CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...8.8 High
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...9.8 Critical
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...9.8 Critical
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or...9.8 Critical
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...5.5 Medium
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...9.8 Critical
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...5.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Medium
- cisco small business 300 series managed switches, sf300-08 firmware, sf300-24 firmware +55 more +57 moreCisco Small Business Switches Denial of Service Vulnerability8.6 High
- arris ruckus zoneflex r500 firmwareRuckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary...7.2 High
- netapp oncommand system managerNetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary...7.5 High
- netapp oncommand system managerCross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows...6.1 Medium
- netgear wnr1000 firmwareNetgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak...9.8 Critical
- netgear wnr1000 firmwareNetgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the...9.8 Critical
- isof project isofOS Command Injection in lsof9.8 Critical
- netty, canonical ubuntu linux, debian linux +3 more +5 moreHTTP Request Smuggling in Netty9.1 Critical
- netty, apache spark, canonical ubuntu linux +4 more +6 moreHTTP Request Smuggling in Netty9.1 Critical
- adobe magentoMagento stored cross-site scripting vulnerability6.1 Medium
- adobe magentoMagento sql injection vulnerability7.5 High
- adobe magentoMagento security bypass vulnerability9.8 Critical
- adobe magentoMagento Path Traversal5.3 Medium
- adobe magentoMagento deserialization vulnerability9.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerability6.1 Medium
- adobe illustrator ccAdobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustrator ccAdobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustrator ccAdobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustrator ccAdobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful...7.8 High
- adobe illustrator ccAdobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful...7.8 High
- foscam fi8620 firmwareAn Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions...7.5 High
- denx u-boot, opensuse leap +1 moreIn Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts(...9.8 Critical
- tp-link tl-sc 3130g firmware, tl-sc 3171g firmware, tl-sc 4171g firmware +2 moreA Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi...9.8 Critical
- tp-link tl-sc 3130 firmware, tl-sc 3130g firmware, tl-sc 3171g firmware +1 more +3 moreA Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G,...7.5 High
- zavio f3105 firmware, f312a firmware +1 moreA Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time...9.8 Critical
- debian linux, sudo project sudo +1 moreIn Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based...7.8 High
- vtiger crmvtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper...9.8 Critical
- zavio f3105 firmware, f312a firmware +1 moreA Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP...7.5 High
- zavio f3105 firmware, f312a firmware +1 moreA Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter...9.8 Critical
- zavio f3105 firmware, f312a firmware +1 moreAn Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1...7.5 High
- iktm bearftpIKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.7.5 High
- bitdefender antivirus, antivirus for mac +1 moreCode Injection into Bitdefender AV for Mac5.3 Medium
- bitdefender antivirus, antivirus for mac +1 morePrivilege escalation in Bitdefender AV for Mac1.6 Low
- wowza streaming engineWowza Streaming Engine 4.7.7 and 4.7.8 suffers from multiple authenticated XSS vulnerabilities...5.4 Medium
- wowza streaming engineA privilege escalation vulnerability in Wowza Streaming Engine 4.7.7 and 4.7.8 allows any...7.8 High
- wowza streaming engineWowza Streaming Engine 4.7.7 and 4.7.8 suffers from multiple CSRF vulnerabilities. For example,...6.5 Medium
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreXXE vulnerability in Jenkins WebSphere Deployer Plugin7.6 High
- jenkins fortify, jenkins project fortify plugin +1 moreFortify Plugin stored credentials in plain text4.3 Medium
- jenkins code coverage api, jenkins project code coverage api plugin +1 moreStored XSS vulnerability in Code Coverage API Plugin5.4 Medium
- jenkinsJenkins REST APIs vulnerable to clickjacking5.4 Medium
- jenkinsMemory usage graphs accessible to anyone with Overall/Read4.3 Medium
- jenkinsJenkins Diagnostic page exposed session cookies5.4 Medium
- Show moreLoading…