CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- sonicwall analyzer, global management system, universal management appliance +1 more +3 moreAn Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4...9.8 Critical
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +218 more +220 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...7.5 High
- siemens ozw672, ozw772, ozw672 firmware +1 more +3 moreA vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10...7.5 High
- siemens simatic et 200pro im154-8 pn/dp cpu, simatic et 200pro im154-8f pn/dp cpu, simatic et 200pro im154-8fx pn/dp cpu +48 more +50 moreA vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All...5.3 Medium
- siemens scalance s602, scalance s612, scalance s623 +5 more +7 moreA vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All...7.5 High
- siemens scalance s602, scalance s612, scalance s623 +5 more +7 moreA vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All...7.5 High
- owncloud, owncloud server +1 moreZend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote...9.8 Critical
- moodleMoodle Persistent Cross-site Scripting (XSS)5.4 Medium
- claris filemaker pro, filemaker pro advanced +1 moreAn Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll...7.8 High
rulinalgcrates.iorulinalg is unmaintained, use nalgebra insteadNo score- rulinalg project rulinalgData races in rulinalg9.8 Critical
- htmlunit, apache camel, canonical ubuntu linux +1 more +3 moreCode execution vulnerability in HtmlUnit8.1 High
- secom dr.id access control, dr.id attendance system, taiwan secom co., ltd. door access control system +1 more +3 moreTAIWAN SECOM CO., LTD. – Sensitivity Information Exposure7.5 High
- secom dr.id access control, dr.id attendance system, taiwan secom co., ltd. door access control system +1 more +3 moreTAIWAN SECOM CO., LTD. - Pre-auth SQL Injection9.8 Critical
- secom dr.id access control, dr.id attendance system, taiwan secom co., ltd. door access control system +1 more +3 moreTAIWAN SECOM CO., LTD. - User Account Enumeration5.3 Medium
- pydioAjaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell...9.8 Critical
- dlink dsr-1000 firmware, dsr-1000n firmware, dsr-150 firmware +5 more +7 moreMultiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N...9.8 Critical
- misp-project mispAn issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in...6.5 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly...7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 72 and...8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreIf a template tag was used in a select tag, the parser could be confused and allow JavaScript...6.1 Medium
- mozilla firefox, firefox esr +1 moreA content process could have modified shared memory relating to crash reporting information,...8.8 High
- siemens scalance s602, scalance s612, scalance s623 +13 more +15 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...5.4 Medium
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...7.5 High
- netapp snap creator frameworkNetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct...4.6 Medium
- microvirt memuAn issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating...9.8 Critical
- xnau participants databaseparticipants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for...7.5 High
- syska smartlight rainbow led smart bulb firmwareSyska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low...6.5 Medium
- microchip atmsamb11 blusdk smartThe Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for...6.5 Medium
- ti ble-stack, cc2640r2 software development kit +1 moreThe Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK...6.5 Medium
- ti cc2640r2 software development kitThe Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2...6.5 Medium
- testlinkAn issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements...8.8 High
- dialog-semiconductor software development kitThe Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for...6.5 Medium
- dialog-semiconductor software development kitThe Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2...5.7 Medium
- cypress psoc 4 bleThe Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does...6.5 Medium
- nxp mcuxpresso software development kitThe Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK...6.5 Medium
- fasterxml jackson-databind, debian linux, huawei oceanstor 9000 firmware +5 more +7 moreDeserialization of Untrusted Data in jackson-databind9.8 Critical
- samsung knoxThis vulnerability allows local attackers to disclose sensitive information on affected...4.3 Medium
- netgear ac1200, ac1200 r6220 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...9.4 Critical
- lenovo browserThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...7.5 High
- lenovo browserThis vulnerability allows network adjacent attackers to execute arbitrary code on affected...5.5 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1...4.3 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus...6.5 Medium
- maxum rumpus ftpA HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File...6.1 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2...5.4 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9...4.3 Medium
- maxum rumpus ftpA Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related...6.1 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of...6.5 Medium
- maxum rumpus ftpA CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1....7.1 High
- Show moreLoading…