CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.6.1 Medium
- neatorobotics botvac connected firmwareAn issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of...4.7 Medium
- synacor zimbra collaboration serverZimbra Collaboration before 8.6.0 patch5 has XSS.5.4 Medium
- synacor zimbra collaboration serverSynacor Zimbra Collaboration before 8.0.8 has XSS.6.1 Medium
- synacor zimbra collaboration serverZimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.5.4 Medium
- zimbra collaboration serverZimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin...4.8 Medium
- zimbra collaboration serverIn Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.6.1 Medium
- tp-link tl-wr849n firmwareTP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a...6.1 Medium
- hp web viewpoint t0320, web viewpoint t0952, web viewpoint t0986 +2 moreAn issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint...5.5 Medium
- bytemark symbiosisBytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username,...7.5 High
- ciktel mesh router firmware, coship emta ap firmwre, fg-products fgn-r2 firmware +14 more +16 moreA certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21)...7.5 High
- ciktel mesh router firmware, coship emta ap firmwre, fg-products fgn-r2 firmware +14 more +16 moreA certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21)...7.5 High
- eucalyptus management consoleCross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0...6.1 Medium
- zohocorp manageengine desktop centralUnrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7...9.8 Critical
- lexmark markvision enterpriseDirectory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision...9.8 Critical
- lexmark markvision enterpriseDirectory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision...7.5 High
- hp sgi tempoSGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows...7.8 High
- hp sgi tempoSGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows...7.8 High
- hp sgi tempoSGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows...6.6 Medium
- bitdefender endpoint security tools, epsecurityservice.exe +1 moreUntrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)5.3 Medium
- bitdefender box 2, box 2 firmware +1 moreBitdefender BOX 2 bootstrap download_image command injection vulnerability8.1 High
- bitdefender box 2, box 2 firmware, central +2 moreBitdefender BOX 2 bootstrap get_image_size command injection vulnerability9.0 Critical
- belkin wemo insight switch, wemo insight switch firmware +1 moreStack-Based Overflow vulnerability in Belkin WeMo Insights Switch8.3 High
- totolink a3002ru firmware, a702r firmware, n100re firmware +6 more +8 moreOn certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS...8.8 High
- intel intel(r) processors, canonical ubuntu linux, debian linux +429 more +431 moreCleanup errors in some data cache evictions for some Intel(R) Processors may allow an...5.5 Medium
- intel intel(r) processors, celeron 3855u firmware, celeron 3865u firmware +425 more +427 moreCleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable...5.5 Medium
- totolink a3002ru firmware, a702r firmware, n100re firmware +5 more +7 moreOn certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {...9.8 Critical
- netty, debian linux, fedoraproject fedora +3 more +5 moreHTTP Request Smuggling in Netty7.5 High
- valvesoftware dota 2schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution...7.8 High
- valvesoftware dota 2meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or...7.8 High
- valvesoftware dota 2meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or...7.8 High
- valvesoftware dota 2rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code...7.8 High
- pwgenThe Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for...9.8 Critical
- mediawiki, scribunto +1 moreThe Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and...5.9 Medium
- avast secure browserA Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The...7.8 High
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...6.8 Medium
- tikiTiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input...7.2 High
- webcalendar project webcalendarinstall/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code...9.8 Critical
- irfanview flashpix pluginIrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability9.6 Critical
- xnviewXnView 2.03 has an integer overflow vulnerability9.8 Critical
- webcalendar project webcalendarLocal file inclusion in WebCalendar before 1.2.5.8.8 High
- xnviewXnView 2.03 has a stack-based buffer overflow vulnerability9.8 Critical
- pinboard theme authors theme, pinboard project pinboard +1 morePinboard 1.0.6 theme for Wordpress has XSS.5.4 Medium
- info-zip wizWiz 5.0.3 has a user mode write access violation7.5 High
- proxmox virtual environmentProxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability5.3 Medium
- bitdefender av for mac, antivirus +1 moreGet-task-allow entitlement via BDLDaemon on macOS4.9 Medium
- portable phpmyadmin plugin authors phpmyadmin plugin, portable phpmyadmin project phpmyadmin +1 moreWordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability9.1 Critical
- bitdefender box 2, box 2 firmware +1 moreBitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)8.3 High
- gnu aspelllibaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single ...9.1 Critical
- alienvault open source security information managementOSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability7.5 High
- Show moreLoading…