# CVEs published 2020-01-16 31 CVEs were published on January 16, 2020: 2 critical, 8 high. Days are UTC. - [CVE-2020-5398](https://cve.now/CVE-2020-5398.md): RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application (CVSS 8.0, Spring Framework · org.springframework:spring-webmvc +1) - [CVE-2019-15742](https://cve.now/CVE-2019-15742.md): A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. (no CVSS) - [CVE-2020-7039](https://cve.now/CVE-2020-7039.md): tcp\_emu in tcp\_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU\_IRC. (no CVSS) - [CVE-2019-3997](https://cve.now/CVE-2019-3997.md): Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair (no CVSS, SimpliSafe SS3) - [CVE-2019-5145](https://cve.now/CVE-2019-5145.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. (CVSS 8.8, Foxit) - [CVE-2019-5130](https://cve.now/CVE-2019-5130.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.7.0.29435. (CVSS 8.0, Foxit) - [CVE-2019-5126](https://cve.now/CVE-2019-5126.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. (CVSS 8.8, Foxit) - [CVE-2019-5131](https://cve.now/CVE-2019-5131.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.7.0.29435. (CVSS 8.8, Foxit) - [CVE-2020-7047](https://cve.now/CVE-2020-7047.md): The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (CVSS 9.9) - [CVE-2019-9500](https://cve.now/CVE-2019-9500.md): Broadcom brcmfmac driver is vulnerable to a heap buffer overflow (CVSS 7.9, Broadcom brcmfmac WiFi driver) - [CVE-2019-9503](https://cve.now/CVE-2019-9503.md): Broadcom brcmfmac driver is vulnerable to a frame validation bypass (CVSS 7.9, Broadcom brcmfmac WiFi driver) - [CVE-2020-7048](https://cve.now/CVE-2020-7048.md): The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the databas (CVSS 9.1) - [CVE-2019-11998](https://cve.now/CVE-2019-11998.md): HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. (no CVSS, HPE Superdome Flex Server) - [CVE-2019-11997](https://cve.now/CVE-2019-11997.md): A potential security vulnerability has been identified in HPE enhanced Internet Usage Manager (eIUM) versions 8.3 and 9.0. (no CVSS, HPE enhanced Internet Usage Manager) - [CVE-2019-13524](https://cve.now/CVE-2019-13524.md): GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End (no CVSS, GE PACSystems RX3i) - [CVE-2019-17573](https://cve.now/CVE-2019-17573.md): By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. (no CVSS, Apache CXF · org.apache.cxf:apache-cxf +1) - [CVE-2019-12423](https://cve.now/CVE-2019-12423.md): Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be us (no CVSS, Apache CXF · org.apache.cxf:apache-cxf +1) - [CVE-2010-3048](https://cve.now/CVE-2010-3048.md): Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory (no CVSS, Cisco Unified Personal Communicator) - [CVE-2019-10934](https://cve.now/CVE-2019-10934.md): A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions \< V15.1 Update 7), TIA Portal V16 (All ve (no CVSS, Siemens TIA Portal) - [CVE-2019-10940](https://cve.now/CVE-2019-10940.md): A vulnerability has been identified in SINEMA Server (All versions \< V14.0 SP2 Update 1). (no CVSS, Siemens AG SINEMA Server) - [CVE-2019-13939](https://cve.now/CVE-2019-13939.md): A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions \< V2.8.2), APOGEE PXC Compact (BACnet) (All versions \< V3.5.3), (CVSS 7.1, Siemens APOGEE MEC/MBC/PXC · Siemens APOGEE PXC Compact +22) - [CVE-2019-19278](https://cve.now/CVE-2019-19278.md): A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... (no CVSS, Siemens AG SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR…) - [CVE-2019-18282](https://cve.now/CVE-2019-18282.md): The flow\_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. (no CVSS) - [CVE-2019-20327](https://cve.now/CVE-2019-20327.md): Insecure permissions in cwrapper\_perl in Centreon Infrastructure Monitoring Software through 19.10 allow local attackers to gain privileges. (no CVSS) - [CVE-2020-7108](https://cve.now/CVE-2020-7108.md): The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field. (no CVSS) - [CVE-2020-7107](https://cve.now/CVE-2020-7107.md): The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display\_FAQ to Shortcodes/DisplayFAQs.php. (no CVSS) - [CVE-2020-7106](https://cve.now/CVE-2020-7106.md): Cacti 1.2.8 has stored XSS in data\_sources.php, color\_templates\_item.php, graphs.php, graph\_items.php, lib/api\_automation.php, user\_admin.ph (no CVSS) - [CVE-2020-7105](https://cve.now/CVE-2020-7105.md): async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked. (no CVSS) - [CVE-2020-7045](https://cve.now/CVE-2020-7045.md): In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. (no CVSS) - [CVE-2020-7044](https://cve.now/CVE-2020-7044.md): In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. (no CVSS) - [CVE-2019-13933](https://cve.now/CVE-2019-13933.md): A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP (no CVSS, Siemens SCALANCE X204RNA · Siemens SCALANCE X302-7 EEC +19) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-01-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.