CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- netgear cg3100 firmwareA vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed...9.3 Critical
- freereprintables articlefrA Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to...9.8 Critical
- squirrelmail, squirrelmail change passwd +1 moreSquirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.7.5 High
- bssys rbs bs-client. retail clientA Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5...9.1 Critical
- intel converged security management engine firmware, netapp steelstore cloud integrated storage +1 moreImproper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12...6.7 Medium
- intel software guard extensions sdk, opensuse backports, leap +2 moreImproper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user...7.8 High
- intel raid web console 2Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated...7.8 High
- intel manycore platform software stackImproper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an...7.8 High
- intel raid web console 3Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000...7.8 High
- mantisbt source integrationA cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before...6.1 Medium
- intel renesas electronics usb 3.0 driverImproper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all...7.8 High
- telligent communityXSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess...5.4 Medium
- atlassian greenhopper, jira +1 moreStored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8...5.4 Medium
- dojo dojox, debian linux +1 moreXSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode6.1 Medium
- adobe experience managerAdobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption...7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful...7.5 High
- adobe digital editionsAdobe Digital Editions versions 4.5.10 and below have a command injection vulnerability....9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.5 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...7.8 High
- codologic codoforumAn issue was discovered in Codologic Codoforum 4.8.4. While creating a new topic as a normal user...6.1 Medium
- ibm urbancode build, urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain...2.3 Low
- ibm tivoli monitoringIBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to...7.5 High
- askey ap4000w firmwareAn issue was discovered on Askey AP4000W TDC_V1.01.003 devices. An attacker can perform Remote...9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the...6.5 Medium
- salesagility suitecrmSuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the...9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.9.8 Critical
- salesagility suitecrmSuiteCRM through 7.11.11 allows PHAR Deserialization.7.2 High
- salesagility suitecrmSuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017...9.8 Critical
- lexmark 6500e firmware, c734 firmware, c736 firmware +77 more +79 moreLexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS...5.4 Medium
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- adobe framemakerAdobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability....8.8 High
- Show moreLoading…