CVEs published February 8, 2020
21 CVEs were published on February 8, 2020: 0 critical, 1 high.
- Published
- 21
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 2
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Canonical apport
- 4
- Basic webmail module
- 1
- blueimp/jquery-file-upload
- 1
- Canonical whoopsie
- 1
- KDE Konqueror
- 1
- MediaWiki
- 1
- stdlib
- 1
High 1
Medium, low and unrated 20
- CVE-2012-5570The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to rBasic webmail module
- CVE-2012-4512The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possiblyKDE Konqueror
- CVE-2015-5741The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to condustdlib
- CVE-2012-4381MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier for context-dependenMediaWiki
- CVE-2012-4029Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers to inject arbitrary
- CVE-2015-2207Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to
- CVE-2015-3423Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbit
- CVE-2014-8739Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creblueimp/jquery-file-upload
- CVE-2015-2062Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to
- CVE-2014-7863The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 1
- CVE-2015-1394Multiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for WordPress allow remote authenticated users
- CVE-2014-9127Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to
- CVE-2014-9126Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web scri
- CVE-2014-9470Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allo
- CVE-2014-2225Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hija
- CVE-2011-3642Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and
- CVE-2019-11485apport created lock file in wrong directoryCanonical apport
- CVE-2019-11484Integer overflow in bson_ensure_spaceCanonical whoopsie
- CVE-2019-11482Race condition between reading current working directory and writing a core dumpCanonical apport
- CVE-2019-11481Apport reads arbitrary files if ~/.config/apport/settings is a symlinkCanonical apport