CVEs published January 17, 2020
34 CVEs were published on January 17, 2020: 0 critical, 2 high.
- Published
- 34
- Critical
- 0
- High
- 2
- Medium
- 3
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Geutebruck IP Cameras
- 3
- The Eclipse Foundation Eclipse Memory Analyzer
- 2
- Trend Micro Password Manager
- 2
- Trend Micro Security
- 2
- Intel(R) Chipset Device Software INF Utility
- 1
- Intel(R) DAAL
- 1
- Intel(R) Processors
- 1
- Intel(R) RWC 3 for Windows
- 1
- Intel(R) SNMP Subagent Stand-Alone for Windows*
- 1
- Intel(R) VTune(TM) Amplifier for Windows*
- 1
High 2
Medium, low and unrated 32
- CVE-2019-19697An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attTrend Micro Security
- CVE-2019-20357A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of productTrend Micro Security
- CVE-2019-15625A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victTrend Micro Password Manager
- CVE-2019-19696A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be impTrend Micro Password Manager
- CVE-2020-7222An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504.
- CVE-2020-7104The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.
- CVE-2014-5007Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Serv
- CVE-2020-5397CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxSpring Framework · org.springframework:spring-webmvc +1
- CVE-2019-17634Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report frThe Eclipse Foundation Eclipse Memory Analyzer
- CVE-2019-17635Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is reThe Eclipse Foundation Eclipse Memory Analyzer
- CVE-2019-19339It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207.Red Hat kpatch:
- CVE-2020-3940VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability.VMware Workspace ONE SDK
- CVE-2019-10958Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote auGeutebruck IP Cameras
- CVE-2019-10957Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote auGeutebruck IP Cameras
- CVE-2019-10956Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote auGeutebruck IP Cameras
- CVE-2020-6862V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability.ZTE F6x2W
- CVE-2019-17127A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application f
- CVE-2019-17125A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms.
- CVE-2019-14629Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure Intel(R) DAAL
- CVE-2019-14613Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentialIntel(R) VTune(TM) Amplifier for Windows*
- CVE-2019-14615Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticaIntel(R) Processors
- CVE-2019-14601Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentiIntel(R) RWC 3 for Windows
- CVE-2019-14596Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated Intel(R) Chipset Device Software INF Utility
- CVE-2019-14600Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potIntel(R) SNMP Subagent Stand-Alone for Windows*
- CVE-2019-15854An issue was discovered in Maarch RM before 2.5.
- CVE-2019-15855An issue was discovered in Maarch RM before 2.5.
- CVE-2019-20003Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components.
- CVE-2019-3686XSS in distri and version parameter in openQASUSE openQA
- CVE-2019-19802In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prio
- CVE-2019-19801In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5)
- CVE-2019-19142Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.
- CVE-2019-17361In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.salt