CVEs published January 5, 2020
15 CVEs were published on January 5, 2020: 0 critical, 0 high.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- pillow
- 1
Medium, low and unrated 15
- CVE-2020-5306Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.
- CVE-2020-5305Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen.
- CVE-2019-20155An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4.
- CVE-2019-20154An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4.
- CVE-2019-20153An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) in v5.4.
- CVE-2019-20077The Typesetter CMS 5.1 logout functionality is affected by a CSRF vulnerability.
- CVE-2019-20004An issue was discovered on Intelbras IWR 3000N 1.8.7 devices.
- CVE-2019-19911There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer pillow
- CVE-2019-19629In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed
- CVE-2019-19628In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privi
- CVE-2019-19314GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.
- CVE-2019-19313GitLab EE 12.3 through 12.5, 12.4.3, and 12.3.6 allows Denial of Service.
- CVE-2019-19312GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control.
- CVE-2019-20336In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
- CVE-2019-20337In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.