# CVEs published 2020-01-17

34 CVEs were published on January 17, 2020: 0 critical, 2 high. Days are UTC.

- [CVE-2019-19697](https://cve.now/CVE-2019-19697.md): An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an att (no CVSS, Trend Micro Security)
- [CVE-2019-20357](https://cve.now/CVE-2019-20357.md): A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of product (no CVSS, Trend Micro Security)
- [CVE-2019-15625](https://cve.now/CVE-2019-15625.md): A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the vict (no CVSS, Trend Micro Password Manager)
- [CVE-2019-19696](https://cve.now/CVE-2019-19696.md): A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be imp (no CVSS, Trend Micro Password Manager)
- [CVE-2020-7222](https://cve.now/CVE-2020-7222.md): An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. (no CVSS)
- [CVE-2020-7104](https://cve.now/CVE-2020-7104.md): The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total\_questions parameter. (no CVSS)
- [CVE-2014-5007](https://cve.now/CVE-2014-5007.md): Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Serv (no CVSS)
- [CVE-2020-5397](https://cve.now/CVE-2020-5397.md): CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux (CVSS 5.3, Spring Framework · org.springframework:spring-webmvc +1)
- [CVE-2019-17634](https://cve.now/CVE-2019-17634.md): Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generating an HTML report fr (no CVSS, The Eclipse Foundation Eclipse Memory Analyzer)
- [CVE-2019-17635](https://cve.now/CVE-2019-17635.md): Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is re (no CVSS, The Eclipse Foundation Eclipse Memory Analyzer)
- [CVE-2019-19339](https://cve.now/CVE-2019-19339.md): It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. (CVSS 6.5, Red Hat kpatch:)
- [CVE-2020-3940](https://cve.now/CVE-2020-3940.md): VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability. (no CVSS, VMware Workspace ONE SDK)
- [CVE-2019-10958](https://cve.now/CVE-2019-10958.md): Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote au (no CVSS, Geutebruck IP Cameras)
- [CVE-2019-10957](https://cve.now/CVE-2019-10957.md): Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote au (no CVSS, Geutebruck IP Cameras)
- [CVE-2019-10956](https://cve.now/CVE-2019-10956.md): Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote au (no CVSS, Geutebruck IP Cameras)
- [CVE-2020-6862](https://cve.now/CVE-2020-6862.md): V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. (no CVSS, ZTE F6x2W)
- [CVE-2019-17127](https://cve.now/CVE-2019-17127.md): A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application f (no CVSS)
- [CVE-2019-17125](https://cve.now/CVE-2019-17125.md): A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms. (no CVSS)
- [CVE-2019-14629](https://cve.now/CVE-2019-14629.md): Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure (no CVSS, Intel(R) DAAL)
- [CVE-2019-14613](https://cve.now/CVE-2019-14613.md): Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows\* before update 8 may allow an authenticated user to potential (no CVSS, Intel(R) VTune(TM) Amplifier for Windows\*)
- [CVE-2019-14615](https://cve.now/CVE-2019-14615.md): Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthentica (no CVSS, Intel(R) Processors)
- [CVE-2019-14601](https://cve.now/CVE-2019-14601.md): Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potenti (no CVSS, Intel(R) RWC 3 for Windows)
- [CVE-2019-14596](https://cve.now/CVE-2019-14596.md): Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated (no CVSS, Intel(R) Chipset Device Software INF Utility)
- [CVE-2019-14600](https://cve.now/CVE-2019-14600.md): Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows\* may allow an authenticated user to pot (no CVSS, Intel(R) SNMP Subagent Stand-Alone for Windows\*)
- [CVE-2019-15854](https://cve.now/CVE-2019-15854.md): An issue was discovered in Maarch RM before 2.5. (no CVSS)
- [CVE-2019-15855](https://cve.now/CVE-2019-15855.md): An issue was discovered in Maarch RM before 2.5. (no CVSS)
- [CVE-2019-20003](https://cve.now/CVE-2019-20003.md): Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components. (no CVSS)
- [CVE-2019-3686](https://cve.now/CVE-2019-3686.md): XSS in distri and version parameter in openQA (CVSS 6.5, SUSE openQA)
- [CVE-2019-3683](https://cve.now/CVE-2019-3683.md): keystone\_json\_assignment backend granted access to any project for users in user-project-map.json (CVSS 8.8, SUSE Openstack Cloud)
- [CVE-2019-3682](https://cve.now/CVE-2019-3682.md): Insecure API port exposed to all Master Node guest containers (CVSS 8.4, SUSE CaaS Platform)
- [CVE-2019-19802](https://cve.now/CVE-2019-19802.md): In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prio (no CVSS)
- [CVE-2019-19801](https://cve.now/CVE-2019-19801.md): In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5) (no CVSS)
- [CVE-2019-19142](https://cve.now/CVE-2019-19142.md): Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI. (no CVSS)
- [CVE-2019-17361](https://cve.now/CVE-2019-17361.md): In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. (no CVSS, salt)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.