CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- smartclientAn issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by...7.5 High
- smartclientAn issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur...9.8 Critical
- smartclientAn issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request...5.3 Medium
- f-secure cloud protection for salesforce, email and server security, internet gatekeeper +2 moreThe F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted...5.5 Medium
- auieo candidatsCandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via...8.8 High
- fauzantrif election project electionfauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.7.2 High
- fauzantrif election project electionfauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "...5.4 Medium
- soplanningSOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.5.4 Medium
- soplanningSOPlanning 1.45 allows XSS via the Name or Comment to status.php.5.4 Medium
- couchbase serverCouchbase Server 4.x and 5.x before 6.0.0 has Insecure Permissions for the projector and indexer...9.8 Critical
- d-link dap-2610, dlink dap-2610 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- d-link dap-1330, dlink dap-1330 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- samsung galaxy s10, google android +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.1 High
- cacti, debian linux, fedoraproject fedora +2 more +4 moregraph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via...8.8 High
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5845 firmware +15 more +17 moreCertain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or...8.8 High
- gogsGogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to...5.9 Medium
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...7.5 High
- open-xchange appsuiteOX App Suite through 7.10.2 allows SSRF.5.0 Medium
- jetbrains scalaIn the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over...7.5 High
- debian x11-common, linux +1 moreThe init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink...7.8 High
- netsurf, debian linux +1 moreInformation-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.5.5 Medium
- xchat, xchat xchat-wdk, gnome gtk +2 moreHeap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo...9.8 Critical
- f5 arx, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without...5.9 Medium
- hp autonomy keyview idol, ibm domino, notes +4 more +6 moreMultiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec...7.8 High
- dlink dch-m225 firmwareD-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute...7.2 High
- tucanInsecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform...8.1 High
- dlink dch-m225 firmwareD-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS...9.8 Critical
- atos unify openscape uc web clientAtos Unify OpenScape UC Web Client 1.0 allows XSS. An attacker could exploit this by convincing...6.1 Medium
- atos unify openscape uc web clientAtos Unify OpenScape UC Web Client 1.0 allows remote attackers to obtain sensitive information....7.5 High
- dell chengming 3980 firmware, client consumer and commercial platforms, embedded box pc 5000 firmware +172 more +174 moreAffected Dell Client platforms contain a BIOS Setup configuration authentication bypass...6.1 Medium
- dell client consumer and commercial platforms, g3 15 3590 firmware, g3 3579 firmware +111 more +113 moreDell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability....7.1 High
- patriotmemory viper rgb driverA buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode...7.8 High
- nec aterm wg2600hs firmware, nec corporation aterm wg2600hs +1 moreAterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network...8.0 High
- nec aterm wg2600hs firmware, nec corporation aterm wg2600hs +1 moreCross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote...6.1 Medium
- nec aterm wf1200c firmware, aterm wg1200cr firmware, aterm wg2600hs firmware +1 more +3 moreAterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and...8.0 High
- nec aterm wf1200c firmware, aterm wg1200cr firmware, aterm wg2600hs firmware +1 more +3 moreAterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and...8.8 High
- google androidbtif/src/btif_dm.c in Android before 5.1 does not properly enforce the temporary nature of a...8.1 High
- curlCurl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local...9.8 Critical
- ua-parser uap-coreDenial of Service in uap-core when processing crafted User-Agent strings5.7 Medium
- openhab, openhab openhab-addons +1 moreopenHAB exec add-ons allow remote arbitrary command execution7.7 High
- trend micro vulnerability protectionTrend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2019 +4 more +6 moreThe Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable...4.7 Medium
- trend micro im security (ims), trend micro control manager (tmcm), trend micro officescan (osce), trend micro endpoint sensor (tmes), trend micro security (consumer), trend micro scanmail for microsoft exchange (smex), trend micro serverprotect (sp), trend micro mobile security enterprise (tmms enterprise), trendmicro control manager, endpoint sensor +6 more +8 moreTrend Micro has repackaged installers for several Trend Micro products that were found to utilize...7.0 High
- westerndigital mycloud.comWestern Digital mycloud.com before Web Version 2.2.0-134 allows XSS.6.1 Medium
- western digital ibi, my cloud home +1 moreWestern Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.9.1 Critical
- wpchill modula image galleryA stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress....5.4 Medium
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN...7.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant...7.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control...7.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application...7.5 High
- Show moreLoading…