CVEs published in February 2020

1,402 vulnerabilities, 227 critical, 16 exploited.

• wireshark Mageia Updated wireshark packages fix security vulnerabilities MGASA-2020-0111 Fix available No scoreFebruary 29, 2020
• mozilla webthings gateway XSS in Mozilla WebThings Gateway CVE-2020-6804 8.8 HighFebruary 28, 2020
• mozilla webthings gateway Open redirect in Mozilla WebThings Gateway CVE-2020-6803 5.4 MediumFebruary 28, 2020
• juniper junos Junos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up CVE-2015-3006 6.5 MediumFebruary 28, 2020
• juniper junos Junos: FTPS through SRX opens up wide range of data channel TCP ports CVE-2015-5361 6.5 MediumFebruary 28, 2020
• avaya equinox conferencing management (iview), aura conferencing +1 more Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability CVE-2019-7007 7.5 HighFebruary 28, 2020
• hcltech self-service application, ibm corporation hcl bigfix self-service application (ssa) +1 more BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript... CVE-2019-4301 8.4 HighFebruary 28, 2020
• webnus modern events calendar lite Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar... CVE-2020-9459 5.4 MediumFebruary 28, 2020
• enpeem project enpeem OS Command Injection in enpeem CVE-2019-10801 9.8 CriticalFebruary 28, 2020
• mangoraft giting OS Command Injection in giting CVE-2019-10802 9.8 CriticalFebruary 28, 2020
• push-dir project push-dir push-dir Enables OS Command Injection CVE-2019-10803 9.8 CriticalFebruary 28, 2020
• serial-number project serial-number OS Command Injection in serial-number CVE-2019-10804 9.8 CriticalFebruary 28, 2020
• sideralis valib.js Exposure of Resource to Wrong Sphere in valib CVE-2019-10805 7.5 HighFebruary 28, 2020
• justblab blab\! ax, blab\! ax pro, blab\! ws +1 more +3 more An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client),... CVE-2020-9449 8.8 HighFebruary 28, 2020
• export users to csv project users to csv The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. CVE-2020-9466 6.1 MediumFebruary 28, 2020
• pablosoftwaresolutions quick \'n easy web server The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote... CVE-2019-19943 7.5 HighFebruary 28, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web... CVE-2020-9465 Public exploit EPSS 81.8% 9.8 CriticalFebruary 28, 2020
• kill-port-process project kill-port-process OS Command Injection and Command Injection in kill-port-process CVE-2019-15609 Fix available 9.8 CriticalFebruary 28, 2020
• revealjs reveal.js Cross-site Scripting in reveal.js CVE-2020-8127 Fix available 6.1 MediumFebruary 28, 2020
• pdf-image project pdf-image Improper Input Validation and Code Injection in pdf-image CVE-2020-8132 9.8 CriticalFebruary 28, 2020
• qt In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for... CVE-2018-21035 Fix available 8.6 HighFebruary 28, 2020
• huawei honor v10, honor v10 firmware +1 more Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions... CVE-2020-1792 5.5 MediumFebruary 28, 2020
• honor pcmanager PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in... CVE-2020-1844 7.8 HighFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1877 4.4 MediumFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1876 7.5 HighFebruary 28, 2020
• huawei cloudengine 12800, cloudengine 12800 firmware +1 more CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01... CVE-2020-1861 4.4 MediumFebruary 28, 2020
• huawei nip6800 firmware, oceanstor 5310 firmware, secospace usg6600 firmware +1 more +3 more NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1881 7.5 HighFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1860 7.5 HighFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1874 5.5 MediumFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1873 7.5 HighFebruary 28, 2020
• huawei nip6800 firmware, secospace usg6600 firmware, usg9500 firmware +2 more NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500;... CVE-2020-1875 5.5 MediumFebruary 28, 2020
• centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell... CVE-2020-9463 8.8 HighFebruary 28, 2020
• puma, ruby-lang ruby, debian linux +1 more +3 more HTTP Response Splitting in Puma CVE-2020-5247 Fix available 6.5 MediumFebruary 28, 2020
• gwtupload project gwtupload Cross-site Scripting in GwtUpload CVE-2020-9447 6.1 MediumFebruary 28, 2020
• suse linux enterprise server, linux enterprise server 11, linux enterprise server 12 +2 more +4 more permissions: chkstat sets unintended setuid/capabilities for mrsh and wodim CVE-2020-8013 Fix available 2.2 LowFebruary 28, 2020
• w1.fi hostapd, debian linux +1 more hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library... CVE-2019-10064 Fix available 7.5 HighFebruary 28, 2020
• avast antivirus for linux, antivirus pro, antivirus pro plus +2 more The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects... CVE-2020-9399 5.5 MediumFebruary 28, 2020
• openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect... CVE-2020-9442 Public exploit 7.8 HighFebruary 28, 2020
• nagios, opensuse factory, suse linux enterprise server 11 +3 more +5 more nagios cron job allows privilege escalation from user nagios to root CVE-2019-3698 5.7 MediumFebruary 28, 2020
• apple icloud, icloud for windows, icloud for windows (legacy) +8 more +10 more A denial of service issue was addressed with improved input validation. CVE-2019-8741 7.5 HighFebruary 28, 2020
• tiberius crates.io tiberius is unmaintained RUSTSEC-2020-0010 Fix available No scoreFebruary 28, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6386 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6384 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6383 Fix available 8.8 HighFebruary 27, 2020
• lua-openssl project lua-openssl openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it... CVE-2020-9432 9.1 CriticalFebruary 27, 2020
• lua-openssl project lua-openssl openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because... CVE-2020-9433 9.1 CriticalFebruary 27, 2020
• lua-openssl project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because... CVE-2020-9434 9.1 CriticalFebruary 27, 2020
• wireshark, debian linux, fedoraproject fedora +1 more +3 more In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash.... CVE-2020-9428 Fix available 7.5 HighFebruary 27, 2020
• wireshark, opensuse leap +1 more In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan... CVE-2020-9429 Fix available 7.5 HighFebruary 27, 2020
• wireshark, debian linux, fedoraproject fedora +1 more +3 more In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could... CVE-2020-9430 Fix available 7.5 HighFebruary 27, 2020
• Show olderLoading…