
- gallery plugin authors galleryGallery Plugin1.4 for WordPress has a Remote File Include Vulnerability9.8 Critical
- rapid7 appspiderRapid7 AppSpider Chrome Plugin Insufficient Session Expiration4.4 Medium
- fluxbbA reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.9.8 Critical
- Show moreLoading…