# CVEs published 2020-01-25

12 CVEs were published on January 25, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-7981](https://cve.now/CVE-2020-7981.md): sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection when within\_bounding\_box is used in conjunction with untrusted sw\_lat, sw (no CVSS, geocoder)
- [CVE-2013-1744](https://cve.now/CVE-2013-1744.md): IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2012-6613](https://cve.now/CVE-2012-6613.md): D-Link DSR-250N devices with firmware 1.05B73\_WW allow Persistent Root Access because of the admin password for the admin account. (no CVSS)
- [CVE-2020-7980](https://cve.now/CVE-2020-7980.md): Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.c (no CVSS)
- [CVE-2012-6494](https://cve.now/CVE-2012-6494.md): Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain un (no CVSS)
- [CVE-2012-6345](https://cve.now/CVE-2012-6345.md): Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information. (no CVSS)
- [CVE-2012-6344](https://cve.now/CVE-2012-6344.md): Novell ZENworks Configuration Management before 11.2.4 allows XSS. (no CVSS)
- [CVE-2020-7596](https://cve.now/CVE-2020-7596.md): Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument. (no CVSS, codecov npm module · codecov)
- [CVE-2019-5183](https://cve.now/CVE-2019-5183.md): An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031 (no CVSS, AMD)
- [CVE-2019-5146](https://cve.now/CVE-2019-5146.md): An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13025.10004. (no CVSS, AMD)
- [CVE-2019-5147](https://cve.now/CVE-2019-5147.md): An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13003.1007. (no CVSS, AMD)
- [CVE-2019-5124](https://cve.now/CVE-2019-5124.md): An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.50005. (no CVSS, AMD)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.