# CVEs published 2020-01-23

78 CVEs were published on January 23, 2020: 3 critical, 7 high. Days are UTC.

- [CVE-2020-7245](https://cve.now/CVE-2020-7245.md): Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if th (no CVSS)
- [CVE-2012-6649](https://cve.now/CVE-2012-6649.md): WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload. (no CVSS)
- [CVE-2012-6663](https://cve.now/CVE-2012-6663.md): General Electric D20ME devices are not properly configured and reveal plaintext passwords. (no CVSS)
- [CVE-2012-4606](https://cve.now/CVE-2012-4606.md): Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Esca (no CVSS)
- [CVE-2012-5340](https://cve.now/CVE-2012-5340.md): SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex\_number() function via a corrupt PDF file. (no CVSS)
- [CVE-2012-5389](https://cve.now/CVE-2012-5389.md): NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2020-6007](https://cve.now/CVE-2020-6007.md): Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string (no CVSS, Philips Hue Bridge 2.X)
- [CVE-2019-19893](https://cve.now/CVE-2019-19893.md): In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can a (CVSS 7.5)
- [CVE-2019-19894](https://cve.now/CVE-2019-19894.md): In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. (CVSS 5.5)
- [CVE-2019-19895](https://cve.now/CVE-2019-19895.md): In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. (CVSS 8.8)
- [CVE-2019-19896](https://cve.now/CVE-2019-19896.md): In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. (CVSS 9.9)
- [CVE-2019-19897](https://cve.now/CVE-2019-19897.md): In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. (CVSS 10.0)
- [CVE-2019-19898](https://cve.now/CVE-2019-19898.md): In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator consol (CVSS 7.5)
- [CVE-2020-7936](https://cve.now/CVE-2020-7936.md): An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site (no CVSS, plone)
- [CVE-2020-7937](https://cve.now/CVE-2020-7937.md): An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be exe (no CVSS, plone)
- [CVE-2020-7938](https://cve.now/CVE-2020-7938.md): plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level. (no CVSS, plone-restapi · plone)
- [CVE-2020-7939](https://cve.now/CVE-2020-7939.md): SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (no CVSS, plone)
- [CVE-2020-7940](https://cve.now/CVE-2020-7940.md): Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking. (no CVSS, plone)
- [CVE-2020-7941](https://cve.now/CVE-2020-7941.md): A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needi (no CVSS, plone · plone-app-contenttypes)
- [CVE-2015-5333](https://cve.now/CVE-2015-5333.md): Memory leak in the OBJ\_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) v (no CVSS, LibreSSL)
- [CVE-2015-5334](https://cve.now/CVE-2015-5334.md): Off-by-one error in the OBJ\_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) o (no CVSS, LibreSSL)
- [CVE-2015-5239](https://cve.now/CVE-2015-5239.md): Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT\_C (no CVSS, QEMU)
- [CVE-2013-1593](https://cve.now/CVE-2013-1593.md): A Denial of Service vulnerability exists in the WRITE\_C function in the msg\_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, a (no CVSS)
- [CVE-2015-5278](https://cve.now/CVE-2015-5278.md): The ne2000\_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and insta (no CVSS, QEMU)
- [CVE-2015-5745](https://cve.now/CVE-2015-5745.md): Buffer overflow in the send\_control\_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of (no CVSS, QEMU)
- [CVE-2014-2050](https://cve.now/CVE-2014-2050.md): Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack th (no CVSS)
- [CVE-2013-1592](https://cve.now/CVE-2013-1592.md): A Buffer Overflow vulnerability exists in the Message Server service \_MsJ2EE\_AddStatistics() function when sending specially crafted SAP Mes (no CVSS)
- [CVE-2015-1931](https://cve.now/CVE-2015-1931.md): IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 (no CVSS)
- [CVE-2012-5626](https://cve.now/CVE-2012-5626.md): EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Por (no CVSS, Red Hat JBoss BRMS · Red Hat JBoss Enterprise Applicatio… +4)
- [CVE-2012-6083](https://cve.now/CVE-2012-6083.md): Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet. (no CVSS, freeciv)
- [CVE-2019-15707](https://cve.now/CVE-2019-15707.md): An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perfor (no CVSS, Fortinet FortiMail)
- [CVE-2020-7220](https://cve.now/CVE-2020-7220.md): HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespac (no CVSS, github.com/hashicorp/vault)
- [CVE-2019-15712](https://cve.now/CVE-2019-15712.md): An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access (no CVSS, Fortinet FortiMail)
- [CVE-2019-16515](https://cve.now/CVE-2019-16515.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-16516](https://cve.now/CVE-2019-16516.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-16514](https://cve.now/CVE-2019-16514.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-16517](https://cve.now/CVE-2019-16517.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-16512](https://cve.now/CVE-2019-16512.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-16513](https://cve.now/CVE-2019-16513.md): An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. (no CVSS)
- [CVE-2019-5593](https://cve.now/CVE-2019-5593.md): Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys (no CVSS, Fortinet FortiOS)
- [CVE-2019-16153](https://cve.now/CVE-2019-16153.md): A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the d (no CVSS, Fortinet FortiSIEM)
- [CVE-2019-14888](https://cve.now/CVE-2019-14888.md): A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. (CVSS 7.5, Red Hat undertow · io.undertow:undertow-core)
- [CVE-2019-3691](https://cve.now/CVE-2019-3691.md): Local privilege escalation from user munge to root (CVSS 7.7, SUSE Linux Enterprise Server · openSUSE Factory)
- [CVE-2007-6758](https://cve.now/CVE-2007-6758.md): Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0. (no CVSS)
- [CVE-2019-18899](https://cve.now/CVE-2019-18899.md): apt-cacher-ng insecure use of /run/apt-cacher-ng (CVSS 6.2, openSUSE Leap)
- [CVE-2008-7314](https://cve.now/CVE-2008-7314.md): mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname. (no CVSS, mIRC)
- [CVE-2013-6773](https://cve.now/CVE-2013-6773.md): Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privileges (no CVSS)
- [CVE-2013-6772](https://cve.now/CVE-2013-6772.md): Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking (no CVSS)
- [CVE-2013-6792](https://cve.now/CVE-2013-6792.md): Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability (no CVSS)
- [CVE-2014-7238](https://cve.now/CVE-2014-7238.md): The WordPress plugin Contact Form Integrated With Google Maps 1.0-2.4 has Stored XSS (no CVSS)
- [CVE-2020-7931](https://cve.now/CVE-2020-7931.md): In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authoriz (no CVSS)
- [CVE-2012-4981](https://cve.now/CVE-2012-4981.md): Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability (no CVSS)
- [CVE-2013-6358](https://cve.now/CVE-2013-6358.md): PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the (no CVSS)
- [CVE-2016-1000237](https://cve.now/CVE-2016-1000237.md): sanitize-html before 1.4.3 has XSS. (no CVSS, sanitize-html)
- [CVE-2013-4175](https://cve.now/CVE-2013-4175.md): MySecureShell 1.31 has a Local Denial of Service Vulnerability (no CVSS, MySecureShell)
- [CVE-2013-6785](https://cve.now/CVE-2013-6785.md): Directory traversal vulnerability in url\_redirect.cgi in Supermicro IPMI before SMT\_X9\_315 allows authenticated attackers to read arbitrary (no CVSS)
- [CVE-2013-4176](https://cve.now/CVE-2013-4176.md): mysecureshell 1.31: Local Information Disclosure Vulnerability (no CVSS, mysecureshell)
- [CVE-2012-5698](https://cve.now/CVE-2012-5698.md): BabyGekko before 1.2.4 has SQL injection. (no CVSS)
- [CVE-2012-5699](https://cve.now/CVE-2012-5699.md): BabyGekko before 1.2.4 allows PHP file inclusion. (no CVSS)
- [CVE-2012-5867](https://cve.now/CVE-2012-5867.md): HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability (no CVSS)
- [CVE-2019-18898](https://cve.now/CVE-2019-18898.md): trousers: Local privilege escalation from tss to root (CVSS 7.7, SUSE Linux Enterprise Server 15 SP1 · openSUSE Factory)
- [CVE-2012-4900](https://cve.now/CVE-2012-4900.md): Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference (no CVSS)
- [CVE-2012-2087](https://cve.now/CVE-2012-2087.md): ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface. (no CVSS, ISPConfig)
- [CVE-2012-4863](https://cve.now/CVE-2012-4863.md): IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability (no CVSS, IBM WebSphere MQ)
- [CVE-2019-19839](https://cve.now/CVE-2019-19839.md): emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu (no CVSS)
- [CVE-2019-19838](https://cve.now/CVE-2019-19838.md): emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu (no CVSS)
- [CVE-2020-6843](https://cve.now/CVE-2020-6843.md): Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. (no CVSS)
- [CVE-2019-19835](https://cve.now/CVE-2019-19835.md): SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server a (no CVSS)
- [CVE-2019-19837](https://cve.now/CVE-2019-19837.md): Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of b (no CVSS)
- [CVE-2020-7210](https://cve.now/CVE-2020-7210.md): Umbraco CMS 8.2.2 allows CSRF to enable/disable or delete user accounts. (no CVSS, UmbracoCMS.Core)
- [CVE-2020-5216](https://cve.now/CVE-2020-5216.md): Limited header injection when using dynamic overrides with user input in RubyGems secure\_headers (CVSS 4.4, Twitter secure\_headers · secure\_headers)
- [CVE-2020-5217](https://cve.now/CVE-2020-5217.md): Directive injection when using dynamic overrides with user input in RubyGems secure\_headers (CVSS 4.4, Twitter secure\_headers · secure\_headers)
- [CVE-2020-5223](https://cve.now/CVE-2020-5223.md): Persistent XSS vulnerability in filename of attached file in PrivateBin (CVSS 6.1, PrivateBin · privatebin/privatebin)
- [CVE-2019-14885](https://cve.now/CVE-2019-14885.md): A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. (CVSS 5.4, Red Hat JBoss EAP)
- [CVE-2019-17201](https://cve.now/CVE-2019-17201.md): FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrat (CVSS 9.0)
- [CVE-2019-17202](https://cve.now/CVE-2019-17202.md): FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrat (CVSS 8.2)
- [CVE-2019-17570](https://cve.now/CVE-2019-17570.md): An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrp (no CVSS, Apache XML-RPC · org.apache.xmlrpc:xmlrpc)
- [CVE-2019-18222](https://cve.now/CVE-2019-18222.md): The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.