CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- drupal authenticated user page cachingThe Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not...6.5 Medium
- organic groups project groupsThe OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x...4.3 Medium
- netsurf-browser libnsbmplibnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out...7.5 High
- libnsgifStack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows...8.8 High
- yeager cmsSQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL...9.8 Critical
- ciprianmp phpmychat-plusphpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User...9.3 Critical
- soplanningSOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin...6.5 Medium
- soplanningSOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via...6.5 Medium
- soplanningSoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the...7.5 High
- soplanningSOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via...7.2 High
- icehrmICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.8.8 High
- icehrmICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.6.5 Medium
- ibm tivoli endpoint managerIBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.5.4 Medium
- freebsdOpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include...9.8 Critical
- belkin linksys e4200 firmwareMultiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1...6.1 Medium
- prestashopPrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module9.8 Critical
- ibm maximo asset management, change and configuration management database, maximo asset management essentials +10 more +12 moreA Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2,...9.8 Critical
- promise-probe project promise-probepromise-probe OS command injection vulnerability9.8 Critical
- dot-object project dot-objectPrototype Pollution in dot-object6.3 Medium
- bodymen project bodymenInjection in bodymen6.3 Medium
- snyk undefsafePrototype Pollution in undefsafe6.3 Medium
- component-flatten project component-flattencomponent-flatten vulnerable to Prototype Pollution6.3 Medium
- freebsdIn FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before...3.3 Low
- freebsdIn FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor...9.8 Critical
- freebsdIn FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before...9.8 Critical
- phoenixcontact fl nat 2208 firmware, fl nat 2304-2gc-2sfp firmware +1 moreImproper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT...8.2 High
- eset cyber security, internet security, mobile security +3 more +5 moreESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression...5.5 Medium
- topmanage olk webstoreAn issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the...6.1 Medium
- topmanage olk webstoreIn TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover...8.8 High
- mozilla personaCross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona...8.8 High
muttMageiaUpdated mutt packages fix security vulnerabilityNo score- libnsgifThe gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to...6.5 Medium
- boschsecurity nbn-498 dinion2x day\/night ip cameras firmwareThe web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264...9.8 Critical
- portable phpmyadmin plugin authors phpmyadmin plugin, getbutterfly portable-phpmyadmin +1 moreWordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities9.1 Critical
- apache jcloudsIt was found that the jclouds scriptbuilder Statements class wrote a temporary file to a...9.8 Critical
- jakweb gecko cmsJAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities9.8 Critical
- mozilla firefoxMozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding4.3 Medium
- merv barrett easy property listingsCross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4...8.8 High
- broadcom unified infrastructure management, ca technologies - a broadcom company unified infrastructure management (nimsoft/uim) +1 moreCA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a buffer overflow...9.8 Critical
- broadcom unified infrastructure management, ca technologies - a broadcom company unified infrastructure management (nimsoft/uim) +1 moreCA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains an improper ACL...9.8 Critical
- broadcom unified infrastructure management, ca technologies - a broadcom company unified infrastructure management (nimsoft/uim) +1 moreCA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a null pointer...7.5 High
- huawei hege-560, hege-560 firmware, osca-550, osca-550a +5 more +7 moreHuawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA...6.8 Medium
- huawei osca-550, osca-550a, osca-550ax, osca-550x, osca-550 firmware, osca-550a firmware +2 more +4 moreHuawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an...6.8 Medium
- huawei p30, p30 firmware +1 moreHUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper...7.8 High
- huawei hege-570, hege-560, osca-550, osca-550a, osca-550ax, osca-550x, hege-560 firmware +5 more +7 moreHuawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA...6.1 Medium
- huawei hege-560, osca-550, osca-550a +7 more +9 moreHuawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71...6.8 Medium
- huawei gaussdb 200GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs...8.8 High
- huawei mate 20, mate 20 firmware +1 moreHUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper...2.4 Low
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...5.3 Medium
- huawei p10 plus, p10 plus firmware +1 moreHuawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9...4.6 Medium
- Show moreLoading…