CVEs published in January 2020
1,599 vulnerabilities, 235 critical, 8 exploited.
- apereo opencastAuthentication Bypass For Endpoints With Anonymous Access in OpenCast8.7 High
- kronos web time and attendanceA stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x...6.9 Medium
- kronos web time and attendanceIn Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com...7.5 High
- kronos web time and attendanceIn Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com...7.5 High
- kronos web time and attendanceIn Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a...6.9 Medium
- apereo opencastOpencast users with ROLE_COURSE_ADMIN can create new users4.8 Medium
- trend micro anti-threat toolkit (attk), trendmicro anti-threat toolkit +1 moreTrend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that...7.8 High
- bitdefender total security 2020Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability4.9 Medium
- apereo opencastOpencast uses unsafe identifiers7.7 High
- apereo opencastHard-Coded Key Used For Remember-me Token in OpenCast6.8 Medium
- dell latitude e6430, hp elitebook 850 g1, dell latitude e6430 firmware +1 more +3 moreThe System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP...7.8 High
- node-uuidInsecure Entropy Source - Math.random() in node-uuid7.5 High
- flippyThe Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes,...6.5 Medium
- login security securityThe Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows...9.8 Critical
- viewgit project viewgitMultiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote...6.1 Medium
- hitmyserver hms testimonialsMultiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11...6.1 Medium
- apereo opencastOpencast stores passwords using outdated MD5 hash algorithm7.7 High
- apereo opencastOpencast allows unauthorized public access via OAI-PMH7.6 High
- exlibrisgroup aleph 500Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated...9.8 Critical
- exlibrisgroup aleph 500Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 ...6.1 Medium
- linux kernelIn a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read...6.2 Medium
- netapp e-series santricity os controller software, e-series santricity os controller +1 moreE-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability...6.5 Medium
- oauth2 proxy project proxy, pusher oauth2 proxy +1 moreOpen Redirect in OAuth2 Proxy5.9 Medium
- apache spamassassinA command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted...8.1 High
- apache spamassassinA command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted...8.1 High
- jetbrains youtrackJetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.6.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the...5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.4.3 Medium
- jetbrains riderIn JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries...7.5 High
- jetbrains intellij ideaPorts listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.7.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead...7.4 High
- artica pandora fmsPandora FMS ? 7.42 suffers from a remote code execution vulnerability. To exploit the...6.8 Medium
- chamiloChamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.6.1 Medium
- chamiloChamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.6.1 Medium
- veraxsystems network management systemVerax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action5.3 Medium
- veraxsystems network management systemVerax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.7.5 High
firefoxUbuntufirefox regressionsNo score- veraxsystems network management systemVerax NMS prior to 2.10 allows authentication via the encrypted password without knowing the...5.9 Medium
- veraxsystems network management systemVerax NMS prior to 2.1.0 has multiple security bypass vulnerabilities9.1 Critical
- apple tokendGemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability6.1 Medium
- opensc opensc.tokend, opensc project opensc +1 moreOpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability6.1 Medium
- erdas er viewer, hexagongeospatial erdas er viewer +1 moreERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities7.8 High
- imagely nextgen gallery plugin, nextgen gallery, nextgen gallery plugin authors gallery plugin +2 moreNextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability7.5 High
- opensuse wicked, leap +1 moreAn ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network...7.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client options7.5 High
- actix actix-codecUse-after-free in actix-codec9.8 Critical
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmt6.5 Medium
- Show moreLoading…