CVEs published January 25, 2020
12 CVEs were published on January 25, 2020: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- AMD
- 4
- codecov npm module · codecov
- 1
- geocoder
- 1
Medium, low and unrated 12
- CVE-2020-7981sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within_bounding_box is used in conjunction with untrusted sw_lat, swgeocoder
- CVE-2013-1744IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.
- CVE-2012-6613D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.
- CVE-2020-7980Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.c
- CVE-2012-6494Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain un
- CVE-2012-6345Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
- CVE-2012-6344Novell ZENworks Configuration Management before 11.2.4 allows XSS.
- CVE-2020-7596Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.codecov npm module · codecov
- CVE-2019-5183An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031AMD
- CVE-2019-5146An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004.AMD
- CVE-2019-5147An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007.AMD
- CVE-2019-5124An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005.AMD