CVEs published January 13, 2020
43 CVEs were published on January 13, 2020: 0 critical, 0 high.
- Published
- 43
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- hashbrown-cms
- 1
- Mozilla Firefox
- 1
- pysaml2
- 1
- Symantec Endpoint Detection and Response
- 1
Medium, low and unrated 43
- CVE-2020-6958An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows atta
- CVE-2020-6954An issue was discovered on Cayin SMP-PRO4 devices.
- CVE-2020-6955An issue was discovered on Cayin SMP-PRO4 devices.
- CVE-2019-19680A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 an
- CVE-2019-20142An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1.
- CVE-2019-20143An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6.
- CVE-2019-20144An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through 12.6.1.
- CVE-2019-20145An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1.
- CVE-2019-20146An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6.
- CVE-2019-20147An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through 12.6.1.
- CVE-2019-20148An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through 12.6.1.
- CVE-2020-5197An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1.
- CVE-2020-6832An issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1.
- CVE-2012-4750A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, which could let a remo
- CVE-2012-4761A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9
- CVE-2012-4760A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which could let a local ma
- CVE-2020-6948A remote code execution issue was discovered in HashBrown CMS through 1.3.3.hashbrown-cms
- CVE-2020-6949A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3.
- CVE-2012-4767An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, which could let a mal
- CVE-2019-19727SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.
- CVE-2019-19728SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
- CVE-2020-5390PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it ispysaml2
- CVE-2019-20212The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat
- CVE-2019-19891An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack.
- CVE-2019-20211The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing A
- CVE-2020-5195Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitra
- CVE-2019-20210The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search q
- CVE-2019-20209The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Refere
- CVE-2020-6859Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for W
- CVE-2019-18894In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 2
- CVE-2019-18893XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to
- CVE-2019-19547Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue.Symantec Endpoint Detection and Response
- CVE-2014-9382Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
- CVE-2011-2670Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style SheetsMozilla Firefox
- CVE-2013-6225LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
- CVE-2014-5381Grand MA 300 allows a brute-force attack on the PIN.
- CVE-2014-5380Grand MA 300 allows retrieval of the access PIN from sniffed data.
- CVE-2014-6039ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability.
- CVE-2014-6038Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability.
- CVE-2014-6059WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability
- CVE-2020-6860libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.
- CVE-2020-6851OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_im
- CVE-2020-6848Axper Vision II 4 devices allow XSS via the DEVICE_NAME (aka Device Name) parameter to the configWebParams.cgi URI.