CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- opensuse wickedAn ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows...7.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD option7.5 High
tokio-protocrates.io`tokio-proto` is deprecated/unmaintainedNo score- six apart ltd movable type series, sixapart movable type +1 moreCross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier ...6.1 Medium
- atlassian confluence, confluence data center, confluence server +2 moreThe usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,...7.8 High
- atlassian jira server, jira data center +1 moreThe JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows...4.3 Medium
- atlassian jira server, jira data center +1 moreThe API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote...4.3 Medium
- atlassian jira server, jira data center +1 moreThe API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to...5.3 Medium
- atlassian jira, jira server, jira software data center +2 moreSupport zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be...4.9 Medium
- atlassian jira serverVarious installation setup resources in Jira before version 8.5.2 allow remote attackers to...6.5 Medium
- atlassian jira serverThe usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write...7.8 High
- atlassian jira, jira server and data center, jira server +2 more +4 moreComment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0...4.3 Medium
- atlassian crowdThe OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0...7.5 High
- bestwebsoft htaccessThe BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page...8.8 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize...6.1 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...7.1 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...5.9 Medium
- google android, fedoraproject fedora, libexif project libexif +2 moreIn exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an...7.5 High
- manager-io managerOpenVAS Manager v2.0.3 allows plugin remote code execution.8.8 High
- sap netweaverSAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the...9.8 Critical
- joomla!, joomla joomla\! +1 moreJoomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.9.1 Critical
- bbpressbbPress Cross-site Scripting (XSS) vulnerability6.1 Medium
- playsmsPlaySMS before 1.4.3 does not sanitize inputs from a malicious string.9.8 Critical
- cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows...4.3 Medium
- cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could...9.8 Critical
- cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers...7.5 High
- phpshopPHPShop through 0.8.1 has XSS.6.1 Medium
- kaspersky lab vanilla forums, vanilla forums, vanillaforums vanilla +2 moreVanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.6.1 Medium
- sos-berlin jobschedulerCross-site Scripting in SOS JobScheduler5.4 Medium
- bataviBatavi before 1.0 has CSRF.8.8 High
- lotus core cms project core cmsLotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory...8.8 High
- auth0 login by auth0The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php.6.1 Medium
- apple bonjourApple Bonjour before 2011 allows a crash via a crafted multicast DNS packet.5.5 Medium
- libvncserver project libvncserver, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the way LibVNCServer before 0.9.9 handled certain...7.5 High
- jobberbaseJobberbase 2.0 has SQL injection via the PATH_INFO to the jobs-in endpoint.9.8 Critical
- coppermine gallery gallery, coppermine-gallery coppermine gallery +1 moreCoppermine gallery before 1.4.26 has an input validation vulnerability that allows for code...9.8 Critical
- yokogawa b/m9000 vp, b/m9000cs, centum cs 1000 +31 more +33 moreStack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09...9.8 Critical
- yokogawa b/m9000 vp, b/m9000cs, centum cs 1000 +31 more +33 moreStack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09...9.8 Critical
- yokogawa b/m9000 vp, b/m9000cs, centum cs 1000 +31 more +33 moreStack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09...9.8 Critical
- pmwikiPmWiki before 2.2.21 has XSS.6.1 Medium
- cisco ios xr software, fxos, ios xr +3 more +5 moreCisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability7.4 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco nx-os, unified computing system (managed), ucs manager +2 moreCisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability8.8 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability8.8 High
- cisco ip phone, ip conference phone 7832 firmware, ip conference phone 7832 with multiplatform firmware +31 more +33 moreCisco IP Phone Remote Code Execution and Denial of Service Vulnerability8.8 High
- cisco video surveillance 8000 series ip cameras, video surveillance 8000p ip camera firmware, video surveillance 8020 ip camera firmware +6 more +8 moreCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability8.8 High
- brother mfc-9970cdw firmwareBrother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking)...6.5 Medium
- cisco clamav, canonical ubuntu linux +1 moreA vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software...7.5 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability5.4 Medium
- ibm workflow, workflow for bluemix +1 moreIBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session,...8.1 High
- Show moreLoading…