CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- huawei ever-l29b, honor magic2, mate 20 rs +5 more +7 moreHuawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0...4.6 Medium
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...5.3 Medium
- huawei gaussdb 200GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient...8.8 High
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...7.5 High
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...7.5 High
- jasper project jasperInteger overflow in the jas_matrix_create function in JasPer allows context-dependent attackers...8.8 High
- xorux lpar2rrdLPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to...9.8 Critical
- twikiEval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote...9.1 Critical
- huawei gaussdb 200GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input...6.5 Medium
- huawei cloudlink board, dp300, rse6500 +5 more +7 moreHuawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00,...7.5 High
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace...7.5 High
- huawei ngfw module, nip6300, nip6600, secospace usg6500, secospace usg6600, usg9500, ngfw module firmware, nip6300 firmware +4 more +6 moreHuawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions...7.5 High
- labvantageLabVantage LIMS 8.3 does not properly maintain the confidentiality of database names. For example...5.3 Medium
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500...7.5 High
- phoenixcontact ilc 2050 bi-l firmware, ilc 2050 bi firmware +1 moreAn issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L...9.4 Critical
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace...5.5 Medium
- silverstripeReflected XSS in SilverStripe6.1 Medium
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600...7.5 High
- red hat spacewalkA flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity...8.6 High
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace...7.5 High
- codecovcodecov NPM module allows remote attackers to execute arbitrary commands8.8 High
- abb asset suiteAsset Suite Direct Object Reference Access7.1 High
- zohocorp manageengine remote access plusAn issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the...4.3 Medium
- webkitgtkWebkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote...5.3 Medium
- ipsilon-project ipsilonThe Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain...6.1 Medium
- kaseya virtual system administratorKaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9...9.8 Critical
- o-dyn collabtive, canonical ubuntu linux, debian linux +2 moreMultiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser...8.8 High
- wpcentralThe wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.8.8 High
- solarwinds network performance monitor orion platform 2018 netpath, network performance monitor orion platform 2018 npm +1 moreSolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS...5.4 Medium
- red hat openshift-service-mesh/kiali-rhel7-operator, redhat openshift service mesh +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in all versions of...7.0 High
- opensipsA Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.7.5 High
- zabbixA File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request...9.8 Critical
- joplin project joplinCross-site Scripting in Joplin5.4 Medium
- moodleCross-Site Request Forgery in Moodle8.1 High
- miniorange saml sp single sign onUtilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows...6.1 Medium
- unitrends backupKaseya Traverse before 9.5.20 allows OS command injection attacks against user accounts,...9.8 Critical
- horde groupware, debian linux, fedoraproject fedora +2 moreHorde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data,...9.8 Critical
- gitlabIn GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant...7.5 High
- sygnoos popup builderThe Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in...9.8 Critical
- gitlabUnauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise...4.3 Medium
- valvesoftware dota 2meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code...7.8 High
- mozilla firefox, firefox esr +1 moreCommand line arguments could have been injected during Firefox invocation as a shell handler for...8.8 High
- mozilla firefox, thunderbird, firefox esr +2 moreBy downloading a file with the .fileloc extension, a semi-privileged extension could launch an...4.3 Medium
- mitsubishi electric corporation electric melsec c controller module and melipc series mi5000, mitsubishielectric mi5122-vw firmware, q24dhccpu-v firmware +3 more +5 moreMitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C...9.8 Critical
- mcafee data exchange layer, mcafee, llc data exchange layer (dxl) broker +1 moreUnquoted service executable path4.2 Medium
- iteris vantage velocity firmwareIteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS...9.8 Critical
- postoaktraffic awam bluetooth field device firmwarePost Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01...9.8 Critical
- cambiumnetworks xh2-120 firmware, xr2436 firmware, xr520 firmware +1 more +3 moreAn issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage...6.1 Medium
- iteris vantage velocity firmwareIteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented...9.8 Critical
- iteris vantage velocity firmwareIteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for...9.8 Critical
- Show moreLoading…