CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS)...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +15 more +17 moreA remote code execution vulnerability exists in Remote Desktop Services – formerly known as...8.0 High
- microsoft sql server, sql server 2014 service pack 3 for 32-bit systems (cu), sql server 2014 service pack 3 for 32-bit systems (gdr) +3 more +5 moreA remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it...8.8 High
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi7.5 High
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the...9.8 Critical
- drupal restful web services, restful web services web services +1 moreThe RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for...8.8 High
- ariadneMultiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to...6.1 Medium
- phxeventmanagerSQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers...9.8 Critical
- socialengineMultiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote...6.1 Medium
- socialengineMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3)...6.3 Medium
- containers podman, libpod project libpod, redhat enterprise linux +1 more +3 morePodman has Files or Directories Accessible to External Parties5.9 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 High
- pragmamxMultiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote...6.1 Medium
- kde paste appletThe KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C...5.5 Medium
- prestashopCross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to...6.1 Medium
- kde paste appletThe %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in...8.4 High
- mybbCross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users...5.4 Medium
- ammyy adminAmmyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it...7.8 High
- mybbMultiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8...5.4 Medium
- atutorconfirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain...9.8 Critical
- imagely nextgen galleryNextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload9.8 Critical
- yabbYaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability9.8 Critical
- semperplugins all in one seo packA Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3...6.1 Medium
- daum potplayerPotplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability7.8 High
- thebuggenie the bug genieThe Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities6.1 Medium
- pdfkit project pdfkitPDFKit Improper Input Validation vulnerability9.8 Critical
- zenphotoZenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.6.1 Medium
- kineticaThe Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input...8.8 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out...3.3 Low
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out...3.3 Low
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out...3.3 Low
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out...3.3 Low
- symantec endpoint protection managerSymantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out...3.3 Low
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...5.5 Medium
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...5.5 Medium
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...5.5 Medium
- ibm sterling external authentication serverA Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...7.8 High
- polarbear cms project cmsA PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a...9.8 Critical
- libuv, nodejs node.js +1 moreThe uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does...8.1 High
- sonicwall analyzer, global management system, universal management appliance +1 more +3 moreAn Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management...9.8 Critical
- juniper junosMultiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site...7.1 High
- Show moreLoading…