CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache Tomcat4.8 Medium
- apache kylinSQL Injection in Kylin8.8 High
- tp-link tl-wr849n firmwareOn TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the...9.8 Critical
- stylemixthemes motors - car dealer\, classifieds \& listingincludes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer &...6.1 Medium
- stylemixthemes motors - car dealer\, classifieds \& listingincludes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer &...6.5 Medium
- netgear nighthawk x10-r9000 firmwareStored XSS via DHCP Discover Request Hostname6.1 Medium
- netgear nighthawk x10-r9000 firmwareStored XSS via X-Forwarded-For Header During Incorrect Login6.1 Medium
- netgear nighthawk x10-r9000 firmwareRoot Command Injection via MAC Address in SOAP API9.8 Critical
- netgear nighthawk x10-r9000 firmwareAuth Bypass Via X-Forwarded-For Header in SOAP API9.1 Critical
- drobo 5n2 firmwareLack of Authentication/Authorization on Administrative Web Pages9.8 Critical
- totolink a3002ru firmwareAdmin Password returned in password.htm6.5 Medium
- oracle corporation linux, redhat enterprise linux +1 moreA flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2...5.8 Medium
- compile-sass project compile-sassOS Command Injection in compile-sass8.2 High
- rpi project rpiOS Command Injection in rpi9.8 Critical
- rdf-graph-array project rdf-graph-arrayUncontrolled Resource Consumption in rdf-graph-array5.3 Medium
discord-markdownnpmdiscord-html not escaping HTML code blocks when lacking a language identifierNo score- mozilla bleach, fedoraproject fedora +1 moreXSS in Bleach when noscript and raw tag whitelisted6.1 Medium
- dropwizard dropwizard-validation, validation, oracle blockchain platform +2 moreRemote Code Execution (RCE) vulnerability in dropwizard-validation7.9 High
- sympa, debian linux, fedoraproject fedora +2 moreSympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk...7.5 High
- buddypressPrivate data exposure via REST API in BuddyPress8.0 High
openssl1SUSESecurity update for openssl1No score- kunenaKunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can...9.8 Critical
- cloudbees jenkins, jenkins lts, jenkins project enterprise by cloudbees +1 more +3 moreHash collision attack vulnerability in Jenkins7.5 High
- gnu screenA buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49....9.8 Critical
- pureftpd pure-ftpd, fedoraproject fedora +1 moreAn issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the...7.5 High
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary...9.8 Critical
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary...9.8 Critical
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary...9.8 Critical
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary...9.8 Critical
- ibm spectrum protect plus, spectrum protect +1 moreIBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary...9.8 Critical
- ibm maximo asset management, maximo for aviation, maximo for life sciences +4 more +6 moreIBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive...4.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange,...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote...6.8 Medium
- quickheal antivirus for server, antivirus pro, home security +3 more +5 moreThe Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted...7.8 High
- sophos cloud optix, endpoint protection, intercept x endpoint +3 more +5 moreThe Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP...7.8 High
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in Rake6.4 Medium
- yarnpkg yarnPath Traversal in Yarn7.5 High
- pacman project pacman, fedoraproject fedora +1 morepacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the...9.8 Critical
- pacman project pacman, fedoraproject fedora +1 morepacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the...9.8 Critical
- miele xgw 3000 zigbee gateway firmwareIn MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated...4.6 Medium
- miele xgw 3000 zigbee gateway firmwareIn MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require...4.6 Medium
- dnnsoftware dotnetnukeDNN XSS Vulnerability5.4 Medium
- dnnsoftware dotnetnukeDNN Path Traversal via Zip Slip8.8 High
- dnnsoftware dotnetnukeDNN File Upload Vulnerability6.5 Medium
- centreon webAn issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his...8.8 High
- mcafee web advisor, mcafee, llc web advisor (wa) +1 moreRemote Code Execution vulnerability8.0 High
- zsh, apple ipados, iphone os +5 more +7 moreIn Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no...7.8 High
- networkmanager-ssh project networkmanager-ssh, debian linux +1 moredanfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options...9.8 Critical
- smartclientAn issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by...7.5 High
- sas visual analyticsGraph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly.5.4 Medium
- Show moreLoading…