CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability7.4 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability8.6 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability5.3 Medium
- cisco jabber guestCisco Jabber Guest Cross-Site Scripting Vulnerability6.1 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution SQL Injection Vulnerability6.4 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN vManage Command Injection Vulnerability4.7 Medium
- rubygeocoder geocoderSQL Injection in Geocoder9.8 Critical
- iris citations management tool project citations management toolIRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.9.8 Critical
- dlink dsr-250n firmwareD-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the...7.2 High
- intelliantech aptus webIntellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field...9.8 Critical
- rapid7 nexposeRapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote...6.1 Medium
- novell zenworks configuration managementNovell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.7.5 High
- novell zenworks configuration managementNovell ZENworks Configuration Management before 11.2.4 allows XSS.6.1 Medium
- codecov nodejs uploaderImproper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov8.8 High
- amd atidxx64An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20...9.0 Critical
- amd atidxx64An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20...8.6 High
- amd atidxx64An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20...8.6 High
- amd atidxx64An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20...8.6 High
- qt, fedoraproject fedora +1 moreQt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that...7.5 High
simplesamlphp/simplesamlphpPackagistLink injection in SimpleSAMLphp3.7 Low- simplesamlphpCross-site scripting in SimpleSAMLphp4.4 Medium
- simplesamlphpLog injection in SimpleSAMLphp4.4 Medium
- microsoft outlook for android, outlook +1 moreA spoofing vulnerability exists in the way Microsoft Outlook for Android software parses...4.6 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 moreAn elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc)...5.5 Medium
- microsoft visual studio codeAn elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug...7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 8 +1 moreAn elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft...6.5 Medium
- django-user-sessions project django-user-sessionsSession key exposure through session list in Django User Sessions6.5 Medium
- mirumee saleorMissing Authentication for Critical Function in Saleor5.3 Medium
- codesys gateway, hmi, control for beaglebone +12 more +14 moreCODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation...6.5 Medium
- vivotek pt7135 firmwareA Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the...8.8 High
- vivotek pt7135 firmwareA Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a...6.5 Medium
- vivotek pt7135 firmwareAn Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via...5.3 Medium
- ricoh generic pcl5 driver, pc fax generic driver, pcl6 driver for universal print +5 more +7 moreAn issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to...7.8 High
- google androidaudio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of...5.5 Medium
- google androidmedia/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute...7.8 High
- vivotek pt7135 firmwareA Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a...9.8 Critical
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- gehealthcare apexpro telemetry server firmware, carescape b450 monitor firmware, carescape b650 monitor firmware +6 more +8 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...9.9 Critical
- vivotek pt7135 firmwareAn Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera...7.5 High
- kohaSQL injection vulnerability in the MARC framework import/export function (admin...9.8 Critical
- kohaThe MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8...9.8 Critical
- kohaAbsolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before...7.5 High
- kohaMultiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl)...7.5 High
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...8.6 High
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- gehealthcare apexpro telemetry server firmware, carescape b450 monitor firmware, carescape b650 monitor firmware +6 more +8 moreIn ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- peerigon angular-expressionsRemote Code Execution in Angular Expressions8.7 High
- bigswitch big cloud fabric, big monitoring fabric, multi-cloud director +2 moreAn issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9,...8.8 High
- bigswitch big cloud fabric, big monitoring fabric, multi-cloud director +2 moreAn issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9,...6.1 Medium
- Show moreLoading…