CVEs published January 23, 2020
78 CVEs were published on January 23, 2020: 3 critical, 7 high.
- Published
- 78
- Critical
- 3
- High
- 7
- Medium
- 6
- Low
- 0
- Unrated
- 62
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- plone
- 4
- QEMU
- 3
- Fortinet FortiMail
- 2
- LibreSSL
- 2
- Twitter secure_headers · secure_headers
- 2
- Apache XML-RPC · org.apache.xmlrpc:xmlrpc
- 1
- Fortinet FortiOS
- 1
- Fortinet FortiSIEM
- 1
- freeciv
- 1
- github.com/hashicorp/vault
- 1
Critical 3
- CVE-2019-19896In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.
- CVE-2019-19897In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service.
- CVE-2019-17201FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrat
High 7
- CVE-2019-19893In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can a
- CVE-2019-19895In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system.
- CVE-2019-19898In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator consol
- CVE-2019-14888A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS.Red Hat undertow · io.undertow:undertow-core
- CVE-2019-3691Local privilege escalation from user munge to rootSUSE Linux Enterprise Server · openSUSE Factory
- CVE-2019-18898trousers: Local privilege escalation from tss to rootSUSE Linux Enterprise Server 15 SP1 · openSUSE Factory
- CVE-2019-17202FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrat
Medium, low and unrated 68
- CVE-2020-7245Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if th
- CVE-2012-6649WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
- CVE-2012-6663General Electric D20ME devices are not properly configured and reveal plaintext passwords.
- CVE-2012-4606Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Esca
- CVE-2012-5340SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
- CVE-2012-5389NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (applicati
- CVE-2020-6007Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL stringPhilips Hue Bridge 2.X
- CVE-2019-19894In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system.
- CVE-2020-7936An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Siteplone
- CVE-2020-7937An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be exeplone
- CVE-2020-7938plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.plone-restapi · plone
- CVE-2020-7939SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries.plone
- CVE-2020-7940Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.plone
- CVE-2020-7941A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without neediplone · plone-app-contenttypes
- CVE-2015-5333Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) vLibreSSL
- CVE-2015-5334Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) oLibreSSL
- CVE-2015-5239Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CQEMU
- CVE-2013-1593A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, a
- CVE-2015-5278The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instaQEMU
- CVE-2015-5745Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial ofQEMU
- CVE-2014-2050Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack th
- CVE-2013-1592A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Mes
- CVE-2015-1931IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8
- CVE-2012-5626EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss PorRed Hat JBoss BRMS · Red Hat JBoss Enterprise Applicatio… +4
- CVE-2012-6083Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.freeciv
- CVE-2019-15707An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perforFortinet FortiMail
- CVE-2020-7220HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespacgithub.com/hashicorp/vault
- CVE-2019-15712An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to accessFortinet FortiMail
- CVE-2019-16515An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-16516An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-16514An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-16517An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-16512An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-16513An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.
- CVE-2019-5593Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keysFortinet FortiOS
- CVE-2019-16153A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the dFortinet FortiSIEM
- CVE-2007-6758Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
- CVE-2019-18899apt-cacher-ng insecure use of /run/apt-cacher-ngopenSUSE Leap
- CVE-2008-7314mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.mIRC
- CVE-2013-6773Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privileges
- CVE-2013-6772Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
- CVE-2013-6792Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability
- CVE-2014-7238The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS
- CVE-2020-7931In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authoriz
- CVE-2012-4981Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability
- CVE-2013-6358PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the
- CVE-2016-1000237sanitize-html before 1.4.3 has XSS.sanitize-html
- CVE-2013-4175MySecureShell 1.31 has a Local Denial of Service VulnerabilityMySecureShell
- CVE-2013-6785Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary
- CVE-2013-4176mysecureshell 1.31: Local Information Disclosure Vulnerabilitymysecureshell
- CVE-2012-5698BabyGekko before 1.2.4 has SQL injection.
- CVE-2012-5699BabyGekko before 1.2.4 allows PHP file inclusion.
- CVE-2012-5867HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability
- CVE-2012-4900Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference
- CVE-2012-2087ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.ISPConfig
- CVE-2012-4863IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerabilityIBM WebSphere MQ
- CVE-2019-19839emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu
- CVE-2019-19838emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu
- CVE-2020-6843Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS.
- CVE-2019-19835SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server a
- CVE-2019-19837Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of b
- CVE-2020-7210Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts.UmbracoCMS.Core
- CVE-2020-5216Limited header injection when using dynamic overrides with user input in RubyGems secure_headersTwitter secure_headers · secure_headers
- CVE-2020-5217Directive injection when using dynamic overrides with user input in RubyGems secure_headersTwitter secure_headers · secure_headers
- CVE-2020-5223Persistent XSS vulnerability in filename of attached file in PrivateBinPrivateBin · privatebin/privatebin
- CVE-2019-14885A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA.Red Hat JBoss EAP
- CVE-2019-17570An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpApache XML-RPC · org.apache.xmlrpc:xmlrpc
- CVE-2019-18222The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before c