CVEs published January 28, 2020
110 CVEs were published on January 28, 2020: 2 critical, 5 high.
- Published
- 110
- Critical
- 2
- High
- 5
- Medium
- 14
- Low
- 4
- Unrated
- 85
- Now in CISA KEV
- 0
- Fix available
- 19
Most affected products
- IBM Security Secret Server
- 8
- GitLab CE/EE
- 6
- NetHack
- 6
- GitLab EE
- 4
- Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- 2
- GitLab
- 2
- GitLab · gitlab-shell
- 2
- Gitlab CE/EE
- 2
- IBM MQ
- 2
- Intel(R) Processors
- 2
Critical 2
- CVE-2020-4207IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 5.0.0.2 is vulnerable to a buffer overflow, caused by improper bounds checkingIBM WIoTP MessageGateway · IBM IoT MessageSight
- CVE-2019-17096Bitdefender BOX 2 bootstrap get_image_size command injection vulnerabilityBitdefender BOX
High 5
- CVE-2020-8417The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.
- CVE-2019-4707IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.IBM Security Access Manager Appliance
- CVE-2019-4631IBM Security Secret Server 10.7 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Security Secret Server
- CVE-2019-4620IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment vIBM MQ Appliance
- CVE-2019-17338TIBCO Patterns - Search Exposes Cross Site Scripting VulnerabilitiesTIBCO Software TIBCO Patterns - Search
Medium, low and unrated 103
- CVE-2020-8428fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (
- CVE-2020-5227Feedgen Vulnerable to XML Denial of Service Attackslkiesow python-feedgen · feedgen
- CVE-2020-8426The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page.
- CVE-2020-8424Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.
- CVE-2020-8425Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.
- CVE-2013-1603An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-741
- CVE-2020-5215Segmentation faultin TensorFlow when converting a Python string to tf.float16TensorFlow · tensorflow-cpu +1
- CVE-2013-1602An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5
- CVE-2020-8419An issue was discovered in Joomla! before 3.9.15.
- CVE-2020-8421An issue was discovered in Joomla! before 3.9.15.
- CVE-2020-8420An issue was discovered in Joomla! before 3.9.15.
- CVE-2013-1601An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video strea
- CVE-2013-3214vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
- CVE-2013-3212vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files
- CVE-2013-1600An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2
- CVE-2013-3093ASUS RT-N56U devices allow CSRF.
- CVE-2013-3074NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash).
- CVE-2013-3071NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.
- CVE-2013-2764Secure Entry Server before 4.7.0 contains a URI Redirection vulnerability which could allow remote attackers to conduct phishing attacks due
- CVE-2013-1599A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/
- CVE-2013-2748Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.
- CVE-2013-2714Cross-site Scripting (XSS) in WordPress podPress Plugin 8.8.10.13 could allow remote attackers to inject arbitrary web script or html via th
- CVE-2014-8490Cross-site scripting (XSS) vulnerability in TennisConnect COMPONENTS 9.927 allows remote attackers to inject arbitrary web script or HTML vi
- CVE-2015-5483Multiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack t
- CVE-2020-8315In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may rlibpython · python +1
- CVE-2019-4679IBM Content Navigator 3.0CD could allow an authenticated user to gain information about the hosting operating system and version that could IBM Content Navigator
- CVE-2019-4639IBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive IBM Security Secret Server
- CVE-2019-4638IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies.IBM Security Secret Server
- CVE-2019-4637IBM Security Secret Server 10.7 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resuIBM Security Secret Server
- CVE-2019-4636IBM Security Secret Server 10.7 could disclose sensitive information to an authenticated user from generated error messages.IBM Security Secret Server
- CVE-2019-4635IBM Security Secret Server 10.7 could allow a privileged user to perform unauthorized command injection due to imporoper input neutralizatioIBM Security Secret Server
- CVE-2019-4633IBM Security Secret Server 10.7 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy.IBM Security Secret Server
- CVE-2019-4632IBM Security Secret Server 10.7 is vulnerable to cross-site scripting.IBM Security Secret Server
- CVE-2019-4614IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by convertinIBM MQ
- CVE-2019-4568IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of serviceIBM MQ
- CVE-2015-8011Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of se
- CVE-2015-8012lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.
- CVE-2020-5211NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflowNetHack
- CVE-2020-5212NetHack MENUCOLOR configuration file option is subject to a buffer overflowNetHack
- CVE-2020-5213NetHack SYMBOL configuration file option is subject to a buffer overflowNetHack
- CVE-2020-5214NetHack error recovery after syntax error in configuration file is subject to a buffer overflowNetHack
- CVE-2020-5209NetHack command line parsing of options starting with -de and -i is subject to a buffer overflowNetHack
- CVE-2020-5210NetHack command line -w option parsing is subject to a buffer overflowNetHack
- CVE-2020-8112opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a
- CVE-2020-1940The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitApache Software Foundation Apache Jackrabbit Oak · org.apac…
- CVE-2015-7851Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do n
- CVE-2012-6609Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attac
- CVE-2012-6610Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demon
- CVE-2020-8086The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_
- CVE-2013-4861Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users
- CVE-2013-4862MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firm
- CVE-2013-4863The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code vi
- CVE-2013-4864MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bi
- CVE-2013-4865Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to
- CVE-2013-2060The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URLRed Hat OpenShift Origin
- CVE-2013-0294packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remotpyrad
- CVE-2014-2898wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers
- CVE-2014-2897The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows re
- CVE-2014-2896The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified
- CVE-2014-2906The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute
- CVE-2014-3856The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain
- CVE-2014-2914fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attack
- CVE-2013-4582The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4GitLab · gitlab-shell
- CVE-2013-4583The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.GitLab · gitlab-shell
- CVE-2014-3230The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackerslibwww-perl LWP::Protocol::https
- CVE-2013-6451Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attaWikimedia Foundation MediaWiki
- CVE-2013-6455The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernWikimedia Foundation MediaWiki
- CVE-2013-2571Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a craft
- CVE-2012-6114The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or git-extras
- CVE-2013-1895The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authenticatiopy-bcrypt
- CVE-2013-1437Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code vPerl Toolchain Gang Module-Metadata
- CVE-2014-2581Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edi
- CVE-2014-3445backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to
- CVE-2020-7934In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are alcom.liferay.portal:release.portal.bom
- CVE-2020-7799An issue was discovered in FusionAuth before 1.11.0.
- CVE-2020-5523Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, andNTT Data 'MyPallete' and some of the Android banking applic…
- CVE-2020-7998An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS.
- CVE-2020-7997ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.
- CVE-2019-5472An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epGitLab
- CVE-2019-5470An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could resulGitLab
- CVE-2019-15578An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE).GitLab CE/EE
- CVE-2019-15579An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where thGitLab CE/EE
- CVE-2019-5468An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used wiGiltLab GitLab
- CVE-2019-15581An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project ownGitLab EE
- CVE-2019-5466An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.GitLab CE/EE
- CVE-2019-15582An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maiGitLab EE
- CVE-2019-15590An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where privGitLab EE
- CVE-2019-5474An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridGitLab EE
- CVE-2019-5465An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosGitLab CE/EE
- CVE-2019-15583An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE).GitLab CE/EE
- CVE-2019-5464A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF wheGitLab CE/EE
- CVE-2019-15585Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitGitlab CE/EE
- CVE-2019-5462A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has chaGitLab Community Edition and GitLab Enterprise Edition
- CVE-2019-15586A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin.Gitlab CE/EE
- CVE-2019-15607A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Thnode-red
- CVE-2019-17651An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM versFortinet FortiSIEM
- CVE-2020-1932An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1.Apache Software Foundation Apache Superset · apache-superset
- CVE-2020-1933A XSS vulnerability was found in Apache NiFi 1.0.0 to 1.10.0.Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2020-1928An information disclosure vulnerability was found in Apache NiFi 1.10.0.Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2019-10770All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS).io.ratpack:ratpack-core
- CVE-2019-10779All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting.stroom:stroom-app
- CVE-2020-0549Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information dIntel(R) Processors
- CVE-2020-0548Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Intel(R) Processors