CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband...7.5 High
- avira anti-malware sdk, antivirus for endpoint, antivirus for small business +5 more +7 moreAvira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This...5.5 Medium
- arista dcs-7050cx3-32s-r firmware, dcs-7050qx-32s-r firmware, dcs-7280sram-48c6-r firmware +2 moreArista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F...9.8 Critical
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial...7.5 High
- opennetworking onosAuthentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject...7.5 High
- red-gate sql monitorRed Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL...7.2 High
- honeywell inncom inncontrol 3, inncom inncontrol firmware +1 moreHoneywell INNCOM INNControl 3 allows workstation users to escalate application user privileges...7.8 High
- ge ultrasound products, invenia abus scan station firmware, logiq e10 firmware +14 more +16 moreA restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of...6.8 Medium
- adobe after effectsAdobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability....9.8 Critical
- adobe media encoderAdobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability....7.8 High
- longtailvideo jw playerMultiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295...6.1 Medium
- zte zxv10 w300 firmwareZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web...7.5 High
- linux kernelInteger signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows...7.0 High
- debian linux, linux kernel, canonical ubuntu linux +2 morefs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke...5.5 Medium
- ibm emptoris spend analysis, emptoris strategic supply management, emptoris strategic supply management platform +2 moreIBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1...7.6 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain...4.3 Medium
- mongodb bson, fedoraproject fedora +1 moreBSON rubygem contains potential denial of service7.5 High
- ea originElectronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary...7.8 High
- google androidDirectory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows...4.6 Medium
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...8.8 High
- proftpd, opensuse backports sle, leap +2 more +4 moreProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c...7.5 High
- redhat ansibleAnsible sets unsafe permissions for sources.list5.5 Medium
- redhat ansibleAnsible Sensitive Files Are Locally Readable5.5 Medium
- redhat ansibleAnsible Remote Code Execution9.8 Critical
- freebsd, netbsd +1 moreThe IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows...7.5 High
- microsoft windows 7, windows server 2003, windows vista +1 more +3 moreThe IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a...7.5 High
- freebsd, netbsd +1 moreThe IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows...7.5 High
- microsoft windows 7, windows server 2003, windows vista +1 more +3 moreThe IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a...7.5 High
- apple mac os xThe IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote...7.5 High
- libarchive, canonical ubuntu linux, fedoraproject fedora +2 morearchive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with...8.8 High
- linux kernel, canonical ubuntu linux +1 moreThe Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of...5.5 Medium
- axousMultiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in...8.8 High
- redhat ansibleAnsible discloses credential information5.5 Medium
- debian linux, golang package ssh +1 moreImproper Verification of Cryptographic Signature in golang.org/x/crypto7.5 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +1 more +3 moreA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs...6.1 Medium
- boinc, universityofcalifornia boinc client +1 moreMultiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL...9.8 Critical
- puppet, puppet agent, puppetpu puppet agent +2 moreImproper Certificate Validation in Puppet6.5 Medium
- emerson openenterprise, openenterprise scada server +1 moreA Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or...9.8 Critical
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a...9.8 Critical
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an...8.6 High
- vmware vrealize operations for horizon adapter, vrealize operations +1 morevRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains...7.5 High
- netsweeperOpen redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows...6.1 Medium
- netsweeperCross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject...6.1 Medium
- netsweeperThe Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding...9.8 Critical
- cisco ios xe sd-wan software, ios xe +1 moreCisco IOS XE SD-WAN Software Default Credentials Vulnerability8.4 High
- netsweeperMultiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to...9.8 Critical
- netsweeperSQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0...9.8 Critical
- netsweeperDirectory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3...5.3 Medium
- netsweeperCross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper...6.1 Medium
- netsweeperCross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3...6.1 Medium
- Show moreLoading…