CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege...7.8 High
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient...8.8 High
- simplejobscriptAn issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL...9.8 Critical
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL...9.8 Critical
- boonex dolphinSQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to...8.8 High
- cisco linksys wrt110 firmwareCross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers...8.8 High
- videolan vlc media playerThe web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows...5.3 Medium
- cisco linksys e4200 firmwareCross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers...6.1 Medium
- cisco linksys e4200 firmwareCisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which...5.3 Medium
- schmid-telecom zi 620 v400 firmwareSchmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell...9.8 Critical
- netgear wgr614v7 firmware, wgr614v9 firmware +1 moreAn Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9,...6.5 Medium
- netgear wgr614v7 firmware, wgr614v9 firmware +1 moreAn Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential...4.6 Medium
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded...9.8 Critical
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain...7.5 High
- dell emc isilon onefs, isilon onefs +1 moreDell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in...7.5 High
- dell elastic cloud storage, emc elastic cloud storage +1 moreDell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated...6.2 Medium
- arctic torrent project torrentA vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling,...7.5 High
- impulseadventure jpegsnoopA vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling,...8.8 High
- hcview project hcviewA vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a...9.8 Critical
- dd-wrtCommand Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted...8.8 High
- percona monitoring and managementpmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated...7.5 High
- mikrotik winboxMikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation...5.9 Medium
- opservices opmonAn issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution .9.8 Critical
- apache ofbizan unauthenticated user could get access to information of some backend screens by invoking...5.3 Medium
- libslirp project libslirp, debian linux, opensuse leap +2 moreIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 Medium
- opservices opmonAn issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is...7.8 High
- sos-berlin jobschedulerA large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and...6.5 Medium
- revmakx infinitewp clientThe InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in...9.8 Critical
- wptimecapsule wp time capsuleThe Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request...9.8 Critical
- opservices opmonAn issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read...7.5 High
- sos-berlin jobschedulerAn XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS...6.5 Medium
- bosch video management system, bvms viewer, divar ip 3000 +3 more +5 morePath Traversal in Bosch Video Management System (BVMS)7.7 High
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker...5.3 Medium
- curling project curlingOS Command Injection in curling9.8 Critical
- nuxeo, nuxeo platform +1 moreRichFaces implementation in Nuxeo Platform 5.6.0 before HF27 and 5.8.0 before HF-01 does not...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +15 more +17 moreOn BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11...5.9 Medium
- f5 edge client for windows, big-ip access policy manager, big-ip access policy manager client +2 moreWhen the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic...7.5 High
- fortinet forticlient, forticlientlinux +1 moreA Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an...6.5 Medium
- keplerproject cgiluaThe session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for...6.1 Medium
- keplerproject cgiluaThe session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote...6.1 Medium
- keplerproject cgiluaThe session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated...6.1 Medium
- fortinet forticlient, forticlientlinux +1 moreA stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user...6.5 Medium
- fortinet forticlient, forticlientlinux +1 moreA privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user...7.8 High
- nghttp2, fedoraproject fedora +1 morenghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).3.3 Low
- dahua sd, dedicated micros ds2, dv-ip express +22 more +24 moreDedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning...9.8 Critical
- tianocore edk2Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically...6.8 Medium
- vtiger crmUnrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in...8.8 High
- atmail, atmail webmail server +1 moreCross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server...6.1 Medium
- google chromeGoogle Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to...6.5 Medium
- Show moreLoading…