CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- bitdefender bdserviceshost.exe, total security 2020 +1 moreUntrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)5.2 Medium
- motu avb firmwareAVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the...7.5 High
- suse studio onsite, susestudio-ui-server +1 moreSQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite8.1 High
- suse studio onsite, susestudio-ui-server +1 moreInsecure handling of repodata and packages in SUSE Studio onlite3.7 Low
- fuji xerox co.,ltd. kantan netprint app for android, fujixerox easy netprint +1 moreThe kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from...7.4 High
- fuji xerox co.,ltd. kantan netprint app for ios, fujixerox easy netprint +1 moreThe kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers...7.4 High
- fuji xerox co.,ltd. netprint app for ios, fujixerox netprint +1 moreThe netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which...7.4 High
- f-revocrmCross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series)...6.1 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an...7.5 High
- linux kernelIn the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the...5.5 Medium
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to...7.5 High
- lustreIn the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer...7.5 High
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic...7.5 High
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic...7.5 High
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and...9.8 Critical
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic...7.5 High
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic ...7.5 High
- lustreIn the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body...7.5 High
- lustreIn the Lustre file system before 2.12.3, the ptlrpc module has an osd_map_remote_to_local out-of...7.5 High
- lustreIn the Lustre file system before 2.12.3, the mdt module has an out-of-bounds access and panic due...7.5 High
- intelliantech aptus webIntellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.9.8 Critical
- intelliantech aptusThe Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the...9.8 Critical
- intelliantech aptusThe Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and...9.8 Critical
- virglrenderer project virglrenderer, debian linux +1 moreA double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers...5.5 Medium
- virglrenderer project virglrenderer, debian linux +1 moreA NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to...5.5 Medium
- dolibarr erp\/crmDolibarr cross-site scripting (XSS) vulnerability6.1 Medium
- dolibarr erp\/crmDolibarr Improper Restriction of Excessive Authentication Attempts9.8 Critical
- dolibarr erp\/crmXSS in Dolibarr ERP & CRM6.1 Medium
- adive frameworkAdive Framework 2.0.8 has admin/user/add userUsername XSS.6.1 Medium
- adive frameworkAdive Framework 2.0.8 has admin/user/add userName XSS.6.1 Medium
- adive frameworkAdive Framework 2.0.8 has admin/config CSRF to change the Administrator password.8.8 High
- solarwinds n-centralSolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to...7.5 High
- cisco webex meetings, webex meetings online +1 moreCisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability7.5 High
- cisco finesse, unified contact center express +1 moreCisco Finesse Cross-Site Scripting Vulnerability6.1 Medium
- cisco ucs directorCisco UCS Director Information Disclosure Vulnerability4.3 Medium
- cisco webex video mesh, collaboration meeting rooms +1 moreCisco Webex Video Mesh Node Command Injection Vulnerability7.2 High
- cisco ip phone 7800 series with multiplatform firmware, ip phone 6821 firmware, ip phone 6825 firmware +17 more +19 moreCisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability5.4 Medium
- cisco crosswork change automation, crosswork network change automation, crosswork network automation +2 moreCisco Crosswork Change Automation Cross-Site Scripting Vulnerability6.1 Medium
- cisco asr 5000 series software, staros +1 moreCisco Mobility Management Entity Denial of Service Vulnerability6.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Authorization Bypass Vulnerability6.5 Medium
- cisco data center analytics frameworkCisco Data Center Analytics Framework Cross-Site Scripting Vulnerability6.1 Medium
- cisco email security appliance (esa), email security appliance +1 moreCisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability6.5 Medium
- cisco webex teamsCisco Webex Teams Adaptive Cards Denial of Service Vulnerability6.5 Medium
- cisco unity connectionCisco Unity Connection Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco 550x series stackable managed switches, sf350-48 firmware, sf350-48mp firmware +43 more +45 moreCisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability6.1 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Local Privilege Escalation Vulnerability8.8 High
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability8.2 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability7.7 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities8.6 High
- Show moreLoading…