CVEs published January 7, 2020
33 CVEs were published on January 7, 2020: 1 critical, 6 high.
- Published
- 33
- Critical
- 1
- High
- 6
- Medium
- 4
- Low
- 1
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- [Red Hat] openshift-ansible
- 1
- [UNKNOWN] moodle · moodle/moodle
- 1
- Android
- 1
- D-Link DCS-960L
- 1
- Fortinet FortiAuthenticator WEB UI
- 1
- Fortinet FortiSIEM
- 1
- git-diff-apply
- 1
- Parallels Desktop
- 1
- PR100088 Modbus gateway
- 1
- Red Hat cpio
- 1
Critical 1
High 6
- CVE-2019-17148This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14Parallels Desktop
- CVE-2019-17146This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102.D-Link DCS-960L
- CVE-2019-17147This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers.TP-Link TL-WR841N
- CVE-2019-14906A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability.Red Hat SDL
- CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster.[Red Hat] openshift-ansible
- CVE-2019-14843A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester.Red Hat wildfly-security-manager
Medium, low and unrated 26
- CVE-2019-17151This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9Tencent WeChat
- CVE-2019-18652A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript
- CVE-2020-5841An issue was discovered in OpServices OpMon 9.3.1-1.
- CVE-2019-6529An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software VerPR100088 Modbus gateway
- CVE-2020-5842Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI.
- CVE-2018-10465Jamf Pro 10.x before 10.3.0 has Incorrect Access Control.
- CVE-2020-5307PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the
- CVE-2019-18386Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when rece
- CVE-2019-10776In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl.git-diff-apply
- CVE-2019-16154An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perfoFortinet FortiAuthenticator WEB UI
- CVE-2019-6700An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated Fortinet FortiSIEM
- CVE-2019-9465In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause.Android
- CVE-2014-8673Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Plann
- CVE-2019-14866In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.Red Hat cpio
- CVE-2013-5658AultWare pwStore 2010.8.30.0 has XSS
- CVE-2013-5657AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
- CVE-2019-14854OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to DebRed Hat library-go
- CVE-2013-5656FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
- CVE-2013-5638Transcend WiFiSD 1.8 has persistent XSS
- CVE-2019-14834A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memoryThe Dnsmasq Project dnsmasq
- CVE-2013-5637PQI AirCard has persistent XSS
- CVE-2019-14879A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9.[UNKNOWN] moodle · moodle/moodle
- CVE-2020-5393In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
- CVE-2013-5122Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
- CVE-2013-5571HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
- CVE-2020-5843Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.