CVEs published January 11, 2020
8 CVEs were published on January 11, 2020: 0 critical, 1 high.
- Published
- 8
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- hot-formula-parser
- 1
High 1
Medium, low and unrated 7
- CVE-2019-20377TopList before 2019-09-03 allows XSS via a title.
- CVE-2019-20378ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php ce parameter.
- CVE-2019-20379ganglia-web (aka Ganglia Web Frontend) through 3.7.5 allows XSS via the header.php cs parameter.
- CVE-2020-6838In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.
- CVE-2020-6839In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.
- CVE-2020-6840In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.
- CVE-2020-6836grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection.hot-formula-parser