CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- iteris vantage velocity firmwareIteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all...6.1 Medium
- eltex-co ntp-2 firmware, ntp-rg-1402g firmware +1 moreELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the...9.8 Critical
- eltex-co ntp-2 firmware, ntp-rg-1402g firmware +1 moreELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the...9.8 Critical
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.1 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.5 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.5 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.5 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.5 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...6.5 Medium
- microchip syncserver s100 firmware, syncserver s200 firmware, syncserver s250 firmware +2 more +4 moreSymmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices...7.5 High
- taffydb taffyTaffyDB can allow access to any data items in the DB7.5 High
- ipsilon-project ipsilon** DISPUTED ** The default configuration of the Jinja templating engine used in the Identity...6.1 Medium
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability5.4 Medium
- arvato skillpipeArvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div...4.3 Medium
- gluu serverA cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity...6.1 Medium
- codologic codoforumCodoforum 4.8.8 allows self-XSS via the title of a new topic.5.4 Medium
- goverlan client agent, reach console, reach server +2 moreGoverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent...7.8 High
- abbott freestyle libre firmwareAbbott FreeStyle Libre 14-day before February 2020 and FreeStyle Libre 2 before February 2020...8.8 High
- aishu anyshare cloudAnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by...4.3 Medium
- codologic codoforumCodologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal...5.4 Medium
- mozilla thunderbirdWhen processing a message that contains multiple S/MIME signatures, a bug in the MIME processing...6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreIf a user saved passwords before Thunderbird 60 and then later set a master password, an...6.5 Medium
- mozilla thunderbirdWhen processing an email message with an ill-formed envelope, Thunderbird could read data from a...6.5 Medium
- mozilla thunderbird, canonical ubuntu linux +1 moreWhen deriving an identifier for an email message, uninitialized memory was used in addition to...4.3 Medium
- jsreportServer-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport9.8 Critical
- gitlabGitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of...4.3 Medium
- script-manager project script-managerCode Injection in script-manager9.8 Critical
- gitlabGitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private...4.3 Medium
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser...9.8 Critical
- hcltech appscan, ibm corporation hcl appscan standard edition +1 moreHCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be...9.8 Critical
- combodo itopiTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage...7.5 High
- combodo itopIn iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the...6.1 Medium
- combodo itopBecause of a lack of sanitization around error messages, multiple Reflective XSS issues exist in...6.1 Medium
- openx ad server, openx +1 moreA Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3...9.8 Critical
- ninjaforms ninja formsThe Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via...5.4 Medium
- istioAn issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible...7.4 High
- progess moveit transferIn Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API...9.0 Critical
- progess moveit transferIn Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL...8.8 High
- combodo itopIn Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of...8.1 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreAn authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V...4.8 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity...5.7 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA)...7.5 High
- lenovo bios, 510-15ikl firmware, 510s-08ikl firmware +180 more +182 moreLenovo was notified of a potential denial of service vulnerability, affecting various versions of...5.0 Medium
- lenovo ez media & backup center ix2, ez media & backup center ix2-dl, ez media \& backup center ix2-dl firmware +1 more +3 moreA vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1...6.1 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document...5.4 Medium
- hashicorp sentinelHashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed...7.5 High
- s3india husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70...7.5 High
- s3india husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70...9.8 Critical
- hitachi automation director, compute systems manager, device manager +2 moreA vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior...4.3 Medium
- Show moreLoading…