Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
February

CVEs published in February 2020

1,402 vulnerabilities, 227 critical, 16 exploited.

Known exploitedIn KEVPublic exploitFix available

hackerone nextcloud server, nextcloud server +1 moreA bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by...CVE-2020-81218.1 HighFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreA reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the...CVE-2020-81206.1 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a...CVE-2020-81194.3 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, novell suse linux enterprise server +1 more +3 moreAn authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local...CVE-2020-81185.0 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be...CVE-2020-81174.3 MediumFebruary 4, 2020
dot-prop project dot-propdot-prop Prototype Pollution vulnerabilityCVE-2020-8116Fix available7.3 HighFebruary 4, 2020
revive-adserver revive adserverA reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery...CVE-2020-81156.1 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports +1 more +3 moreImproper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs...CVE-2019-156244.9 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports sle +1 more +3 moreExposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain...CVE-2019-156235.3 MediumFebruary 4, 2020
nextcloudNot strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get...CVE-2019-156222.4 LowFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreImproper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare...CVE-2019-156216.5 MediumFebruary 4, 2020
nextcloud talkImproper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private...CVE-2019-156202.7 LowFebruary 4, 2020
hackerone nextcloud server, nextcloud deck, server +1 more +3 moreImproper neutralization of file names, conversation names and board names in Nextcloud Server 16...CVE-2019-156194.8 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreMissing escaping of HTML in the Updater of Nextcloud 15.0.5 allowed a reflected XSS when starting...CVE-2019-156184.8 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when...CVE-2019-156175.4 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreDangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.CVE-2019-156164.3 MediumFebruary 4, 2020
nextcloudA wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection...CVE-2019-156156.1 MediumFebruary 4, 2020
nextcloudMissing sanitization in the iOS App 2.24.4 causes an XSS when opening malicious HTML files.CVE-2019-156145.4 MediumFebruary 4, 2020
hackerone nextcloud server, nextcloud server, opensuse backports +2 moreA bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file...CVE-2019-15613Fix available8.0 HighFebruary 4, 2020
hackerone nextcloud server, nextcloud server +1 moreA bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the...CVE-2019-156125.9 MediumFebruary 4, 2020
nextcloudViolation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and...CVE-2019-156114.9 MediumFebruary 4, 2020
nextcloud circlesImproper authorization in the Circles app 0.17.7 causes retaining access when an email address...CVE-2019-156104.3 MediumFebruary 4, 2020
klona project klonaImproper Input Validation in klonaCVE-2020-8125Fix available9.8 CriticalFebruary 4, 2020
hackerone url-parseImproper Validation and Sanitization in url-parseCVE-2020-8124Fix available5.3 MediumFebruary 4, 2020
themeum tutor lmsA CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker...CVE-2020-8615Public exploitEPSS 10.7%6.5 MediumFebruary 4, 2020
phppgadminphppgadmin through 7.12.1 allows sensitive actions to be performed without validating that the...CVE-2019-10784Fix available9.6 CriticalFebruary 4, 2020
mariadbmysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql...CVE-2020-7221Fix available7.8 HighFebruary 4, 2020
ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could...CVE-2020-41636.6 MediumFebruary 4, 2020
ibm security identity managerIBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or...CVE-2019-46756.8 MediumFebruary 4, 2020
ibm security identity managerIBM Security Identity Manager 7.0.1 could allow a remote attacker to traverse directories on the...CVE-2019-46746.8 MediumFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to...CVE-2019-45623.7 LowFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 does not perform an authentication check for a critical...CVE-2019-45515.3 MediumFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 is deployed with active debugging code that can create...CVE-2019-45505.3 MediumFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 could allow a remote attacker to hijack the clicking action...CVE-2019-45486.1 MediumFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which...CVE-2019-45416.5 MediumFebruary 4, 2020
ibm security directory serverIBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could...CVE-2019-45405.9 MediumFebruary 4, 2020
ibm security identity managerIBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability...CVE-2019-44515.4 MediumFebruary 4, 2020
samsung exynos 8895, google android +1 moreOn Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka...CVE-2019-192737.8 HighFebruary 4, 2020
cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could...CVE-2013-2678Public exploitEPSS 16.9%8.1 HighFebruary 4, 2020
pandorafms pandora fmsPandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report...CVE-2019-199685.4 MediumFebruary 4, 2020
python, canonical ubuntu linux, netapp active iq unified manager +3 more +5 moreLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...CVE-2019-9674Fix available7.5 HighFebruary 4, 2020
brother mfc-9970cdw firmwareBrother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which...CVE-2013-26767.5 HighFebruary 4, 2020
dlink dir-100 firmwareD-Link DIR-100 4.03B07 has PPTP and poe information disclosureCVE-2013-7055Public exploit9.8 CriticalFebruary 4, 2020
dlink dir-100 firmwareD-Link DIR-100 4.03B07: cli.cgi XSSCVE-2013-7054Public exploit6.1 MediumFebruary 4, 2020
dlink dir-100 firmwareD-Link DIR-100 4.03B07: cli.cgi CSRFCVE-2013-7053Public exploit8.8 HighFebruary 4, 2020
dlink dir-100 firmwareD-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptCVE-2013-7052Public exploitEPSS 24.7%9.8 CriticalFebruary 4, 2020
dlink dir-100 firmwareD-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parametersCVE-2013-7051Public exploitEPSS 15.6%8.8 HighFebruary 4, 2020
webcalendar project webcalendarwebcalendar before 1.2.7 shows the reason for a failed login (e.g., "no such user").CVE-2013-14225.3 MediumFebruary 4, 2020
zpanelcp zpanelZPanel 10.0.1 has insufficient entropy for its password reset process.CVE-2012-5686Public exploit9.8 CriticalFebruary 4, 2020
joomla!, joomla joomla\! +1 moreJoomla! com_mailto 1.5.x through 1.5.13 has an automated mail timeout bypass.CVE-2011-49125.3 MediumFebruary 4, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open