CVEs published in February 2020
1,402 vulnerabilities, 227 critical, 16 exploited.
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...5.3 Medium
- zte corporation e8820v3, zte e8820v3 firmware +1 moreZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use...6.5 Medium
- zte corporation e8820v3, zte e8820v3 firmware +1 moreZTE E8820V3 router product is impacted by a permission and access control vulnerability....6.5 Medium
- arubanetworks airwaveAn administrative application user of or application user with write access to Aruba Airwave...7.2 High
- arubanetworks airwaveThere are command injection vulnerabilities present in the AirWave application. Certain input...7.2 High
- ibm business automation workflow, business process manager +1 moreIBM Business Process Manager 8.5.7.0 through 8.5.7.0 2017.06, 8.6.0.0 through 8.6.0.0 CF2018.03,...6.3 Medium
texlive-filesystemSUSESecurity update for texlive-filesystemNo scoretexlive-filesystemSUSESecurity update for texlive-filesystemNo scoreopensslSUSESecurity update for opensslNo scoreopensslSUSESecurity update for opensslNo scoreenigmailopenSUSESecurity update for enigmailNo score- synchro bbsSynchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service...7.5 High
- libgd** DISPUTED ** In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer...8.1 High
- rifatron co., ltd. dvr, tonnet tat-70432n firmware, tat-71416g1 firmware +6 more +8 moreTONNET DVR – Firmware Injection6.4 Medium
- rifatron co., ltd. dvr, tonnet tat-70432n firmware, tat-71416g1 firmware +6 more +8 moreTONNET DVR – Broken Access Control8.1 High
- puppet enterpriseParts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF ...8.8 High
- moxa iologik 2512-hspa-t firmware, iologik 2512-hspa firmware, iologik 2512-t firmware +17 more +19 moreMoxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility ioLogik...7.5 High
- netapp oncommand cloud managerOnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by...9.8 Critical
- netapp fas 8300/8700 and aff a400 baseboard management controller, all flash fabric-attached storage a400 firmware, fabric-attached storage 8300 firmware +1 more +3 moreNetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x...7.8 High
- cisco adaptive security appliance software, firepower extensible operating system (fxos), firepower extensible operating system +1 more +3 moreCisco FXOS Software CLI Arbitrary File Read and Write Vulnerability4.2 Medium
- cisco ucs manager, adaptive security appliance software, adaptive security appliance (asa) software +2 more +4 moreCisco FXOS and UCS Manager Software CLI Command Injection Vulnerability7.8 High
- cisco nx-os software, nx-os +1 moreCisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability7.5 High
- cisco firepower extensible operating system (fxos), firepower extensible operating system +1 moreCisco FXOS Software CLI Command Injection Vulnerability6.7 Medium
- cisco nx-os, nx-os software 7.3(2)d1(1d) +1 moreCisco NX-OS Software NX-API Denial of Service Vulnerability5.3 Medium
- cisco fxos, ucs manager, adaptive security appliance (asa) software +2 moreCisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability7.8 High
- cisco nx-os, unified computing system (managed), firepower extensible operating system +1 more +3 moreCisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability8.8 High
- cisco ucs manager, unified computing system (managed) +1 moreCisco UCS Manager Software Local Management CLI Command Injection Vulnerability7.8 High
- cisco nx-os, nx-os software 7.3(2)d1(1d) +1 moreCisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability4.7 Medium
- cisco nx-os, nx-os software 5.0(1a) +1 moreCisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability8.2 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site...5.4 Medium
- ibm websphere service registry and repositoryIBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version...5.3 Medium
- pureftpd pure-ftpd, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been...7.5 High
- fiserv accurate reconciliationFiserv Accurate Reconciliation 2.19.0 allows XSS via the Source or Destination field of the...5.4 Medium
- fiserv accurate reconciliationFiserv Accurate Reconciliation 2.19.0 allows XSS via the logout.jsp timeOut parameter.6.1 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker...7.5 High
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows...6.5 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with...8.8 High
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP...7.5 High
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple...5.4 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple...5.4 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with...6.5 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full...5.3 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows...9.8 Critical
- heroplugins hero maps premiumThe Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via...6.1 Medium
- Show moreLoading…