CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- hitachi automation director, compute systems manager, device manager +5 more +7 moreA vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to...5.0 Medium
- globalpayments php sdkImproper Certificate Validation in Heartland & Global Payments PHP SDK5.9 Medium
- mcafee endpoint security, mcafee, llc mcafee endpoint security (ens) +1 moreESConfig Tool able to edit configuration for newer version5.0 Medium
- extrun ilbo, extrun ltd. ilbo app +1 moreilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2...4.3 Medium
- redhat lvm2vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad...2.3 Low
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...5.5 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and...6.1 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple icloud, icloud for windows, ipados +9 more +11 moreA logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7...7.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA denial of service issue was addressed with improved memory handling. This issue is fixed in iOS...6.5 Medium
- pcre pcre2, fedoraproject fedora, splunk universal forwarder +2 moreAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...5.1 Medium
- ruby-lang ruby, debian linux +1 moreAn exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function...9.8 Critical
- prestashopPrestaShop Stored Cross-Site Scripting Vulnerability5.4 Medium
- prestashopPrestaShop before 1.4.11 allows logout CSRF.5.5 Medium
- easyxdmCross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary...6.1 Medium
- aicorporation risknet acquirerRiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service...7.5 High
- qnap viocard 300 firmwareQNAP VioCard 300 has hardcoded RSA private keys.7.5 High
- trendnet ts-s402 firmwareTRENDnet TS-S402 has a backdoor to enable TELNET.7.5 High
- xerox colorqube 9201 firmware, colorqube 9202 firmware, colorqube 9203 firmware +9 more +11 moreXerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.9.8 Critical
- triplc trilogi serverInternet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create...5.5 Medium
- infradead openconnectOpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on...9.8 Critical
- moxa mgate 5105-mb-eip, mgate 5105-mb-eip firmware, mgate 5105-mb-eip-t firmware +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote atackers to execute arbitrary code on affected installations of...7.8 High
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- belkin n750 firmwareBelkin n750 routers have a buffer overflow.9.8 Critical
- mobileiron sentry, virtual smartphone platform +1 moreMobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.9.8 Critical
- promoticMicrosys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which...6.5 Medium
- intel 82574l controller firmwareA denial of service vulnerability exists in some motherboard implementations of Intel e1000e...7.5 High
- cardozatechnologies wordpress pollMultiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and...9.8 Critical
- voatzThe Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes...5.9 Medium
- voatzIn the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single...5.3 Medium
- cardozatechnologies wordpress pollMultiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress...9.8 Critical
- kaseya virtual system administratorDirectory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0...8.8 High
- simplisafe ss3 firmwareAuthentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a...5.5 Medium
- etherpadDirectory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows...7.5 High
- askpop3d project askpop3dA Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery),7.5 High
- adobe magentoZend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.7.5 High
- Show moreLoading…