Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
February

CVEs published in February 2020

1,402 vulnerabilities, 227 critical, 16 exploited.

Known exploitedIn KEVPublic exploitFix available

wp-cleanfix authors wp-cleanfix, undolog wp cleanfix +1 moreWordPress plugin wp-cleanfix has Remote Code ExecutionCVE-2013-21098.8 HighFebruary 10, 2020
undolog cleanfix, wp cleanfix plugin authors cleanfix plugin +1 moreWordPress WP Cleanfix Plugin 2.4.4 has CSRFCVE-2013-2108Public exploit5.4 MediumFebruary 10, 2020
maxum rumpusA CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1....CVE-2019-196656.5 MediumFebruary 10, 2020
maxum rumpusA CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1...CVE-2019-196636.5 MediumFebruary 10, 2020
maxum rumpusA CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP...CVE-2019-196598.8 HighFebruary 10, 2020
blackberry playbook firmwareBlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser...CVE-2012-58286.5 MediumFebruary 10, 2020
maxum rumpusA CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP...CVE-2019-196606.5 MediumFebruary 10, 2020
ibm infosphere guardium, ibm corporation guardium +1 moreInfoSphere Guardium aix_ktap module: DoSCVE-2012-22045.5 MediumFebruary 10, 2020
hp systems insight manager, hpe hp systems insight manager +1 moreHP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access informationCVE-2012-19945.7 MediumFebruary 10, 2020
piwigoPiwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page.CVE-2020-80895.4 MediumFebruary 10, 2020
cpanel, cpanel whm +1 moreThe clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS...CVE-2012-64495.4 MediumFebruary 10, 2020
sphiderA Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization...CVE-2014-5083Public exploit8.8 HighFebruary 10, 2020
polycom hdx system softwarePolycom HDX Video End Points before 3.0 allows attackers to read arbitrary files via a .. (dot...CVE-2012-66119.8 CriticalFebruary 10, 2020
samsung prismview player 11, prismview system 9 +1 moreThe HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote...CVE-2019-204519.8 CriticalFebruary 10, 2020
sphiderpro sphider proA Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of...CVE-2014-5084Public exploit8.8 HighFebruary 10, 2020
sphider-plusA Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of...CVE-2014-5085Public exploit8.8 HighFebruary 10, 2020
keycloak, redhat single sign-on +1 moreXSS in KeycloakCVE-2020-1697Fix available6.1 MediumFebruary 10, 2020
sphider, sphiderpro sphider pro, sphider-plus +2 moreA Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient...CVE-2014-5086Public exploit8.8 HighFebruary 10, 2020
orangehrmOrange HRM 2.7.1 allows XSS via the vacancy name.CVE-2013-13535.4 MediumFebruary 10, 2020
vbseovBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.CVE-2012-66666.1 MediumFebruary 10, 2020
mfscripts yetishareMFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If...CVE-2019-200607.5 HighFebruary 10, 2020
mfscripts yetishareThe user-introduction email in MFScripts YetiShare v3.5.2 through v4.5.4 may leak the (system...CVE-2019-200617.5 HighFebruary 10, 2020
mfscripts yetishareMFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a...CVE-2019-200629.8 CriticalFebruary 10, 2020
mfscripts yetisharepayment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4...CVE-2019-20059Public exploit8.8 HighFebruary 10, 2020
slice-deque crates.ioslice-deque is unmaintainedRUSTSEC-2020-0158No scoreFebruary 10, 2020
lzw crates.iolzw is unmaintainedRUSTSEC-2020-0144Fix availableNo scoreFebruary 10, 2020
vanillaforums vanillaindex.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.CVE-2020-8825Public exploit5.4 MediumFebruary 10, 2020
sockjs project sockjsCross-site scripting in SocksJS-nodeCVE-2020-8823Fix available6.1 MediumFebruary 10, 2020
digi transport wr21 firmware, transport wr44 firmware +1 moreDigi TransPort WR21 5.2.2.3, WR44 5.1.6.4, and WR44v2 5.1.6.9 devices allow stored XSS in the web...CVE-2020-88224.8 MediumFebruary 10, 2020
linuxcontainers lxcIn LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature...CVE-2017-18641Fix available8.1 HighFebruary 10, 2020
qt, redhat enterprise linux +1 moreUncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an...CVE-2020-0570Fix available7.3 HighFebruary 9, 2020
google chromeInappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6417Fix available7.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6416Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6415Fix available8.8 HighFebruary 8, 2020
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6414Fix available8.8 HighFebruary 8, 2020
google chrome, opensuse backports sle +1 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6413Fix available8.8 HighFebruary 8, 2020
google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6412Fix available5.4 MediumFebruary 8, 2020
google chromeInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6411Fix available5.4 MediumFebruary 8, 2020
google chromeInsufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6410Fix available8.8 HighFebruary 8, 2020
google chromeInappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6409Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6408Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6406Fix available8.8 HighFebruary 8, 2020
google chromeOut of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6405Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local...CVE-2020-6404Fix available8.8 HighFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreIncorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a...CVE-2020-6403Fix available4.3 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87...CVE-2020-6402Fix available8.8 HighFebruary 8, 2020
google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87...CVE-2020-6401Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6400Fix available6.5 MediumFebruary 8, 2020
google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6399Fix available6.5 MediumFebruary 8, 2020
google chrome, debian linux, fedoraproject fedora +5 more +7 moreUse of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6398Fix available8.8 HighFebruary 8, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open