# CVEs published 2020-01-26 31 CVEs were published on January 26, 2020: 0 critical, 9 high. Days are UTC. - [CVE-2020-7994](https://cve.now/CVE-2020-7994.md): Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS, dolibarr/dolibarr) - [CVE-2020-7995](https://cve.now/CVE-2020-7995.md): The htdocs/index.php?mainmenu=home login page in Dolibarr 10.0.6 allows an unlimited rate of failed authentication attempts. (no CVSS, dolibarr/dolibarr) - [CVE-2020-7996](https://cve.now/CVE-2020-7996.md): htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. (no CVSS, dolibarr/dolibarr) - [CVE-2020-7989](https://cve.now/CVE-2020-7989.md): Adive Framework 2.0.8 has admin/user/add userUsername XSS. (no CVSS) - [CVE-2020-7990](https://cve.now/CVE-2020-7990.md): Adive Framework 2.0.8 has admin/user/add userName XSS. (no CVSS) - [CVE-2020-7991](https://cve.now/CVE-2020-7991.md): Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password. (no CVSS) - [CVE-2020-7984](https://cve.now/CVE-2020-7984.md): SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from (no CVSS) - [CVE-2020-3142](https://cve.now/CVE-2020-3142.md): Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability (CVSS 7.5, Cisco Webex Meetings) - [CVE-2019-15278](https://cve.now/CVE-2019-15278.md): Cisco Finesse Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Finesse) - [CVE-2019-16003](https://cve.now/CVE-2019-16003.md): Cisco UCS Director Information Disclosure Vulnerability (CVSS 4.3, Cisco UCS Director) - [CVE-2019-16005](https://cve.now/CVE-2019-16005.md): Cisco Webex Video Mesh Node Command Injection Vulnerability (CVSS 7.2, Cisco Webex Video Mesh) - [CVE-2019-16008](https://cve.now/CVE-2019-16008.md): Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco IP Phone 7800 Series with Multiplatform Firmware) - [CVE-2019-16024](https://cve.now/CVE-2019-16024.md): Cisco Crosswork Change Automation Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Crosswork Network Change Automation) - [CVE-2019-16026](https://cve.now/CVE-2019-16026.md): Cisco Mobility Management Entity Denial of Service Vulnerability (CVSS 6.8, Cisco ASR 5000 Series Software) - [CVE-2019-15255](https://cve.now/CVE-2019-15255.md): Cisco Identity Services Engine Authorization Bypass Vulnerability (CVSS 6.5, Cisco Identity Services Engine Software) - [CVE-2019-16015](https://cve.now/CVE-2019-16015.md): Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Data Center Analytics Framework) - [CVE-2020-3134](https://cve.now/CVE-2020-3134.md): Cisco Email Security Appliance Zip Decompression Engine Denial of Service Vulnerability (CVSS 6.5, Cisco Email Security Appliance) - [CVE-2020-3131](https://cve.now/CVE-2020-3131.md): Cisco Webex Teams Adaptive Cards Denial of Service Vulnerability (CVSS 6.5, Cisco Webex Teams) - [CVE-2020-3129](https://cve.now/CVE-2020-3129.md): Cisco Unity Connection Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Unity Connection) - [CVE-2020-3121](https://cve.now/CVE-2020-3121.md): Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco 550X Series Stackable Managed Switches) - [CVE-2020-3115](https://cve.now/CVE-2020-3115.md): Cisco SD-WAN Solution Local Privilege Escalation Vulnerability (CVSS 8.8, Cisco SD-WAN Solution) - [CVE-2019-16029](https://cve.now/CVE-2019-16029.md): Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability (CVSS 8.2, Cisco Smart Software Manager On-Prem) - [CVE-2019-16027](https://cve.now/CVE-2019-16027.md): Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability (CVSS 7.7, Cisco IOS XR Software) - [CVE-2019-16022](https://cve.now/CVE-2019-16022.md): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (CVSS 8.6, Cisco IOS XR Software) - [CVE-2019-16020](https://cve.now/CVE-2019-16020.md): Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities (CVSS 8.6, Cisco IOS XR Software) - [CVE-2019-16018](https://cve.now/CVE-2019-16018.md): Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XR Software) - [CVE-2019-15989](https://cve.now/CVE-2019-15989.md): Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software) - [CVE-2020-3139](https://cve.now/CVE-2020-3139.md): Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability (CVSS 5.3, Cisco Application Policy Infrastructure Controller) - [CVE-2020-3136](https://cve.now/CVE-2020-3136.md): Cisco Jabber Guest Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Jabber Guest) - [CVE-2019-12619](https://cve.now/CVE-2019-12619.md): Cisco SD-WAN Solution SQL Injection Vulnerability (CVSS 6.4, Cisco SD-WAN Solution) - [CVE-2019-12629](https://cve.now/CVE-2019-12629.md): Cisco SD-WAN vManage Command Injection Vulnerability (CVSS 4.7, Cisco SD-WAN Solution) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-01-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.