CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- sphider, sphider-plus, sphiderpro sphider pro +2 moreA vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin...9.8 Critical
- status2kA vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to...9.8 Critical
- dockerA vulnerability exists in Docker before 1.2 via container names, which may collide with and...5.3 Medium
- kemptechnologies load masterA CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in...8.8 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mount7.0 High
- getrailo railoA File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL...8.8 High
- watchguard fireware xtmA Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name...6.1 Medium
- otrsExternal Interface does not invalidate session5.4 Medium
- google androidA Code Execution vulnerability exists in Android prior to 4.4.0 related to the...8.8 High
- teamviewer desktop, teamviewer +1 moreTeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the...7.0 High
- status statusnetstatusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.5.3 Medium
- nwjs nwA vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which...9.8 Critical
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 High
- ui edgeswitchA privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully...7.8 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 Critical
- fortinet forticlient, forticlientlinux +1 moreA privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user...7.1 High
- projectpierProjectPier 0.8.8 does not use the Secure flag for cookies5.4 Medium
- projectpierProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the...5.4 Medium
- projectpierProjectPier 0.8.8 has stored XSS5.4 Medium
- ispconfigISPConfig 3.0.5.2 has Arbitrary PHP Code Execution8.8 High
- zabbixZabbix 2.0.9 has an Arbitrary Command Execution Vulnerability8.8 High
- vtiger crmvTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability8.8 High
- openpne opopensocialpluginopOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection...9.8 Critical
- opwebapipluginopWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities9.8 Critical
- omniauth-weibo-oauth2 project omniauth-weibo-oauth2omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party9.8 Critical
- cisco ace, ace application control engine module a2 +1 moreCisco ACE A2(3.6) allows log retention DoS.7.5 High
- free5gc smf, simplemachines simple machines forum +1 moreFile Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the...4.9 Medium
- linuxmint, linuxmint mint +1 moreLinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.7.5 High
- linuxmint, linuxmint mint +1 moreLinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.7.5 High
- automattic wp super cache, wp super cache plugin authors super cache plugin +1 moreWordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution8.8 High
- synaptivemedical clearcanvasSynaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the...6.1 Medium
- super cache plugin cache plugin, automattic wp super cache +1 moreWordPress Super Cache Plugin 1.3 has XSS.6.1 Medium
multi_mutcrates.iomulti_mut is UnmaintainedNo score- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirs8.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, mdm9206 firmware +7 more +9 morePossible use after free issue while CRM is accessing the link pointer from device private data...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq6018 firmware +18 more +20 moreOut of bound access due to Invalid inputs to dapm mux settings which results into kernel failure...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +48 more +50 moreUninitialized stack data gets used If memory is not allocated for blob or if the allocated blob...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreBuffer Over read of codec private data while parsing an mkv file due to lack of check of buffer...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +36 more +38 morePossibility of use-after-free and double free because of not marking buffer as NULL after freeing...7.8 High
- qualcomm, inc. snapdragon industrial iot, qualcomm mdm9206 firmware, mdm9607 firmware +2 moreSubsequent additions performed during Module loading while allocating the memory would lead to...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +19 more +21 moreStage-2 fault will occur while writing to an ION system allocation which has been assigned to non...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs605 firmware, sdm439 firmware +1 more +3 moreOut of bound access while allocating memory for an array in camera due to improper validation of...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon mobile, qualcomm qcs605 firmware, sdm439 firmware +4 more +6 moreOut of bound access due to access of uninitialized memory segment in an array of pointers while...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +41 more +43 moreDuring listener modified response processing, a buffer overrun occurs due to lack of buffer size...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreUsing memory after being freed in qsee due to wrong implementation can lead to unexpected...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +27 more +29 moreAPKs without proper permission may bind to CallEnhancementService and can lead to unauthorized...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 moreOut of bound access while parsing dts atom, which is non-standard as it does not have valid...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +46 more +48 moreThere is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer...7.8 High
- Show moreLoading…