CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- ibm mq, mq appliance +1 moreIBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a...5.3 Medium
- ibm mq, mq appliance +1 moreIBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge...5.9 Medium
- lldpd project lldpd, debian linux, fedoraproject fedora +2 moreBuffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0...9.8 Critical
- lldpd project lldpdlldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and...7.5 High
- tibco patterns - searchTIBCO Patterns - Search Exposes Cross Site Scripting Vulnerabilities7.3 High
- nethackNetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow5.0 Medium
- nethackNetHack MENUCOLOR configuration file option is subject to a buffer overflow5.0 Medium
- nethackNetHack SYMBOL configuration file option is subject to a buffer overflow5.0 Medium
- nethackNetHack error recovery after syntax error in configuration file is subject to a buffer overflow5.0 Medium
- nethackNetHack command line parsing of options starting with -de and -i is subject to a buffer overflow5.0 Medium
- nethackNetHack command line -w option parsing is subject to a buffer overflow5.0 Medium
- uclouvain openjpeg, debian linux +1 moreopj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap...8.8 High
- apache jackrabbit oakImproper Removal of Sensitive Information Before Storage or Transfer in Apache Jackrabbit Oak7.5 High
- polycom hdx video end points, uc apl +1 moreDirectory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4...7.5 High
- polycom hdx video end points, uc apl +1 morePolycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated...8.8 High
- debian linux, prosody mod auth ldap, mod auth ldap2 +2 moreThe mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody...9.8 Critical
- micasaverde veralite firmwareDirectory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with...6.5 Medium
- micasaverde veralite firmwareMiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote...8.1 High
- micasaverde veralite firmwareThe HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote...8.8 High
- micasaverde veralite firmwareMiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to...9.8 Critical
- micasaverde veralite firmwareCross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with...6.5 Medium
- openshift origin origin, red hat openshift origin, redhat openshift +2 moreThe download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary...9.8 Critical
- pyrad, fedoraproject fedora +1 morepyrad is vulnerable to the use of Insufficiently Random Values5.9 Medium
- wolfsslwolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls...9.8 Critical
- wolfsslThe SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding...9.8 Critical
- wolfsslThe DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4...9.8 Critical
- gitlab, gitlab community edition, enterprise edition +1 more +3 moreThe (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib...6.5 Medium
- gitlab, gitlab community edition, enterprise edition +1 more +3 moreThe parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition...8.8 High
- mediawikiThe CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1...5.3 Medium
- hcomm xpient irisIris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote...9.8 Critical
- git-extrasThe git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via...5.5 Medium
- py-bcrypt, fedoraproject fedora +1 moreImproper Restriction of Excessive Authentication Attempts in py-bcrypt7.5 High
- handsomeweb sos webpagesbackup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext...9.8 Critical
- liferay portalLiferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet5.4 Medium
- fusionauthAn issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e...7.2 High
- php, debian linux, opensuse leap +2 more +4 moreglobal buffer-overflow in mbfl_filt_conv_big5_wchar6.5 Medium
- php, debian linux, opensuse leap +2 more +4 moreOOB read in php_strip_tags_ex6.5 Medium
python3MageiaUpdated python3 packages fix security vulnerabilitiesNo scoreglpiMageiaUpdated glpi packages fix security vulnerabilitiesNo score- red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 moreExternally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible7.3 High
- red hat ansible, debian linux +1 moreOS Command Injection and Improper Input Validation in ansible7.3 High
- nttdata mypallete, 77bank 77 bank, ashikagabank ashigin +7 more +9 moreAndroid App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not...7.4 High
- super file explorer project file explorerAn arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1...8.8 High
- asus rt-ac66u firmwareASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental...6.1 Medium
- gitlabAn authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that...7.5 High
- gitlabAn information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6...7.5 High
- gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...5.3 Medium
- gitlab, gitlab ce/ee +1 moreAn information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community...5.3 Medium
- giltlab gitlabAn privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6...8.8 High
- gitlab, gitlab ee +1 moreAn IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...5.3 Medium
- Show moreLoading…