CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- tiki, tiki tikiwiki cms\/groupware +1 moreA Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id...6.1 Medium
- python-mode project python-modeA Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.8.8 High
- avira antivir mailgate, antivir mailgate suite, antivir personal +7 more +9 moreA Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58...5.5 Medium
- joomla! tinybrowser plugin, tiny tinybrowser +1 moreTinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.9.8 Critical
- joomla! tiny browser included with tinymce 3.0, tiny tinybrowser +1 moreTiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP...9.8 Critical
- cloud foundry credhub, pivotal software cloud foundry cf-deployment +1 moreCredHub does not properly enable TLS for MySQL database connections7.6 High
- amd user experience programThe AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on...7.8 High
- sap netweaver, s\/4hana, sap se netweaver (sap basis) +1 more +3 moreUnder certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP...5.4 Medium
- sap abap platform, netweaver, sap se abap platform (sap basis) +1 more +3 moreUnder some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702...5.8 Medium
- sap host agentSAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username...7.5 High
- sap host agentSAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to...5.3 Medium
- sap netweaver, s\/4hana, sap se automated note search tool (sap basis) +2 moreUnder certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP...6.1 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...7.2 High
- sap erp, s\/4 hana, sap se erp (sap appl) +2 more +4 moreVAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN...6.3 Medium
- sap se netweaver as java (heap dump application), sap netweaver application server java +1 moreCertain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7...5.8 Medium
- sap se business objects business intelligence platform (cmc), sap businessobjects business intelligence platform +1 moreCertain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4...5.3 Medium
- sap se netweaver (guided procedures), sap netweaver guided procedures +1 moreSAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...4.9 Medium
- sap mobile platformSAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an...4.3 Medium
- sap landscape managementSAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute...7.2 High
- sap se netweaver (knowledge management ice service), sap netweaver knowledge management +1 moreSAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an...6.1 Medium
- google androidAndroid SQLite Journal before 4.0.1 has an information disclosure vulnerability.7.5 High
- apple mac os x, macos, freebsd +2 more +4 moreregcomp in the BSD implementation of libc is vulnerable to denial of service due to stack...7.5 High
- mambo cms, mambo-foundation mambo cms +1 moreMambo CMS through 4.6.5 has multiple XSS.6.1 Medium
- google androidThe Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain...2.4 Low
- gocloud isp3000 firmware, s2a firmware, s2a wl firmware +2 more +4 moreGocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7...8.8 High
- shamanShaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering...7.8 High
- st bluenrg-2, wb55 +1 moreThe Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for...6.5 Medium
- invisioncommunity invision power boardInvision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.9.8 Critical
- nxp mcuxpresso software development kitThe Bluetooth Low Energy implementation on NXP SDK through 2.2.1 for KW41Z devices does not...8.8 High
- cypress cybl11573, cyble-416045 +1 moreThe Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier...6.5 Medium
- xilisoft video converterXilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability7.8 High
- artica pandora fmsfunctions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS...7.2 High
- att mobileiron sentry, mobileiron virtual smartphone platform +1 moreMobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm7.5 High
- netis-systems wf2471 firmwareNetis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands...8.8 High
- realtek ndisRealtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an...5.5 Medium
- gpgme project gpgme, fedoraproject fedora, redhat enterprise linux for ibm z systems +6 more +8 moreGPGME Go wrapper contains Use After Free7.5 High
- nvidia graphics drivers, display driver +1 moreA Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown...7.8 High
- dovecot, fedoraproject fedora +1 moreThe IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when...3.1 Low
- cisco iosA memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP...7.5 High
- dovecot, fedoraproject fedora +1 morelib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8...7.5 High
- ibm content navigatorIBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow...5.3 Medium
- ibm rational publishing engine, engineering lifecycle optimization - publishing +1 moreIBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm cloud cliIBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An...5.9 Medium
- otrs faq, itsm, opensuse +2 moreA Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7...6.1 Medium
- mapway tube mapTube Map Live Underground for Android before 3.0.22 has an Information Disclosure Vulnerability5.9 Medium
- izoncam izon ip firmwareIZON IP 2.0.2: hard-coded password vulnerability9.8 Critical
- spritesoftware spritebud, spritebackup +1 moreA Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and...7.0 High
- commerce skrill skrill, skill commerce skrill +1 moreCommerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior...7.5 High
- free5gc smf, simplemachines simple machines forum +1 moreSimple Machines Forum (SMF) through 2.0.5 has XSS6.1 Medium
- umplayerA Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path...7.8 High
- Show moreLoading…