CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- ushahidiUshahidi before 2.6.1 has insufficient entropy for forgot-password tokens.9.8 Critical
- joomla! core, joomla joomla\! +1 moreJoomla! core 1.7.1 allows information disclosure due to weak encryption7.5 High
- joomla!, joomla joomla\! +1 moreJoomla! 1.7.1 has core information disclosure due to inadequate error checking.7.5 High
perl-DBD-PgAlmaLinuxperl-DBD-Pg:3.7 bug fix and enhancement updateNo scorepostgres-decoderbufsAlmaLinuxnew module: postgresql:12No score- changing syuan-gu-da-shih, sysjust syuan-gu-da-shin +1 moreSysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)6.1 Medium
- changing syuan-gu-da-shih, sysjust syuan-gu-da-shin +1 moreSysJust Syuan-Gu-Da-Shih -Request-Forgery9.8 Critical
- changing syuan-gu-da-shih, sysjust syuan-gu-da-shin +1 moreSysJust Syuan-Gu-Da-Shih-SQL injection8.1 High
- agendaless waitressCatastrophic backtracking in regex allows Denial of Service in Waitress5.7 Medium
- nanopbOut-of-memory condition in Nanopb is potentially exploitable6.5 Medium
- canonical ubuntu linux, debian linux, point-to-point protocol project protocol +1 more +3 moreeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and...9.8 Critical
- broadcom bcm4339 firmware, wifi drivers, synology router manager +2 moreBroadcom wl driver is vulnerable to heap buffer overflow7.9 High
- broadcom bcm4339 firmware, wifi drivers, synology router manager +2 moreBroadcom wl driver is vulnerable to heap buffer overflow7.9 High
- eginnovations eg managereG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=...9.8 Critical
- eginnovations eg managereG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka...9.8 Critical
- bromium client, hp bromium +1 moreBromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service6.1 Medium
- brother mfc-9970cdw firmwareBrother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which...7.5 High
- suse openstack cloud, openstack cloud crowbar, openstack cloud 7 +4 more +6 morecrowbar provision leaks admin password to all nodes in cleartext9.3 Critical
- apple safari, mac os x +1 moreA Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing...7.5 High
- brother mfc-9970cdw firmwareBrother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows...6.8 Medium
- cmsjunkie j-businessdirectoryThe J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some...6.5 Medium
- ibm storediqIBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due...2.9 Low
- ibm java, sdk, websphere application server +2 moreIBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and...7.2 High
- wpchill strong testimonialsStored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an...6.1 Medium
- brother mfc-9970cdw firmwareBrother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.7.5 High
- tp-link tl-wr1043nd firmwareTP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.7.5 High
- masscodemassCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution...6.1 Medium
- tp-link tp-sg105e firmwareThe Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated...7.5 High
- phplistphpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for...9.8 Critical
- kuberneteskubectl cp allows symlink directory traversal4.8 Medium
- circl ail frameworkGlobal.py in AIL framework 2.8 allows path traversal.7.5 High
- phpabook project phpabookAn issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo...9.8 Critical
- paessler prtg network monitorAn issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local...5.5 Medium
- tinywebgalleryTinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows...5.3 Medium
- telaen project telaenTelean before 1.3.1 contains a full path disclosure vulnerability which could allow remote...5.3 Medium
- telaen project telaenCross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web...6.1 Medium
- uebimiauCross-site Scripting (XSS) in UebiMiau 2.7.11 and earlier allows remote attackers to inject...6.1 Medium
- prototypejs prototypePrototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other...4.3 Medium
- telaen project telaenOpen Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote...6.1 Medium
- dynamic content elements project content elementsDCE extension for Typo3 Discloses Environment Information5.3 Medium
- unisys stealthTODO DODO7.5 High
- changing servisign windows versions, changingtec servisign +1 moreServiSign Windows Versions- Arbitrary File Deletion8.3 High
- changing servisign windows versions, changingtec servisign +1 moreServiSign Windows Versions- Arbitrary File Access6.1 Medium
- changing servisign windows versions, changingtec servisign +1 moreServiSign Windows Versions- Remote Code Execution via LoadLibrary8.3 High
- djangoproject djangoSQL injection in Django9.8 Critical
- norman malware cleanernsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions...9.8 Critical
- qtAn issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins...7.8 High
- maxum rumpusAn issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible...6.1 Medium
- torproject torThe daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous...5.3 Medium
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...6.5 Medium
- Show moreLoading…