CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- netsweeperMultiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0...6.1 Medium
- cisco data center network managerCisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco data center network managerCisco Data Center Network Manager Privilege Escalation Vulnerability8.8 High
- cisco data center network managerCisco Data Center Network Manager Cross-Site Request Forgery Vulnerability8.8 High
- cisco email security appliance (esa), email security appliance, cloud email security +2 moreCisco Email Security Appliance Shortened URL Denial of Service Vulnerability6.8 Medium
- cisco enterprise nfv infrastructure software, na +1 moreCisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability6.7 Medium
- cisco anyconnect secure, anyconnect secure mobility client +1 moreCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability6.5 Medium
- cisco cloud web securityCisco Cloud Web Security SQL Injection Vulnerability4.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability6.1 Medium
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Static Default Credential Vulnerability9.8 Critical
- cisco finesseCisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability6.1 Medium
- cisco meeting serverCisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability5.3 Medium
- cisco unified contact center enterpriseCisco Unified Contact Center Enterprise Denial of Service Vulnerability6.8 Medium
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses...7.0 High
- coturn, canonical ubuntu linux, debian linux +1 more +3 moreAn exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses...5.9 Medium
- tibco ebxTIBCO EBX Exposes Cross-Site Scripting Vulnerability8.0 High
- snyk wso2 transport-http, wso2 transport-http +1 moreHTTP Response Splitting in WSO2 transport-http6.5 Medium
php7.0Ubuntuphp7.0 regressionNo score- linux kernel, linux kernel overlayfs, canonical ubuntu linux +2 moreOverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is...7.8 High
drupal/profilePackagistThe Profile module enables you to allow users to have configurable user profiles. The module doesn't sufficiently check access when creating a user profile. Users with the "create profiles" permission…No score- silverstripeSilverStripe Denial of Service on flush and development URL tools4.3 Medium
- silverstripeSilverstripe CSRF Protection Bypass via GraphQL8.8 High
- jyaml project jyamlDeserialization of Untrusted Data in JYaml9.8 Critical
- westerndigital westerndigitalssddashboardsetup.exe, sandiskssddashboardsetup.exe +1 moreWestern Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.7.8 High
- hitrontech coda-4582u firmwareHitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access...5.4 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to...6.7 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...8.4 High
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could...6.5 Medium
- ibm db2, db2 for linux- unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an...6.5 Medium
- ibm db2, db2 for linux- unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...7.5 High
- ibm security secret serverIBM Security Secret Server 10.7 processes patches, image backups and other updates without...4.4 Medium
- ibm jazz foundation, rational rhapsody design manager +1 moreIBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an...4.3 Medium
- ibm maximo asset management, control desk, maximo anywhere +8 more +10 moreIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This...5.4 Medium
- wolfcms wolf cmsA cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers...4.8 Medium
- dlink dsr-250n firmwareD-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent...7.2 High
- trustwave mailmarshalThe STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection.9.8 Critical
- talend restletThe XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute...9.8 Critical
- phpUse-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6...9.8 Critical
- facebook hhvmHHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does...5.3 Medium
- facebook hhvmmcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading...9.8 Critical
- facebook hhvmInsufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode...9.8 Critical
enigmailSUSESecurity update for enigmailNo score- pyyaml, fedoraproject fedora +1 moreDeserialization of Untrusted Data in PyYAML9.8 Critical
- ruamel.yaml project ruamel.yamlIn ruamel.yaml through 0.16.7, the load method allows remote code execution if the application...9.8 Critical
- cisco asa, asa 5500 firmware, asa 5510 firmware +10 more +12 moreCisco ASA Secondary Authentication Bypass Vulnerability4.3 Medium
- cisco unified communications managerCisco Unified Communications Manager Cross-Site Scripting Vulnerability4.3 Medium
- openstack novaOpenStack Nova can leak consoleauth token into log files3.3 Low
- phoenixcontact axl f bk eth firmware, axl f bk eth xc firmware, axl f bk pn firmware +2 moreAn issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F...7.5 High
- synacor zimbra collaboration suiteAn issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors...5.3 Medium
- synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed...9.8 Critical
- Show moreLoading…