CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- gitlab, gitlab ce/ee +1 moreAn IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to...4.3 Medium
- gitlab, gitlab ee +1 moreAn IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...5.3 Medium
- gitlab, gitlab ee +1 moreAn access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition ...7.5 High
- gitlab, gitlab ee +1 moreAn authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the...6.5 Medium
- gitlab, gitlab ce/ee +1 moreAn information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move...4.3 Medium
- gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...7.5 High
- gitlab, gitlab ce/ee +1 moreA flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the ...9.8 Critical
- gitlab, gitlab ce/ee +1 moreImproper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition ...9.8 Critical
- gitlab, gitlab community edition and gitlab enterprise edition +1 moreA privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are...8.8 High
- gitlab, gitlab ce/ee +1 moreA XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.6.1 Medium
- node-redCross-Site Scripting in node-red5.4 Medium
- fortinet fortisiemAn Improper Neutralization of Input vulnerability in the description and title parameters of a...5.4 Medium
- apache supersetInformation disclosure in Apache Superset6.5 Medium
- apache nifiCross-site scripting in Apache NiFi6.1 Medium
- apache nifiApache NiFi Insertion of Sensitive Information into Log File5.3 Medium
- gchq stroomAll versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is able to load the Stroom UI into a hidden…6.1 Medium
- apple icloud, icloud for windows, ipados +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in tvOS...8.8 High
- apple icloud, icloud for windows, ipados +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ipados +9 more +11 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...4.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in...3.5 Low
- wso2 api manager, identity server +1 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2...6.1 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting (XSS)...4.8 Medium
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...3.5 Low
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting ...3.5 Low
- wso2 api managerAn issue was discovered in WSO2 API Manager 2.6.0. A potential Stored Cross-Site Scripting (XSS)...4.8 Medium
- wso2 api manager, enterprise integrator, identity server +2 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as...3.5 Low
- wso2 api manager, enterprise integrator, identity server +2 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as...3.5 Low
- wso2 api manager, identity server +1 moreAn issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2...6.1 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...9.8 Critical
- rockwell automation arena simulation software, rockwellautomation arena +1 moreA maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena...7.8 High
- rockwell automation arena simulation software, rockwellautomation arena +1 moreA maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena...7.8 High
- huawei e587 firmwareCommand-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote...9.8 Critical
- simplehrmSimpleHRM 2.3 and earlier could allow remote attackers to bypass the authentication process in ...7.5 High
- typo3Typo3 Cross-Site Scripting in Flash component (ELTS)4.8 Medium
- aws-dms aws xmsDirectory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files...7.5 High
- fudforumPHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote...7.2 High
- a1 wlan box adb vv2220 firmwareThe Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows...4.8 Medium
- cpanel webhost managerCross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to...6.1 Medium
- syliusAbility in Sylius to switch channels via GET parameter enabled in production environments4.4 Medium
- sylius syliusresourcebundleAbility to expose data in Sylius by using an unintended serialisation group4.4 Medium
- usebbpanel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead...9.8 Critical
- smc d3g0804w firmwareSMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging...9.8 Critical
- jetbrains ktorRequest smuggling is possible in Ktor when both chunked TE and content length specified5.4 Medium
- ratpackDefault development error handler in Ratpack is vulnerable to HTML content injection (XSS)6.1 Medium
- pivotal tc runtimes, tc server, tc server 3.x +3 more +5 moretcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation7.3 High
- synacor zimbra collaboration serverSynacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.9.8 Critical
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.6.1 Medium
- zimbra collaboration serverZimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.6.1 Medium
- Show moreLoading…