CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- jenkinsNon-constant time HMAC comparison5.3 Medium
- jenkinsNon-constant time comparison of inbound TCP agent connection secret5.3 Medium
- jenkinsJenkins vulnerable to UDP amplification reflection attack5.8 Medium
- jenkinsInbound TCP Agent Protocol/3 authentication bypass in Jenkins8.6 High
- havalite cms, havalite +1 moreHavalite CMS 1.1.7 has a stored XSS vulnerability5.4 Medium
- dokeosDokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.5.4 Medium
- contaoContao core SQL Injection Vulnerability8.8 High
- webargs project webargsCross-Site Request Forgery in Webargs8.8 High
- dlink dir-859 firmwareD-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS...9.8 Critical
- dlink dir-859 firmwareD-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS...9.8 Critical
- dlink dir-859 firmwareD-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS...9.8 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...9.8 Critical
- linux kernelfs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows...7.1 High
- feedgen project feedgen, lkiesow python-feedgen +1 moreFeedgen Vulnerable to XML Denial of Service Attacks4.4 Medium
- elementor website builderThe Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the...5.4 Medium
- cups easy project easyCups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover...8.8 High
- cups easy \(purchase \& inventory\) project easy \(purchase \& inventory\)Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion...6.5 Medium
- dlink dcs-1100 firmware, dcs-1100l firmware, dcs-1130 firmware +14 more +16 moreAn Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO...5.3 Medium
- google tensorflowSegmentation faultin TensorFlow when converting a Python string to tf.float165.0 Medium
- dlink dcs-1100 firmware, dcs-1100l firmware, dcs-1130 firmware +14 more +16 moreAn Information Disclosure vulnerability exists due to insufficient validation of authentication...7.5 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. Inadequate escaping of usernames allows XSS...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.15. A missing CSRF token check in the LESS compiler...8.8 High
- dlink dcs-1100 firmware, dcs-1100l firmware, dcs-1130 firmware +14 more +16 moreAn Information Disclosure vulnerability exists due to a failure to restrict access on the lums...5.3 Medium
- vtiger crmvtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.9.8 Critical
- vtiger crmvtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php'...8.1 High
- codesnippets code snippetsThe Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer...8.8 High
- dlink dcs-2102 firmware, dcs-2121 firmware +1 moreAn Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D...5.3 Medium
- asus dsl-n55u firmware, rt-ac66u firmware, rt-n10u firmware +4 more +6 moreASUS RT-N56U devices allow CSRF.8.8 High
- netgear wndr4700 firmwareNetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a...7.5 High
- netgear wndr4700 firmwareNETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.9.8 Critical
- united-security-providers secure entry serverSecure Entry Server before 4.7.0 contains a URI Redirection vulnerability which could allow...6.1 Medium
- dlink dcs-1100 firmware, dcs-1100l firmware, dcs-1130 firmware +14 more +16 moreA Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP...9.8 Critical
- belkin wemo switch firmwareBelkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary...9.8 Critical
- podpress project podpressCross-site Scripting (XSS) in WordPress podPress Plugin 8.8.10.13 could allow remote attackers to...6.1 Medium
- tennisconnect componentsCross-site scripting (XSS) vulnerability in TennisConnect COMPONENTS 9.927 allows remote...6.1 Medium
- private only project onlyMultiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for...8.8 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure...5.5 Medium
- ibm iot messagesight, watson iot platform - message gateway, wiotp messagegateway +2 moreIBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer...9.8 Critical
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection ...7.1 High
- ibm content navigatorIBM Content Navigator 3.0CD could allow an authenticated user to gain information about the...4.3 Medium
- ibm security secret serverIBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- ibm security secret serverIBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or...3.7 Low
- ibm security secret serverIBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows...4.3 Medium
- ibm security secret serverIBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user...2.7 Low
- ibm security secret serverIBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command...2.7 Low
- ibm security secret serverIBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an...3.1 Low
- ibm security secret serverIBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm security secret serverIBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using...7.4 High
- ibm mq applianceIBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions...8.4 High
- Show moreLoading…