CVEs published January 8, 2020
101 CVEs were published on January 8, 2020: 0 critical, 4 high.
- Published
- 101
- Critical
- 0
- High
- 4
- Medium
- 1
- Low
- 0
- Unrated
- 96
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Mozilla Firefox
- 12
- Android
- 8
- Mozilla Firefox · Mozilla Thunderbird
- 8
- Mozilla Firefox ESR · Mozilla Firefox
- 7
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 7
- Symantec Norton Mobile Security for Android
- 3
- Symantec IT Management Suite
- 2
- aws-lambda
- 1
- CA Automic Dollar Universe
- 1
- CA Automic Sysload
- 1
High 4
- CVE-2019-11292Pivotal Ops Manager logs query parameters in tomcat access filePivotal Ops Manager
- CVE-2019-5188A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.E2fsprogs
- CVE-2019-20361There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the data
- CVE-2019-20360A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally id
Medium, low and unrated 97
- CVE-2020-6617stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
- CVE-2020-6618stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
- CVE-2020-6619stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
- CVE-2020-6620stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
- CVE-2020-6621stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
- CVE-2020-6622stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
- CVE-2020-6623stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
- CVE-2011-5266Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.
- CVE-2011-5250Snare for Linux before 1.7.0 has CSRF in the web interface.
- CVE-2011-5247Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
- CVE-2011-5018Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
- CVE-2019-17001A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in the protected document Mozilla Firefox
- CVE-2019-9812Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firMozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17025Mozilla developers reported memory safety bugs present in Firefox 71.Mozilla Firefox
- CVE-2019-17024Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17023After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invalid state transition inMozilla Firefox
- CVE-2019-17022When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17021During the initialization of a new content process, a race condition occurs that can allow a content process to disclose heap addresses fromMozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17020If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Security Policy will not beMozilla Firefox
- CVE-2019-17019When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of beiMozilla Firefox
- CVE-2019-17018When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard.Mozilla Firefox
- CVE-2019-17017Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17016When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17015During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploMozilla Firefox ESR · Mozilla Firefox
- CVE-2019-17014If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-domain, resulting in Mozilla Firefox
- CVE-2019-17013Mozilla developers reported memory safety bugs present in Firefox 70.Mozilla Firefox
- CVE-2019-17012Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17011Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-freeMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17010Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have cMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17009When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to loMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17008When using nested workers, a use-after-free could occur during worker destruction.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17005The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2019-17002If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that page, the link was nMozilla Firefox
- CVE-2020-6609GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
- CVE-2020-6610GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.
- CVE-2020-6611GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
- CVE-2020-6612GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
- CVE-2020-6613GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
- CVE-2020-6614GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.
- CVE-2020-6615GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).
- CVE-2019-17000An object tag with a data URI did not correctly inherit the document's Content Security Policy.Mozilla Firefox
- CVE-2019-11765A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission prompt to be shown.Mozilla Firefox
- CVE-2019-11764Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11763Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11762If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call arbitrary DOM methods/Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11761By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11760A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11759An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11758Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11757When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it.Mozilla Firefox · Mozilla Thunderbird
- CVE-2019-11756Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service).Mozilla Firefox
- CVE-2019-11745When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds wrMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2020-6583BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking.
- CVE-2016-5346An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when p
- CVE-2020-0008In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition.Android
- CVE-2020-0007In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data.Android
- CVE-2020-0006In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data.Android
- CVE-2020-0004In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size.Android
- CVE-2020-0003In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability.Android
- CVE-2020-0002In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free.Android
- CVE-2020-0001In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly.Android
- CVE-2016-6585A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious usSymantec Norton Mobile Security for Android
- CVE-2020-5511PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
- CVE-2020-5510PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.
- CVE-2020-5183FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application.
- CVE-2019-19495The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable
- CVE-2016-6587An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android befoSymantec Norton Mobile Security for Android
- CVE-2016-6586A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct Symantec Norton Mobile Security for Android
- CVE-2019-20367nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
- CVE-2014-5287A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Inter
- CVE-2019-20363An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
- CVE-2019-20364An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.
- CVE-2019-20365An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
- CVE-2019-20366An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.org.igniterealtime.openfire:parent
- CVE-2019-5082An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.WAGO PFC200 · WAGO PFC100
- CVE-2019-10777In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function wiaws-lambda
- CVE-2016-6588A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0.Symantec IT Management Suite
- CVE-2019-19544CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to CA Automic Dollar Universe
- CVE-2019-19518CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentialCA Automic Sysload
- CVE-2019-17076An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1.
- CVE-2016-6589A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.Symantec IT Management Suite
- CVE-2016-6590A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4Symantec IT Management Suite · Symantec Ghost Solution S… +2
- CVE-2014-2072Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
- CVE-2014-1860Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities
- CVE-2020-0009In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass.Android
- CVE-2014-1409MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with
- CVE-2016-6591A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let Symantec Norton App Lock
- CVE-2019-10778devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function.devcert-sanscache
- CVE-2016-6593A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let Symantec VIP Access Desktop
- CVE-2019-14820It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be keycloak · org.keycloak:keycloak-core
- CVE-2014-9908A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (AGoogle Android
- CVE-2019-20362In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\
- CVE-2014-1598centurystar 7.12 ActiveX Control has a Stack Buffer Overflow
- CVE-2014-1454Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input
- CVE-2020-6170An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials
- CVE-2020-6163The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget templ
- CVE-2014-5209An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could lNTP