CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
drupal/views_bulk_operationsPackagistViews Bulk Operations provides enhancements to running bulk actions on views. The module contains an access bypass vulnerability that might allow users to execute views actions that they should not ha…No score- gitlabAn issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to...7.5 High
- apple ipados, iphone os, mac os x +6 more +8 moreAn issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted...3.1 Low
- dotcmsdotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It...9.8 Critical
- smartbear readyapi, soapui +1 moreAn issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5....7.8 High
- google androidAn issue was discovered in the Bluetooth component of the Cypress (formerly owned by Broadcom)...8.1 High
- gitlabGitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.7.5 High
- gitlabGitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2).4.3 Medium
- gitlabGitLab EE 8.0 through 12.7.2 has Incorrect Access Control.7.5 High
- gitlabGitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.7.5 High
- gitlabGitLab EE 11.0 and later through 12.7.2 allows XSS.6.1 Medium
- gitlabGitLab EE 12.2 has Insecure Permissions (issue 2 of 2).7.5 High
- gitlabGitLab through 12.7.2 allows XSS.6.1 Medium
- gitlabGitLab EE 10.1 through 12.7.2 allows Information Disclosure.5.3 Medium
- linuxfoundation the update frameworkIncorrect threshold signature computation in TUF9.8 Critical
- gitlabGitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability8.1 High
- gitlabGitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.5.3 Medium
- gitlabGitLab EE 12.6 and later through 12.7.2 allows Denial of Service.7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain...6.5 Medium
- ibm cloud automation managerIBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or...4.3 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an...4.3 Medium
- corusent global tvThe Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics.5.3 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote...7.5 High
- rogersmedia citytv videoThe Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics.7.5 High
- automation direct c-more touch panels ea9 series, automationdirect c-more ea9-rhi firmware, c-more ea9-t10cl firmware +9 more +11 moreIt is possible to unmask credentials and other sensitive information on ?unprotected? project...9.8 Critical
- gitlabGitLab EE 8.9 and later through 12.7.2 has Insecure Permission5.3 Medium
- gitlabGitLab EE 8.9 and later through 12.7.2 has Insecure Permission9.8 Critical
- ipmitool, debian linux, fedoraproject fedora +1 more +3 moreremote code execution vulnerability in ipmitool7.7 High
- 1up-lab oneup/uploader-bundle, 1up oneupuploaderbundle +1 moreRelative Path Traversal in oneup/uploader-bundle8.8 High
- canonical cloud-init, debian linux, opensuse leap +2 moreIn cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...5.5 Medium
- canonical cloud-init, debian linux, opensuse leap +2 morecloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier...5.5 Medium
- [unknown] systemd, debian linux, redhat ceph storage +7 more +9 moreA heap use-after-free vulnerability was found in systemd before version v245-rc1, where...7.8 High
- network-managerImproper Input Validation in network-manager9.8 Critical
- dnt im-resizeOS Command Injection in im-resize9.8 Critical
- hp asset manager, asset manager cloudsystem chargeback, sitescope +2 moreAn Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux...7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...7.5 High
- dnt im-metadataOS Command Injection in im-metadata9.8 Critical
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...7.5 High
- fortinet fortimanagerA vulnerability exists in in FortiManager 5.2.1 and earlier and 5.0.10 and earlier in the WebUI...9.8 Critical
- fortinet fortimanagerA Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10...5.4 Medium
- minisnmpd project minisnmpdA stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple...7.5 High
- minisnmpd project minisnmpdAn exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses...8.2 High
- minisnmpd project minisnmpdAn exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses...8.2 High
- fortinet fortimanagerA Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0...8.8 High
- strapiUncontrolled Resource Consumption in strapi4.9 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the...4.3 Medium
- Show moreLoading…