CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- varnish cache project cacheVarnish HTTP cache before 3.0.4: ACL bug7.5 High
- zpanelZPanel through 10.1.0 has Remote Command Execution7.8 High
- zimbraZimbra 2013 has XSS in aspell.php6.1 Medium
- perforce p4webPerforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities6.1 Medium
- samsung galaxy s6 edge firmwareMultiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio...5.5 Medium
- boldgrid w3 total cache, w3 total cache plugin authors total cache plugin, automattic wp super cache +2 moreWordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability9.8 Critical
- chiyu-t bf-430 firmwareStored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as...6.1 Medium
- iktm bearftpImproper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1...7.5 High
- jenkins applatix, jenkins project applatix plugin +1 morePassword stored in plain text by Applatix Plugin6.5 Medium
- jenkins parasoft environment manager, jenkins project parasoft environment manager plugin +1 morePassword stored in plain text by Parasoft Environment Manager Plugin6.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM Plugin6.5 Medium
- jenkins harvest scm, jenkins project harvest scm plugin +1 morePasswords stored in plain text by Harvest SCM Plugin6.5 Medium
- jenkins eagle tester, jenkins project eagle tester plugin +1 morePlaintext Storage of a Password in Jenkins Eagle Tester Plugin6.5 Medium
- jenkins ecx copy data management, jenkins project ecx copy data management plugin +1 morePassword stored in plain text by ECX Copy Data Management Plugin4.3 Medium
- jenkins bmc release package and deployment, jenkins project bmc release package and deployment plugin +1 moreCredential stored in plain text by BMC Release Package and Deployment Plugin4.3 Medium
- jenkins digitalocean, jenkins project digitalocean plugin +1 moreToken stored in plain text by DigitalOcean Plugin4.3 Medium
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreCredentials stored in plain text by debian-package-builder Plugin4.3 Medium
- jenkins dynamic extended choice parameter, jenkins project dynamic extended choice parameter plugin +1 morePassword stored in plain text by Dynamic Extended Choice Parameter Plugin4.3 Medium
- jenkins radargun, jenkins project radargun plugin +1 moreRCE vulnerability in RadarGun Plugin8.8 High
- jenkins brakeman, jenkins project brakeman plugin +1 moreStored XSS vulnerability in Jenkins brakeman Plugin5.4 Medium
- jenkins google kubernetes engine, jenkins project google kubernetes engine plugin +1 moreRCE vulnerability in Google Kubernetes Engine Plugin8.8 High
- jenkins fitnesse, jenkins project fitnesse plugin +1 moreXXE vulnerability in FitNesse Plugin8.8 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreClient secret transmitted in plain text by Azure AD Plugin5.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreUsers with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin4.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreMissing permission checks in Pipeline GitHub Notify Step Plugin allows capturing credentials4.3 Medium
- jenkins pipeline github notify step, jenkins project pipeline github notify step plugin +1 moreCSRF vulnerability in Pipeline GitHub Notify Step Plugin allows capturing credentials8.8 High
- jenkins nunit, jenkins project nunit plugin +1 moreXXE vulnerability in NUnit Plugin8.8 High
- jenkins s3 publisher, jenkins project s3 publisher plugin +1 moreJenkins S3 Publisher Plugin transmits credentials in plain text during configuration7.5 High
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to stored cross-site scripting (XSS)5.4 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreJenkins Git Parameter Plugin vulnerable to Stored cross-site scripting (XSS)5.4 Medium
- jenkins subversion, jenkins project subversion plugin +1 moreSubversion Plugin stored XSS vulnerability5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreImproper Input Validation in Jenkins Script Security Plugin8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreImproper Input Validation in Jenkins Pipeline: Groovy Plugin8.8 High
- enorth webpublisher cmsSQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher...9.8 Critical
- libnotify project libnotifyPotential Command Injection in libnotify9.8 Critical
- telink-semi tlsr8232 ble sdk, tlsr8251 ble sdk, tlsr8253 ble sdk +2 more +4 moreThe Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE...8.8 High
- telink-semi tlsr8232 ble sdk, tlsr8251 ble sdk, tlsr8253 ble sdk +2 more +4 moreThe Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE...6.5 Medium
- istio, redhat openshift service mesh +1 moreIstio 1.3 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path...7.3 High
- atlassian application links, jira, jira server +1 more +3 moreThe Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The...4.7 Medium
- atlassian jira server, jira data center +1 moreThe VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before...4.3 Medium
- atlassian jira server, jira data center +1 moreThe VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before...4.3 Medium
- hubot scripts project scriptsPotential Command Injection in hubot-scripts9.8 Critical
- google gizmo5The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to...7.5 High
- linksys spa2102 firmwareThe SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a...8.8 High
- phoner phonerliteThe PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid...7.5 High
- linux kernelThe int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows...5.5 Medium
- netsurf-browser libnsbmpHeap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows...8.8 High
- zenoss core, debian linux +1 moreMultiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core...7.5 High
- barracuda web application firewallBarracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass...9.8 Critical
- boatmob boat browserThe WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser...8.8 High
- Show moreLoading…