Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
February

CVEs published in February 2020

1,402 vulnerabilities, 227 critical, 16 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 MediumFebruary 8, 2020
google chromeOut of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker...CVE-2020-6395Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 HighFebruary 8, 2020
google chromeOut of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6389Fix available8.8 HighFebruary 8, 2020
google chromeOut of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker...CVE-2020-6388Fix available8.8 HighFebruary 8, 2020
google chromeOut of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6387Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 HighFebruary 8, 2020
basic webmail project webmailThe Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with...CVE-2012-55704.3 MediumFebruary 8, 2020
kde, kde konqueror, redhat enterprise linux +3 more +5 moreThe CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...CVE-2012-4512Public exploitEPSS 11.7%8.8 HighFebruary 8, 2020
golang go, redhat enterprise linux, openstack +2 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...CVE-2015-57419.8 CriticalFebruary 8, 2020
mediawikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1)...CVE-2012-4381Fix available8.1 HighFebruary 8, 2020
chamiloCross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6...CVE-2012-40296.1 MediumFebruary 8, 2020
netcracker resource management systemMultiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System...CVE-2015-22075.4 MediumFebruary 8, 2020
netcracker resource management systemMultiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow...CVE-2015-34238.8 HighFebruary 8, 2020
creative-solutions creative contact form, jquery file upload project file upload +1 morejQuery File Upload Plugin Unrestricted file upload vulnerabilityCVE-2014-8739Public exploitEPSS 91.9%9.8 CriticalFebruary 8, 2020
huge-it sliderMultiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0...CVE-2015-20627.2 HighFebruary 8, 2020
zohocorp manageengine applications manager, manageengine it360, manageengine opmanager +2 moreThe FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager...CVE-2014-7863Public exploitEPSS 83.4%7.5 HighFebruary 8, 2020
10web photo galleryMultiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for...CVE-2015-13945.4 MediumFebruary 8, 2020
open-schoolOpen-School Community Edition 2.2 does not properly restrict access to the export functionality,...CVE-2014-91276.5 MediumFebruary 8, 2020
open-schoolMultiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow...CVE-2014-91266.1 MediumFebruary 8, 2020
fork-cms fork cmsCross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search...CVE-2014-94706.1 MediumFebruary 8, 2020
ui unifi controller, airvision controller, mfi controller +2 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller...CVE-2014-2225Public exploit8.8 HighFebruary 8, 2020
flowplayer flashCross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the...CVE-2011-3642Public exploit9.6 CriticalFebruary 8, 2020
foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2019-171367.8 HighFebruary 7, 2020
foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2019-171357.8 HighFebruary 7, 2020
foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2019-133347.8 HighFebruary 7, 2020
foxit phantompdfThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2019-133337.8 HighFebruary 7, 2020
bluditajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users...CVE-2020-88114.3 MediumFebruary 7, 2020
bludit** DISPUTED ** Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the...CVE-2020-8812Disputed5.4 MediumFebruary 7, 2020
netis wf2419 devices, netis-systems wf2419 firmware +1 moreNetis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the...CVE-2019-19356In KEVPublic exploitEPSS 28.1%7.5 HighFebruary 7, 2020
fujitsu interstage application development cycle manager, interstage application server, interstage business application manager +37 more +39 moreThe Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application...CVE-2019-131635.9 MediumFebruary 7, 2020
corsair icueThe CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow...CVE-2020-88087.8 HighFebruary 7, 2020
openfilerCross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote...CVE-2011-10866.1 MediumFebruary 7, 2020
smoothwall expressCSRF vulnerability in Smoothwall Express 3.CVE-2011-10858.8 HighFebruary 7, 2020
smoothwall expressA cross-site scripting (XSS) vulnerability in Smoothwall Express 3.CVE-2011-10846.1 MediumFebruary 7, 2020
red hat openshift/mysql-apb, redhat openshift container platform +1 moreIt has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from...CVE-2020-17087.0 HighFebruary 7, 2020
bosch bvms mobile video service, divar ip 3000, divar ip 7000 +3 more +5 moreDeserialization of Untrusted Data in Bosch BVMS Mobile Video ServiceCVE-2020-677010.0 CriticalFebruary 7, 2020
bosch video management system, bvms viewer, divar ip 3000 +3 more +5 morePath Traversal in Bosch Video Management System (BVMS)CVE-2020-67688.6 HighFebruary 7, 2020
biscom secure file transferBiscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code...CVE-2020-87969.8 CriticalFebruary 7, 2020
bosch divar ip 2000, divar ip 3000, divar ip 5000 +5 more +7 moreMissing Authentication for Critical Function in Bosch Video Streaming GatewayCVE-2020-676910.0 CriticalFebruary 7, 2020
dlink dir865l firmwareD-Link DIR865L v1.03 suffers from an "Unauthenticated Hardware Linking" vulnerability.CVE-2013-30965.9 MediumFebruary 7, 2020
linksys wrt310n firmwareLinksys WRT310Nv2 2.0.0.1 is vulnerable to XSS.CVE-2013-30675.4 MediumFebruary 7, 2020
belkin n300 firmwareAn Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers...CVE-2013-30919.8 CriticalFebruary 7, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open